Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: R2DSql+VvQn8bE0pNwP+Fd1b+oFk2+cpwUItcA+Y5+k=
Subject key identifier: 41:DD:90:20:30:63:8B:C5:85:71:7F:03:8A:FE:21:64:46:04:BF:3B
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 0194BB96F9E3FDE90EEEDFF02F3EF9BE9215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 11EA
Signing time: Fri 31 Jan 2025 09:00:21 +0000
Manifest this update: Fri 31 Jan 2025 09:00:21 +0000
Manifest next update: Sat 01 Feb 2025 09:00:21 +0000
Files and hashes: 1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: S1/ZWp4+zdJPZLBXhrQvFi5cNvNT1HwOcmyRBPZ2ros=)
4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f9:e3:fd:e9:0e:ee:df:f0:2f:3e:f9:be:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Jan 31 09:00:21 2025 GMT
Not After : Feb 1 09:00:21 2025 GMT
Subject: CN=41dd902030638bc585717f038afe21644604bf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:b8:5f:7f:35:64:b1:58:30:63:dc:d6:85:
9b:15:45:37:e5:b8:50:b5:64:a1:c7:59:89:ef:c6:
40:65:cd:85:64:88:e2:86:c6:8f:50:15:bc:26:54:
06:ea:48:d5:cd:27:6b:a6:32:d0:50:2a:0c:a1:39:
f8:74:8d:b9:f9:da:e5:5f:6a:dd:3a:c8:73:60:04:
e0:c4:bc:1e:fb:87:3f:b7:b8:0d:64:1b:f6:ba:19:
7d:3d:75:dc:4f:8a:8d:eb:b1:61:cc:af:90:aa:db:
c6:41:fe:bc:06:2a:4f:69:dd:ec:9f:d8:6c:f2:9d:
3f:f6:c0:05:a8:4a:f5:35:a4:33:68:17:de:f5:23:
0b:27:fa:be:45:50:f4:4c:da:71:c4:d2:6b:91:fd:
0e:e4:63:7b:26:4f:ae:bf:48:ce:a7:de:00:44:05:
f6:a8:82:33:30:a3:86:90:c5:a7:50:f6:b0:e0:85:
d4:5c:08:75:d5:08:04:31:41:e5:e5:66:4b:d5:c8:
e6:56:f8:42:fd:0a:a8:29:b2:d4:78:77:e8:05:c6:
30:55:27:d6:39:31:2a:fc:ed:d4:fb:2c:f5:44:fe:
9f:44:1f:2b:ed:d6:40:cf:44:0c:d4:01:94:99:31:
3a:65:a6:87:cc:9a:f0:e1:ae:14:15:80:37:4d:b4:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DD:90:20:30:63:8B:C5:85:71:7F:03:8A:FE:21:64:46:04:BF:3B
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e7:b5:46:26:0e:ae:4e:bf:08:2c:82:d4:be:6d:39:a9:ff:
c4:74:0f:da:ab:85:77:54:82:46:a9:47:78:47:2c:46:c4:45:
84:4c:da:f8:3b:8a:ae:bf:80:7e:ce:7f:fc:aa:57:91:7f:3e:
f0:b6:7a:81:8d:40:be:ca:34:41:b1:0e:ff:f5:f6:ec:fa:28:
77:cd:03:71:55:1a:78:60:0c:0d:56:d0:e4:84:db:40:08:34:
04:f7:66:63:ac:04:cd:a6:44:86:6a:5a:e9:0f:ff:92:86:01:
98:fe:d1:f1:35:ff:b1:3c:2c:fa:d4:b4:22:05:91:cd:b1:2b:
b3:a5:ab:c6:ae:38:99:8c:06:25:75:1b:4b:23:c2:0e:92:f7:
ce:c7:8f:63:a2:c3:30:85:63:a7:a6:ef:17:bb:21:27:71:c2:
5d:1a:e6:d2:5b:45:7a:38:e3:aa:bd:c8:ab:58:70:54:20:06:
f8:81:9f:da:f3:69:f5:e8:9c:76:ee:81:97:31:a8:0f:cf:9c:
cf:b9:1e:80:c0:17:7b:5f:88:62:30:96:af:fc:e0:44:42:88:
8a:6c:cb:95:3f:38:24:81:a2:04:2d:cd:ba:20:59:c5:f1:56:
d4:7f:9a:e5:91:96:31:0f:3b:7c:8f:35:b0:49:1d:98:51:e2:
00:ac:f1:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lvnj/ekO7t/wLz75vpIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MmZhMDE5MDJmNGU4YzM0N2YyMTE2ZTQ2NDVkYTFhNmI0
ZTA5NjIwHhcNMjUwMTMxMDkwMDIxWhcNMjUwMjAxMDkwMDIxWjAzMTEwLwYDVQQD
Eyg0MWRkOTAyMDMwNjM4YmM1ODU3MTdmMDM4YWZlMjE2NDQ2MDRiZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p+4X381ZLFYMGPc1oWbFUU35bhQ
tWShx1mJ78ZAZc2FZIjihsaPUBW8JlQG6kjVzSdrpjLQUCoMoTn4dI25+drlX2rd
OshzYATgxLwe+4c/t7gNZBv2uhl9PXXcT4qN67FhzK+QqtvGQf68BipPad3sn9hs
8p0/9sAFqEr1NaQzaBfe9SMLJ/q+RVD0TNpxxNJrkf0O5GN7Jk+uv0jOp94ARAX2
qIIzMKOGkMWnUPaw4IXUXAh11QgEMUHl5WZL1cjmVvhC/QqoKbLUeHfoBcYwVSfW
OTEq/O3U+yz1RP6fRB8r7dZAz0QM1AGUmTE6ZaaHzJrw4a4UFYA3TbQ5ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHdkCAwY4vFhXF/A4r+IWRGBL87MB8GA1UdIwQY
MBaAFIgvoBkC9OjDR/IRbkZF2hprTgliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAt
NWMyZDI2NTcwNWUwLzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9lYzA5ODEtZDY4Mi00ZjdiLWIyMTAtNWMyZDI2NTcwNWUw
LzEvaUMtZ0dRTDA2TU5IOGhGdVJrWGFHbXRPQ1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyee1RiYO
rk6/CCyC1L5tOan/xHQP2quFd1SCRqlHeEcsRsRFhEza+DuKrr+Afs5//KpXkX8+
8LZ6gY1Avso0QbEO//X27Pood80DcVUaeGAMDVbQ5ITbQAg0BPdmY6wEzaZEhmpa
6Q//koYBmP7R8TX/sTws+tS0IgWRzbErs6Wrxq44mYwGJXUbSyPCDpL3zsePY6LD
MIVjp6bvF7shJ3HCXRrm0ltFejjjqr3Iq1hwVCAG+IGf2vNp9eicdu6BlzGoD8+c
z7kegMAXe1+IYjCWr/zgREKIimzLlT84JIGiBC3NuiBZxfFW1H+a5ZGWMQ87fI81
sEkdmFHiAKzxlg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:16 2025 by rpki-client on console-fra.rpki-client.org