Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: nmAHFWjUC5Z/oru7Yfwp81N78SlCifLQoQnlAVsNMeU=
Subject key identifier: 20:44:B6:19:79:A7:AB:71:68:57:6A:BB:0B:A7:25:71:86:A4:04:2D
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019364442FE821C9A6085636199607451DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 06B9
Signing time: Mon 25 Nov 2024 17:00:10 +0000
Manifest this update: Mon 25 Nov 2024 17:00:10 +0000
Manifest next update: Tue 26 Nov 2024 17:00:10 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: NZZviIEWi3YsdGV2/24PMljROkJet9BXXoRRcKXWY+s=)
2: we3oh0ca3x9xbzcwYF_i324-DKw.roa (hash: d46rafyrjmexIV7eB9b4+ZJpUTuWTS9oXo3DtFTOTrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:44:2f:e8:21:c9:a6:08:56:36:19:96:07:45:1d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Nov 25 17:00:10 2024 GMT
Not After : Nov 26 17:00:10 2024 GMT
Subject: CN=2044b61979a7ab7168576abb0ba7257186a4042d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:17:89:a5:dc:7a:53:90:36:79:4b:ae:7b:
22:3e:c9:b8:2e:62:a4:c8:90:c9:72:05:fb:79:83:
a4:bb:b6:ad:8b:ed:2d:fe:8a:85:f8:91:8b:53:b0:
8c:e0:13:2c:69:64:d5:85:0f:d4:b9:70:d1:3a:46:
e4:7f:4e:0d:67:c0:8e:e3:39:e1:f1:b0:0b:60:d9:
8d:b7:f6:29:55:35:21:ab:06:3b:7a:65:d3:63:10:
2b:63:36:6d:a6:52:9e:a5:58:7c:ae:31:df:c7:0b:
fb:84:50:1f:8f:22:e2:7b:43:0b:c3:59:11:47:5b:
9c:ac:a1:4d:16:b6:0c:9d:c2:31:3e:51:b2:05:e4:
ec:c9:05:d0:5f:40:e8:aa:08:88:0f:c5:6c:70:1b:
3d:ae:39:13:63:15:2c:8d:66:4a:7b:8c:d0:f6:50:
79:61:a9:8a:35:1d:7a:1b:54:36:1a:1f:d1:ac:e9:
ec:7e:f7:1e:5f:ee:64:15:7b:26:92:a2:92:98:1b:
97:8a:4b:81:a5:37:ca:b6:cf:7e:1b:2a:db:ed:91:
b2:a2:27:e5:50:2a:02:46:c3:ee:9c:72:85:ad:4d:
fc:ea:f0:d1:cb:f3:89:97:66:c6:67:41:d3:b0:cb:
af:74:87:4b:84:2e:8d:a6:71:f7:6e:60:04:c1:6e:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:44:B6:19:79:A7:AB:71:68:57:6A:BB:0B:A7:25:71:86:A4:04:2D
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:93:12:b3:9b:5f:cd:11:5c:03:37:da:36:0d:59:be:72:54:
78:58:35:1c:1f:96:73:6e:61:ef:ee:62:af:ff:48:b9:e3:b7:
b2:8e:26:3e:92:5d:e4:b2:5f:a5:b8:5f:de:9a:92:c4:f7:d3:
79:d7:b3:53:27:72:9d:3b:70:a6:98:cc:b4:dc:c5:0e:0a:5f:
f6:81:95:fe:ce:77:c1:b0:8d:39:95:c9:fb:0f:29:91:b6:11:
3d:f9:d4:4d:a4:c1:7c:c4:da:0d:1f:d6:47:25:2c:5a:dc:4b:
02:03:31:17:4d:ae:30:44:7a:1a:b7:62:cb:b7:10:02:35:92:
5a:f1:66:24:58:76:16:96:0f:80:d8:95:98:f3:a8:fc:66:65:
b4:46:a5:5d:fb:10:ac:75:d4:7b:c4:f0:56:13:73:4f:63:e8:
67:8c:2c:f8:0d:c7:6b:8c:38:2c:ae:ea:34:3a:6d:d5:2c:a8:
22:61:e5:43:91:3c:e7:6a:09:07:c3:b1:82:65:3c:09:ba:0f:
32:a2:f4:b4:01:ac:be:47:3a:d7:c0:3a:78:17:56:4f:9d:23:
9d:50:eb:f2:08:2e:18:7a:2d:dc:96:2c:4b:06:7a:8e:e0:52:
7f:14:f4:93:8e:1b:c4:50:0e:1b:7b:8a:61:30:78:a8:6f:a9:
34:35:8e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkRC/oIcmmCFY2GZYHRR3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2
OTRjODQwHhcNMjQxMTI1MTcwMDEwWhcNMjQxMTI2MTcwMDEwWjAzMTEwLwYDVQQD
EygyMDQ0YjYxOTc5YTdhYjcxNjg1NzZhYmIwYmE3MjU3MTg2YTQwNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgIXiaXcelOQNnlLrnsiPsm4LmKk
yJDJcgX7eYOku7ati+0t/oqF+JGLU7CM4BMsaWTVhQ/UuXDROkbkf04NZ8CO4znh
8bALYNmNt/YpVTUhqwY7emXTYxArYzZtplKepVh8rjHfxwv7hFAfjyLie0MLw1kR
R1ucrKFNFrYMncIxPlGyBeTsyQXQX0DoqgiID8VscBs9rjkTYxUsjWZKe4zQ9lB5
YamKNR16G1Q2Gh/RrOnsfvceX+5kFXsmkqKSmBuXikuBpTfKts9+Gyrb7ZGyoifl
UCoCRsPunHKFrU386vDRy/OJl2bGZ0HTsMuvdIdLhC6NpnH3bmAEwW5TOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBEthl5p6txaFdquwunJXGGpAQtMB8GA1UdIwQY
MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt
Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4
LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZMSs5tf
zRFcAzfaNg1ZvnJUeFg1HB+Wc25h7+5ir/9IueO3so4mPpJd5LJfpbhf3pqSxPfT
edezUydynTtwppjMtNzFDgpf9oGV/s53wbCNOZXJ+w8pkbYRPfnUTaTBfMTaDR/W
RyUsWtxLAgMxF02uMER6Grdiy7cQAjWSWvFmJFh2FpYPgNiVmPOo/GZltEalXfsQ
rHXUe8TwVhNzT2PoZ4ws+A3Ha4w4LK7qNDpt1SyoImHlQ5E852oJB8OxgmU8CboP
MqL0tAGsvkc618A6eBdWT50jnVDr8gguGHot3JYsSwZ6juBSfxT0k44bxFAOG3uK
YTB4qG+pNDWOBw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:27:30 2024 by rpki-client on console-ams.rpki-client.org