Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: Vw3Ip1HWnpLuKOlYNoa6Y5NosDUP4RPuj/yIo0jZml8=
Subject key identifier: 67:CC:A4:2D:06:D9:FB:3C:43:03:18:28:BE:57:BC:5F:D9:4A:38:D5
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 019512472D8EF770C51FFBE4805121305EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 05:00:09 +0000
Manifest this update: Mon 17 Feb 2025 05:00:09 +0000
Manifest next update: Tue 18 Feb 2025 05:00:09 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: MQanmgijvcNePlUGDQLu/i1J8fAVi/Qd5PKt694AiOE=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:2d:8e:f7:70:c5:1f:fb:e4:80:51:21:30:5e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Feb 17 05:00:09 2025 GMT
Not After : Feb 18 05:00:09 2025 GMT
Subject: CN=67cca42d06d9fb3c43031828be57bc5fd94a38d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:cb:82:43:7a:52:e3:78:9c:5e:a4:54:4a:
78:d4:58:de:7c:ca:74:45:52:93:d3:e3:df:70:5b:
dc:92:72:25:b7:63:e9:3a:c4:18:9a:6f:26:50:4e:
1e:82:14:8a:c6:2a:05:6d:f3:0c:5a:ad:c4:0e:ff:
c1:af:4f:02:79:c2:18:64:f2:b8:fd:8a:8e:6c:9c:
30:ce:d1:0f:f9:aa:26:f9:b5:b9:a8:be:73:93:47:
20:cc:e4:74:06:93:7c:df:78:16:e1:83:1b:57:b5:
a2:46:23:22:bd:7a:bf:14:13:d5:bf:27:6a:f2:a3:
d6:0c:cf:ba:11:5d:11:bc:86:25:54:44:0f:d5:52:
74:43:af:3a:cd:3c:97:69:36:04:3e:1c:fc:f3:2e:
7c:5e:c7:64:d1:cc:af:5a:36:c9:28:7e:42:ab:d3:
95:67:f5:dc:d1:6c:12:87:2b:d9:20:d7:01:84:af:
f3:37:94:80:c8:dc:48:3c:3c:b1:95:bf:1d:0a:3d:
6a:34:9a:21:52:97:07:1a:8e:13:74:87:dc:4b:51:
d7:72:21:df:de:a6:14:07:35:59:fa:46:0e:ce:3a:
67:b2:08:46:9c:48:c4:cc:0d:98:79:85:aa:10:6b:
83:71:9b:fe:88:b2:bd:79:d7:b6:8f:a1:13:f6:b0:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:A4:2D:06:D9:FB:3C:43:03:18:28:BE:57:BC:5F:D9:4A:38:D5
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ea:a8:63:8a:03:36:1d:e2:27:ce:ea:4b:ab:c4:77:6c:03:
bb:ff:61:fa:36:73:a9:7f:5d:04:89:51:ce:35:82:0a:db:bf:
50:41:cd:64:cb:77:32:bb:66:16:18:fd:45:2d:97:67:6a:9a:
a1:70:06:98:60:79:b5:b7:ea:a8:62:38:59:60:b0:f3:5c:1b:
dd:94:da:cd:a7:85:dd:15:25:40:c9:92:85:b0:38:fa:ea:81:
b4:b2:75:d5:88:f2:62:9f:74:62:f7:87:f1:32:18:b9:73:87:
00:6d:b1:d5:ab:12:0d:53:bf:0f:ad:74:72:78:96:3e:59:bf:
71:5a:5f:d9:9b:bf:e3:00:e0:c7:68:8d:a6:23:cd:34:ab:a6:
1c:da:7e:63:4b:f3:ed:67:da:29:6e:a2:73:7c:13:2d:23:31:
05:6c:8c:87:bf:90:ec:6f:7a:50:de:ae:84:18:f4:52:27:6d:
43:3c:b7:2a:60:78:55:26:09:7e:06:35:c7:ec:6d:7f:59:d3:
a5:11:a4:73:85:f9:7b:8f:91:6a:6b:61:40:5a:43:9f:92:c5:
92:27:2b:e9:bf:dd:90:d8:fa:f0:03:24:6e:8a:d7:73:8a:dd:
d4:1b:ac:5f:1f:95:2d:8f:5a:80:91:5e:9d:0d:5b:41:00:72:
19:03:23:61
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZUSRy2O93DFH/vkgFEhMF6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDE4NjNjYmRlYzFiNTk2ZGFjZWViOTAxYTA4NTNkNmM4
N2U3NTYwHhcNMjUwMjE3MDUwMDA5WhcNMjUwMjE4MDUwMDA5WjAzMTEwLwYDVQQD
Eyg2N2NjYTQyZDA2ZDlmYjNjNDMwMzE4MjhiZTU3YmM1ZmQ5NGEzOGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42jLgkN6UuN4nF6kVEp41FjefMp0
RVKT0+PfcFvcknIlt2PpOsQYmm8mUE4eghSKxioFbfMMWq3EDv/Br08CecIYZPK4
/YqObJwwztEP+aom+bW5qL5zk0cgzOR0BpN833gW4YMbV7WiRiMivXq/FBPVvydq
8qPWDM+6EV0RvIYlVEQP1VJ0Q686zTyXaTYEPhz88y58Xsdk0cyvWjbJKH5Cq9OV
Z/Xc0WwShyvZINcBhK/zN5SAyNxIPDyxlb8dCj1qNJohUpcHGo4TdIfcS1HXciHf
3qYUBzVZ+kYOzjpnsghGnEjEzA2YeYWqEGuDcZv+iLK9ede2j6ET9rAwZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGfMpC0G2fs8QwMYKL5XvF/ZSjjVMB8GA1UdIwQY
MBaAFPrRhjy97BtZbazuuQGghT1sh+dWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10R0dQTDNzRzFsdHJPNjVBYUNGUFd5SDUxWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZGRkYTdlLWEwMzctNGQzOC05NTU1
LTBhMTEwYzQ5NzQ5Yy8xLzEtdEdHUEwzc0cxbHRyTzY1QWFDRlBXeUg1MVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmL2RkZGE3ZS1hMDM3LTRkMzgtOTU1NS0wYTExMGM0OTc0
OWMvMS8xLXRHR1BMM3NHMWx0ck82NUFhQ0ZQV3lINTFZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOqo
Y4oDNh3iJ87qS6vEd2wDu/9h+jZzqX9dBIlRzjWCCtu/UEHNZMt3MrtmFhj9RS2X
Z2qaoXAGmGB5tbfqqGI4WWCw81wb3ZTazaeF3RUlQMmShbA4+uqBtLJ11YjyYp90
YveH8TIYuXOHAG2x1asSDVO/D610cniWPlm/cVpf2Zu/4wDgx2iNpiPNNKumHNp+
Y0vz7WfaKW6ic3wTLSMxBWyMh7+Q7G96UN6uhBj0UidtQzy3KmB4VSYJfgY1x+xt
f1nTpRGkc4X5e4+RamthQFpDn5LFkicr6b/dkNj68AMkborXc4rd1BusXx+VLY9a
gJFenQ1bQQByGQMjYQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:14 2025 by rpki-client