Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: d0HMfq05E+VTWAd3xDdpjpAhvPc9nk/KocK2wQqohwQ=
Subject key identifier: 3B:38:48:97:E5:CF:91:F2:97:2B:A3:0C:E0:23:F6:B4:1A:43:7C:12
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 0194BB971E8DABD6A2A6D29A389754DECAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 1372
Signing time: Fri 31 Jan 2025 09:00:30 +0000
Manifest this update: Fri 31 Jan 2025 09:00:30 +0000
Manifest next update: Sat 01 Feb 2025 09:00:30 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: 2B0GLVGfDbo8IRQdn4kyhkf7taIoU+Bw1moBSoNXkDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:1e:8d:ab:d6:a2:a6:d2:9a:38:97:54:de:ca:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Jan 31 09:00:30 2025 GMT
Not After : Feb 1 09:00:30 2025 GMT
Subject: CN=3b384897e5cf91f2972ba30ce023f6b41a437c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:d1:f8:57:87:e4:2b:62:1f:75:97:af:cd:
4d:f9:6a:b3:90:24:40:91:be:84:86:3c:b9:49:f8:
c9:47:e1:87:94:88:94:87:18:62:74:37:32:85:eb:
93:c1:7a:45:8a:0e:74:3b:40:df:4b:a3:74:e1:bf:
96:36:1c:f7:7b:a4:ee:47:cd:7b:e3:9c:fb:a0:3b:
19:40:59:ff:33:de:dd:99:bb:a3:0c:03:ef:d0:63:
03:19:59:60:39:52:3b:ad:fc:32:6f:11:65:65:a6:
31:38:f0:a4:a4:7b:be:3f:62:5b:30:89:78:56:09:
c2:e1:be:f2:8a:62:42:82:93:de:b5:7f:da:36:c0:
c0:c9:4a:7d:16:97:56:2f:d4:56:48:fa:c9:ad:a4:
71:0c:02:1f:99:8f:48:5d:a9:6c:eb:ae:e1:68:d6:
4d:ec:2e:e6:2f:a8:8b:c9:60:3b:ad:29:10:90:57:
b2:f0:f3:d7:11:1a:8a:43:01:ff:e6:97:8d:b2:e5:
c5:77:e6:d7:a0:dd:08:cc:7a:ea:57:38:e2:8d:46:
d7:a1:a6:d1:11:eb:3b:e6:47:48:7f:45:e6:e9:42:
56:5e:de:18:65:8e:ac:91:9a:99:4a:88:70:30:a4:
05:e0:59:fe:65:a4:5d:a6:b7:55:c4:b3:3e:8b:f5:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:48:97:E5:CF:91:F2:97:2B:A3:0C:E0:23:F6:B4:1A:43:7C:12
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7d:f1:68:43:0c:03:4d:d4:fc:be:64:ec:c7:64:81:7a:4d:
2d:dc:22:dc:22:6b:b9:35:35:c4:4a:62:b7:4d:52:57:67:ef:
c1:d8:18:69:38:84:98:24:39:05:a8:6c:5e:0f:e1:75:8e:40:
2e:25:2c:1f:77:ce:6a:20:3b:bc:8b:df:8d:6f:c3:10:cb:aa:
2f:6e:2f:28:7b:47:02:07:3f:8d:b8:c7:59:13:f7:71:f4:e1:
45:ad:bd:bb:c4:14:5d:27:35:66:ac:bc:fe:05:81:81:da:37:
03:df:69:74:c3:b9:89:d9:ac:0a:73:cc:41:de:36:02:1e:60:
a2:68:19:5d:6c:43:6f:f8:57:a7:10:05:26:07:c9:da:23:1a:
dd:02:3e:cd:7f:27:fe:7f:46:f7:63:fe:88:cd:b3:51:cb:71:
f9:57:f9:00:75:0d:3d:74:23:5b:92:ee:36:cb:93:2c:78:55:
15:12:a0:d7:5d:07:0d:f7:ee:a0:3a:86:21:89:4d:30:04:00:
e7:d8:4c:94:8f:e1:ce:cf:77:3a:58:05:03:70:c5:09:28:d4:
e4:c1:e3:d9:67:cf:89:f3:87:94:df:af:a7:b3:55:c1:d3:37:
64:c5:0b:3d:b8:73:3c:0e:02:7c:4f:98:da:bb:37:cb:51:77:
34:12:62:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lx6Nq9aiptKaOJdU3srJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjZhYzBhNDkyNTUyODNjZDUzMDY2OTcxY2Q3YjNkZmUy
YTNjZTgwHhcNMjUwMTMxMDkwMDMwWhcNMjUwMjAxMDkwMDMwWjAzMTEwLwYDVQQD
EygzYjM4NDg5N2U1Y2Y5MWYyOTcyYmEzMGNlMDIzZjZiNDFhNDM3YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbTR+FeH5CtiH3WXr81N+WqzkCRA
kb6Ehjy5SfjJR+GHlIiUhxhidDcyheuTwXpFig50O0DfS6N04b+WNhz3e6TuR817
45z7oDsZQFn/M97dmbujDAPv0GMDGVlgOVI7rfwybxFlZaYxOPCkpHu+P2JbMIl4
VgnC4b7yimJCgpPetX/aNsDAyUp9FpdWL9RWSPrJraRxDAIfmY9IXals667haNZN
7C7mL6iLyWA7rSkQkFey8PPXERqKQwH/5peNsuXFd+bXoN0IzHrqVzjijUbXoabR
Ees75kdIf0Xm6UJWXt4YZY6skZqZSohwMKQF4Fn+ZaRdprdVxLM+i/UycwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs4SJflz5HylyujDOAj9rQaQ3wSMB8GA1UdIwQY
MBaAFLRmrApJJVKDzVMGaXHNez3+KjzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUt
YzliNDcwZGMyNDBiLzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xMzNiNTItN2E2Ni00MWFiLWFlZWUtYzliNDcwZGMyNDBi
LzEvdEdhc0Nra2xVb1BOVXdacGNjMTdQZjRxUE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOn3xaEMM
A03U/L5k7MdkgXpNLdwi3CJruTU1xEpit01SV2fvwdgYaTiEmCQ5BahsXg/hdY5A
LiUsH3fOaiA7vIvfjW/DEMuqL24vKHtHAgc/jbjHWRP3cfThRa29u8QUXSc1Zqy8
/gWBgdo3A99pdMO5idmsCnPMQd42Ah5gomgZXWxDb/hXpxAFJgfJ2iMa3QI+zX8n
/n9G92P+iM2zUctx+Vf5AHUNPXQjW5LuNsuTLHhVFRKg110HDffuoDqGIYlNMAQA
59hMlI/hzs93OlgFA3DFCSjU5MHj2WfPifOHlN+vp7NVwdM3ZMULPbhzPA4CfE+Y
2rs3y1F3NBJi8w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:39 2025 by rpki-client on console-fra.rpki-client.org