Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File: gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier: H0nRyotf+BPVWxHPmx23vE1iLV8AsWvDozssyp/EF2g=
Subject key identifier: C2:3C:7F:00:51:21:5B:7D:BC:81:81:BA:7F:FB:66:68:0D:78:5C:8F
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 0194C3F54E6DB4703B8C4D3B8A3452233951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number: 138A
Signing time: Sun 02 Feb 2025 00:00:21 +0000
Manifest this update: Sun 02 Feb 2025 00:00:21 +0000
Manifest next update: Mon 03 Feb 2025 00:00:21 +0000
Files and hashes: 1: 7bfhk4avMv3aXwEYlLbXhXoy75k.roa (hash: ahW1+x6JyHSj5mcCjtaoHK41xJuZSnTDOh9RfWnmSUA=)
2: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: 3u2deF1LBx6QcZmx22kjAGYJSVVLon7nkQK4UfZfFNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:4e:6d:b4:70:3b:8c:4d:3b:8a:34:52:23:39:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: Feb 2 00:00:21 2025 GMT
Not After : Feb 3 00:00:21 2025 GMT
Subject: CN=c23c7f0051215b7dbc8181ba7ffb66680d785c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:78:54:30:08:4e:ad:28:a6:ae:b8:24:3c:
dc:e7:1b:8e:16:48:04:64:b1:f6:ed:af:8a:d0:52:
83:98:6b:95:e4:fc:9b:14:8b:cd:26:50:35:bc:2d:
8b:0c:3d:c3:b7:1c:01:ad:c9:a7:ce:36:6e:ef:65:
88:31:3e:b2:59:d9:73:ff:4a:7f:51:64:36:fd:e9:
99:5a:be:91:8a:dd:08:72:9a:77:0f:ae:af:51:f6:
2b:6a:62:91:29:a7:ac:7f:e6:74:39:57:5d:45:06:
6c:ec:87:4c:5f:86:58:68:f1:80:de:30:59:1f:96:
b4:d7:25:55:91:a0:cd:75:95:90:b3:22:86:7b:68:
9d:b4:4f:c5:2f:2f:df:2a:63:a8:4e:41:33:f5:59:
eb:f1:72:32:16:9a:bd:51:ed:55:cf:f4:cb:4f:25:
bb:1d:c1:77:18:5d:5c:c1:ec:d9:f7:48:1f:79:15:
17:c5:81:15:f3:05:3f:9d:fe:6b:b9:87:9a:75:97:
ab:12:25:43:11:eb:2d:6e:2f:34:09:80:0b:a8:5c:
3a:4f:9a:c2:28:78:8a:0f:1a:1c:5f:e8:bc:6c:74:
60:e1:56:0a:e5:75:e8:f6:cb:03:69:56:2b:d0:f8:
99:1a:90:23:45:17:4b:89:eb:d4:a6:90:76:fc:d1:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:7F:00:51:21:5B:7D:BC:81:81:BA:7F:FB:66:68:0D:78:5C:8F
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1d:13:4b:a7:02:aa:65:74:98:fb:63:7d:08:a8:1c:69:d1:
66:55:09:da:c4:ae:5e:b4:2a:0a:00:39:33:43:fb:6a:91:97:
12:92:cc:e8:42:eb:a2:de:6f:dd:10:71:e4:9f:d4:8e:6c:b5:
d9:98:cc:ef:6f:51:6c:a2:bf:b2:28:8a:e9:e4:4a:be:38:f8:
9b:24:50:48:d1:90:38:a1:08:35:2e:0a:e9:ec:5b:ba:7d:cc:
3e:38:e5:e0:f8:89:9a:e7:bb:14:2f:ae:27:97:27:ca:ed:ee:
06:1b:31:33:95:e9:86:37:1f:fe:4c:ce:cc:0a:76:27:f8:3b:
fb:c2:50:a0:9b:ea:bf:e7:65:4f:9b:94:76:aa:6d:49:f9:33:
2d:eb:40:b3:77:fa:d1:10:27:3e:3a:34:a0:46:1a:8b:e8:11:
c0:e4:5e:30:1b:13:b4:82:c6:7c:16:94:83:d2:2f:e2:5c:92:
2c:cb:34:c6:45:1d:34:70:c2:87:99:f0:ed:e6:e6:0c:24:31:
84:01:05:27:22:58:f3:74:72:40:f4:44:dd:4c:3a:64:65:80:
20:bc:3f:c6:e2:47:8f:8d:07:17:1a:7c:07:c7:83:a7:e8:a6:
d2:17:c3:db:49:f9:5c:b5:08:70:fd:79:45:7d:62:96:20:e9:
28:84:0d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9U5ttHA7jE07ijRSIzlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNDY4YjUzOTY3NTQ1ZTI4ZTkyNjdjY2JmMDA2OWQ4N2Iy
NTk4NjkwHhcNMjUwMjAyMDAwMDIxWhcNMjUwMjAzMDAwMDIxWjAzMTEwLwYDVQQD
EyhjMjNjN2YwMDUxMjE1YjdkYmM4MTgxYmE3ZmZiNjY2ODBkNzg1YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPZ4VDAITq0opq64JDzc5xuOFkgE
ZLH27a+K0FKDmGuV5PybFIvNJlA1vC2LDD3DtxwBrcmnzjZu72WIMT6yWdlz/0p/
UWQ2/emZWr6Rit0Icpp3D66vUfYramKRKaesf+Z0OVddRQZs7IdMX4ZYaPGA3jBZ
H5a01yVVkaDNdZWQsyKGe2idtE/FLy/fKmOoTkEz9Vnr8XIyFpq9Ue1Vz/TLTyW7
HcF3GF1cwezZ90gfeRUXxYEV8wU/nf5ruYeadZerEiVDEestbi80CYALqFw6T5rC
KHiKDxocX+i8bHRg4VYK5XXo9ssDaVYr0PiZGpAjRRdLievUppB2/NEiUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMI8fwBRIVt9vIGBun/7ZmgNeFyPMB8GA1UdIwQY
MBaAFIJGi1OWdUXijpJnzL8Aadh7JZhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85Y2RhY2YtNTNlOS00MTM5LWJiNGEt
OGFjMmJhZjY5NmM4LzEvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85Y2RhY2YtNTNlOS00MTM5LWJiNGEtOGFjMmJhZjY5NmM4
LzEvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx0TS6cC
qmV0mPtjfQioHGnRZlUJ2sSuXrQqCgA5M0P7apGXEpLM6ELrot5v3RBx5J/Ujmy1
2ZjM729RbKK/siiK6eRKvjj4myRQSNGQOKEINS4K6exbun3MPjjl4PiJmue7FC+u
J5cnyu3uBhsxM5Xphjcf/kzOzAp2J/g7+8JQoJvqv+dlT5uUdqptSfkzLetAs3f6
0RAnPjo0oEYai+gRwOReMBsTtILGfBaUg9Iv4lySLMs0xkUdNHDCh5nw7ebmDCQx
hAEFJyJY83RyQPRE3Uw6ZGWAILw/xuJHj40HFxp8B8eDp+im0hfD20n5XLUIcP15
RX1iliDpKIQNVA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:47 2025 by rpki-client