Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: fj78qwQGULZ+vBUlMB7bCjHIRriK8/QDcgC8iHQxLE8=
Subject key identifier: B2:21:3E:88:68:3A:2F:9A:CD:65:E8:96:FA:96:17:ED:EB:BB:47:31
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 0195116BBD3F3065322E19E84022526A8A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 0D13
Signing time: Mon 17 Feb 2025 01:00:28 +0000
Manifest this update: Mon 17 Feb 2025 01:00:28 +0000
Manifest next update: Tue 18 Feb 2025 01:00:28 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: HfSowPS2xM5BLza4qe0RIOmdhwMCbhRw2v9t1qLVFfM=)
2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:bd:3f:30:65:32:2e:19:e8:40:22:52:6a:8a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Feb 17 01:00:28 2025 GMT
Not After : Feb 18 01:00:28 2025 GMT
Subject: CN=b2213e88683a2f9acd65e896fa9617edebbb4731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:64:00:d8:9b:a6:91:2e:56:6d:6c:73:28:
d9:57:e4:46:0b:3e:25:f6:89:07:1c:64:e0:f5:fa:
77:11:3e:5e:9d:ed:e5:3c:a7:33:06:b3:db:d1:f5:
e3:46:57:48:f7:9c:00:c8:14:a7:c7:b4:45:1b:0c:
2b:e7:fe:b8:da:69:6d:1a:1c:36:30:04:87:de:d2:
a2:73:66:43:f2:63:97:68:a4:33:ba:b0:d3:17:b2:
8e:d0:00:6a:d9:99:29:71:32:7e:72:4e:c9:5b:09:
d1:ae:05:db:e7:7f:6c:78:02:61:96:84:c9:2d:6b:
0c:c2:e3:78:67:2b:f8:18:5a:e2:e4:25:36:8a:86:
8e:ff:82:f9:f5:15:91:76:fc:10:3f:51:95:50:89:
bb:c2:b6:87:46:65:a7:8c:df:9e:d5:36:d9:03:a4:
b7:82:9a:1f:66:fa:61:c3:c5:ef:82:48:28:86:6e:
84:a6:03:d8:6f:90:7e:b2:fe:9e:39:bf:a1:f4:eb:
5a:34:6e:3c:d2:97:fe:33:89:d3:ae:78:92:4d:f8:
7e:b0:a4:c7:c3:96:72:6d:8f:e1:da:9f:67:eb:b3:
7d:9d:24:6f:7f:cd:d7:97:b4:d8:87:4d:5e:f6:1f:
d2:bb:78:6e:81:34:9e:3b:fb:45:6c:9e:4f:ca:b3:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:3E:88:68:3A:2F:9A:CD:65:E8:96:FA:96:17:ED:EB:BB:47:31
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ad:ab:73:3a:4b:e8:fe:fb:9f:9a:b2:e7:33:70:35:1b:91:
0f:d0:4d:89:75:63:65:0c:6e:78:a8:39:b1:50:d5:50:ba:c7:
7b:91:1e:4a:72:d6:7b:6d:e4:27:03:bf:78:d8:54:bd:90:00:
f0:22:22:f2:38:77:cb:c6:37:73:96:92:30:8e:c9:2e:8b:e1:
da:96:c5:34:e8:69:61:6a:b2:41:af:fd:1d:ae:a1:87:57:01:
ed:97:e0:2d:28:cd:21:28:47:4c:84:f1:c6:51:3b:11:ce:36:
b1:f7:a6:d5:33:16:82:89:5e:c8:47:9a:e9:97:0f:42:73:ed:
1d:f2:9d:04:02:98:52:ca:cb:07:ae:7c:38:5f:2f:d1:8b:18:
59:d8:72:19:84:b3:df:57:da:38:57:ae:72:cf:38:74:e3:7b:
cb:73:2c:a4:66:79:b1:6b:26:5b:9b:e7:99:4b:b7:23:b6:be:
c2:96:a4:c9:d1:79:12:c8:90:1c:c5:d7:06:e6:50:57:7c:38:
87:b5:8e:58:25:7f:e1:6e:79:03:d5:c6:e4:05:df:5c:fc:27:
8a:ce:5d:22:80:41:d1:2e:3c:cb:b2:3d:fd:ce:c9:39:06:ae:
4c:24:9b:77:4c:c5:ab:c0:ff:ad:f0:07:36:a9:29:7d:65:07:
ff:18:c9:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa70/MGUyLhnoQCJSaoqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMWI0YjVjMmRhYWE2ZmMzNTA3MWY0MzhmOTY4YWY2ZmY2
Y2E0ZGEwHhcNMjUwMjE3MDEwMDI4WhcNMjUwMjE4MDEwMDI4WjAzMTEwLwYDVQQD
EyhiMjIxM2U4ODY4M2EyZjlhY2Q2NWU4OTZmYTk2MTdlZGViYmI0NzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qdkANibppEuVm1scyjZV+RGCz4l
9okHHGTg9fp3ET5ene3lPKczBrPb0fXjRldI95wAyBSnx7RFGwwr5/642mltGhw2
MASH3tKic2ZD8mOXaKQzurDTF7KO0ABq2ZkpcTJ+ck7JWwnRrgXb539seAJhloTJ
LWsMwuN4Zyv4GFri5CU2ioaO/4L59RWRdvwQP1GVUIm7wraHRmWnjN+e1TbZA6S3
gpofZvphw8Xvgkgohm6EpgPYb5B+sv6eOb+h9OtaNG480pf+M4nTrniSTfh+sKTH
w5ZybY/h2p9n67N9nSRvf83Xl7TYh01e9h/Su3hugTSeO/tFbJ5PyrMBEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIhPohoOi+azWXolvqWF+3ru0cxMB8GA1UdIwQY
MBaAFBsbS1wtqqb8NQcfQ4+Wivb/bKTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMt
YTEyNDZjNjdkOWRlLzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kZGFjMGQtMzc0My00Y2QyLWE2YTMtYTEyNDZjNjdkOWRl
LzEvR3h0TFhDMnFwdncxQng5RGo1YUs5djlzcE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAna2rczpL
6P77n5qy5zNwNRuRD9BNiXVjZQxueKg5sVDVULrHe5EeSnLWe23kJwO/eNhUvZAA
8CIi8jh3y8Y3c5aSMI7JLovh2pbFNOhpYWqyQa/9Ha6hh1cB7ZfgLSjNIShHTITx
xlE7Ec42sfem1TMWgoleyEea6ZcPQnPtHfKdBAKYUsrLB658OF8v0YsYWdhyGYSz
31faOFeucs84dON7y3MspGZ5sWsmW5vnmUu3I7a+wpakydF5EsiQHMXXBuZQV3w4
h7WOWCV/4W55A9XG5AXfXPwnis5dIoBB0S48y7I9/c7JOQauTCSbd0zFq8D/rfAH
NqkpfWUH/xjJgw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:16 2025 by rpki-client