Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: SEHnccLbbM/b1JRhatF0LJqVve7B5rN41pXOdwICYcA=
Subject key identifier: 49:71:ED:F7:40:1B:50:B9:30:8B:80:E6:5E:AA:86:09:55:7B:AA:09
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 0194C319CA5A6EB59ED7FDEF5ECD34D33A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 0EDA
Signing time: Sat 01 Feb 2025 20:00:34 +0000
Manifest this update: Sat 01 Feb 2025 20:00:34 +0000
Manifest next update: Sun 02 Feb 2025 20:00:34 +0000
Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: Q04KfD/Pqxr5rQTLw33TNE8+MD753S5l5fxQ6zQzY8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:ca:5a:6e:b5:9e:d7:fd:ef:5e:cd:34:d3:3a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: Feb 1 20:00:34 2025 GMT
Not After : Feb 2 20:00:34 2025 GMT
Subject: CN=4971edf7401b50b9308b80e65eaa8609557baa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:11:9a:bb:42:12:30:f3:03:49:07:f5:6b:
8a:55:84:55:31:87:94:83:c3:17:1c:7a:b2:8e:26:
6d:c6:fc:33:46:0f:46:dc:7e:d2:59:8e:de:57:d5:
e3:5e:09:83:da:89:6b:40:10:ff:4e:cd:7c:ab:67:
da:a8:80:45:1c:fa:20:3a:2b:74:c2:a6:23:0e:78:
12:56:aa:1e:80:24:af:64:1c:84:9c:42:40:fb:18:
5d:15:bc:51:5b:39:e7:5a:39:2b:44:b0:e7:2b:1f:
aa:c0:12:c3:77:f0:0b:3c:41:6a:89:4a:a5:ae:86:
84:ec:bf:ac:70:ef:93:9c:b9:47:d5:3b:c1:01:1d:
3e:23:fd:8f:37:ff:43:45:87:8e:80:1a:ee:42:89:
52:67:f0:b8:b4:fd:c3:b9:b7:18:34:7e:cf:d4:bf:
29:86:90:92:ef:9e:61:9a:18:2a:c7:a8:53:e8:3b:
dd:c0:34:46:5d:9f:77:64:1a:be:cb:a6:0a:00:d5:
8d:8a:07:44:b8:a4:95:69:79:f7:e9:2f:f3:09:66:
cd:8c:e3:c7:29:d8:2f:23:b3:37:a7:20:05:b6:02:
42:03:1a:0e:c4:cf:83:bb:fd:d7:dd:5c:6d:76:6a:
41:a1:65:6d:a3:3c:05:56:b8:17:57:5b:57:8f:ca:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:71:ED:F7:40:1B:50:B9:30:8B:80:E6:5E:AA:86:09:55:7B:AA:09
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2f:44:13:e2:7f:36:7e:ed:b5:e9:b7:02:c8:65:84:86:8f:
47:d2:b3:e1:3a:3d:86:49:a8:68:0e:d4:c8:b9:6d:51:f4:03:
51:50:e7:8a:36:e8:32:cc:3d:ae:1d:36:f5:f0:c6:3e:21:29:
60:b0:55:2d:37:0b:a9:a4:54:47:ab:64:f3:8d:0c:65:ec:09:
5e:58:da:02:bd:c6:e5:05:94:c5:e0:ed:54:cc:30:1f:8c:28:
97:97:bd:39:6c:f8:02:ec:a6:bd:14:15:12:36:f3:08:53:1d:
fa:d9:81:fe:59:50:c5:e8:29:92:b0:73:b9:8d:c3:14:d6:84:
f1:22:eb:64:ab:48:19:0d:0c:71:bc:da:a2:60:14:e2:bb:84:
ea:8d:cb:7a:9f:a8:4f:b2:f8:ff:05:16:6a:1e:ae:78:d8:8a:
20:63:df:3d:d0:e1:0a:48:2c:e8:55:e7:0b:b8:e0:76:84:e7:
31:b2:54:82:63:fe:a1:6a:7d:a0:ee:4c:32:b6:ce:bb:c6:74:
f1:24:f2:43:d1:05:a3:51:28:14:aa:b5:00:47:ce:ba:99:84:
19:54:00:6a:43:11:3a:aa:32:0d:7c:a9:d7:38:c1:df:d8:fd:
33:a3:b1:de:8b:f3:ce:aa:5d:05:33:28:75:f9:21:b3:27:83:
82:54:82:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDGcpabrWe1/3vXs000zpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMTZjY2IxYWM3N2M3YzAyYTRlZGU2MDZkZjFmN2VmOTcz
YTBiZjkwHhcNMjUwMjAxMjAwMDM0WhcNMjUwMjAyMjAwMDM0WjAzMTEwLwYDVQQD
Eyg0OTcxZWRmNzQwMWI1MGI5MzA4YjgwZTY1ZWFhODYwOTU1N2JhYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnERmrtCEjDzA0kH9WuKVYRVMYeU
g8MXHHqyjiZtxvwzRg9G3H7SWY7eV9XjXgmD2olrQBD/Ts18q2faqIBFHPogOit0
wqYjDngSVqoegCSvZByEnEJA+xhdFbxRWznnWjkrRLDnKx+qwBLDd/ALPEFqiUql
roaE7L+scO+TnLlH1TvBAR0+I/2PN/9DRYeOgBruQolSZ/C4tP3DubcYNH7P1L8p
hpCS755hmhgqx6hT6DvdwDRGXZ93ZBq+y6YKANWNigdEuKSVaXn36S/zCWbNjOPH
KdgvI7M3pyAFtgJCAxoOxM+Du/3X3VxtdmpBoWVtozwFVrgXV1tXj8rLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElx7fdAG1C5MIuA5l6qhglVe6oJMB8GA1UdIwQY
MBaAFIAWzLGsd8fAKk7eYG3x9++XOgv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUt
YTk2NmFlODU2OTI2LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUtYTk2NmFlODU2OTI2
LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAty9EE+J/
Nn7ttem3AshlhIaPR9Kz4To9hkmoaA7UyLltUfQDUVDnijboMsw9rh029fDGPiEp
YLBVLTcLqaRUR6tk840MZewJXljaAr3G5QWUxeDtVMwwH4wol5e9OWz4AuymvRQV
EjbzCFMd+tmB/llQxegpkrBzuY3DFNaE8SLrZKtIGQ0McbzaomAU4ruE6o3Lep+o
T7L4/wUWah6ueNiKIGPfPdDhCkgs6FXnC7jgdoTnMbJUgmP+oWp9oO5MMrbOu8Z0
8STyQ9EFo1EoFKq1AEfOupmEGVQAakMROqoyDXyp1zjB39j9M6Ox3ovzzqpdBTMo
dfkhsyeDglSCcg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:01:27 2025 by rpki-client