Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File: G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier: QY5V9H3k0N8vAhfBS6uKGWItfzsW4mpqVt6VkAGk/u8=
Subject key identifier: AF:57:38:7B:DD:84:7C:9D:38:33:CC:18:9F:FE:E4:A5:FB:36:01:B9
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer: /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial: 0194BA84C2FF150F2104CD95D9CDA22FFD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number: 0EC9
Signing time: Fri 31 Jan 2025 04:00:50 +0000
Manifest this update: Fri 31 Jan 2025 04:00:50 +0000
Manifest next update: Sat 01 Feb 2025 04:00:50 +0000
Files and hashes: 1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: WpSkIFrP3Zfum3G5M1/Y9UjkoWoSoxWynniDAHa9pbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:c2:ff:15:0f:21:04:cd:95:d9:cd:a2:2f:fd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Validity
Not Before: Jan 31 04:00:50 2025 GMT
Not After : Feb 1 04:00:50 2025 GMT
Subject: CN=af57387bdd847c9d3833cc189ffee4a5fb3601b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:a6:bc:b0:64:a6:3a:e8:f0:fc:b3:de:50:
5c:38:76:43:02:7e:8f:21:96:6f:cc:b1:ae:d1:9f:
ef:b0:d6:c9:02:7e:80:b0:ea:24:75:b7:0d:c3:6a:
f8:53:54:db:f1:7c:7d:b3:f5:2c:a3:8f:b3:a5:50:
e3:e5:4b:9f:5c:81:20:f3:2a:e0:32:ee:fa:1a:6f:
e0:84:31:10:42:a4:de:b7:d8:9c:64:50:1f:8b:9e:
b6:04:c1:c3:1b:22:b8:1f:96:a1:4b:41:a9:85:72:
11:55:92:a1:d1:f8:79:cf:1c:e7:16:24:99:55:1b:
67:33:29:b4:40:6c:dd:6b:c7:44:98:8d:8a:37:c6:
d5:22:74:ce:a1:d8:29:6f:a7:03:fe:af:75:af:fa:
37:61:9a:00:9a:bf:f3:a4:38:51:90:c2:a1:c7:8f:
11:07:96:35:3b:c7:ec:30:51:27:70:a5:c7:b5:b7:
cc:63:20:af:1a:5f:6b:6c:bf:cf:8c:a0:21:cb:fe:
21:a7:a6:c2:49:2e:b5:8d:08:ad:53:17:79:96:ba:
f3:9b:4c:17:97:1c:ee:18:c5:1d:e2:ba:b1:4a:18:
c2:ce:14:fe:e8:58:a7:2c:37:73:5f:6e:69:72:dd:
66:1a:d1:07:8a:a5:34:84:5b:92:56:9a:84:bf:3d:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:57:38:7B:DD:84:7C:9D:38:33:CC:18:9F:FE:E4:A5:FB:36:01:B9
X509v3 Authority Key Identifier:
keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d3:83:0c:3f:5d:7a:71:7c:4d:b0:ca:4a:aa:ef:07:d1:f6:
80:d5:23:12:ae:4b:6a:eb:82:82:09:52:bb:9f:03:77:22:ba:
d0:d7:ea:a7:be:44:a0:8f:aa:16:33:23:63:78:d2:6e:2f:37:
c7:f3:87:e8:a2:91:43:0e:8f:53:96:f7:f3:ac:77:f6:f8:be:
8e:cf:e5:2d:39:18:b0:50:e5:30:df:ae:10:ba:1e:37:6b:17:
f3:06:26:e9:9e:e7:3b:cc:29:7c:c3:f0:38:bb:7a:ab:d2:a9:
bb:42:69:2b:22:7f:78:6a:72:25:01:04:5b:c2:50:de:d2:67:
d9:63:1b:7b:71:78:c8:1a:36:5d:27:b9:11:b1:f8:d0:f1:07:
97:93:72:fd:21:60:b2:b8:c4:16:f3:0f:ca:00:62:f0:ad:29:
7a:f5:78:74:c2:12:a6:ad:39:e7:70:7b:94:6e:3c:0f:54:27:
ef:83:ea:b4:4e:21:bf:8c:60:fd:d4:b4:33:0f:66:95:ce:57:
e0:fc:12:f3:ba:6b:08:3b:0f:19:dd:26:41:7b:36:f8:eb:90:
08:54:9b:3c:c6:55:50:f8:44:b2:69:28:33:09:dc:d8:40:19:
2b:95:21:79:fc:c5:da:b3:1b:2f:c1:a0:72:7a:5a:21:35:96:
f8:da:36:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hML/FQ8hBM2V2c2iL/08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmRlM2MxYjBjNzlmZmIyNzgyMmUwOTQ3ZmRjMzhlNTFm
Y2M1Y2EwHhcNMjUwMTMxMDQwMDUwWhcNMjUwMjAxMDQwMDUwWjAzMTEwLwYDVQQD
EyhhZjU3Mzg3YmRkODQ3YzlkMzgzM2NjMTg5ZmZlZTRhNWZiMzYwMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY2mvLBkpjro8Pyz3lBcOHZDAn6P
IZZvzLGu0Z/vsNbJAn6AsOokdbcNw2r4U1Tb8Xx9s/Uso4+zpVDj5UufXIEg8yrg
Mu76Gm/ghDEQQqTet9icZFAfi562BMHDGyK4H5ahS0GphXIRVZKh0fh5zxznFiSZ
VRtnMym0QGzda8dEmI2KN8bVInTOodgpb6cD/q91r/o3YZoAmr/zpDhRkMKhx48R
B5Y1O8fsMFEncKXHtbfMYyCvGl9rbL/PjKAhy/4hp6bCSS61jQitUxd5lrrzm0wX
lxzuGMUd4rqxShjCzhT+6FinLDdzX25pct1mGtEHiqU0hFuSVpqEvz1k4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9XOHvdhHydODPMGJ/+5KX7NgG5MB8GA1UdIwQY
MBaAFBtt48Gwx5/7J4IuCUf9w45R/MXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUt
ZDk5ZTA4Njg0NmI3LzEvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jNWU1NTctOGJlNS00ZjM5LTk1NjUtZDk5ZTA4Njg0NmI3
LzEvRzIzandiREhuX3NuZ2k0SlJfM0RqbEg4eGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNODDD9d
enF8TbDKSqrvB9H2gNUjEq5LauuCgglSu58DdyK60Nfqp75EoI+qFjMjY3jSbi83
x/OH6KKRQw6PU5b386x39vi+js/lLTkYsFDlMN+uELoeN2sX8wYm6Z7nO8wpfMPw
OLt6q9Kpu0JpKyJ/eGpyJQEEW8JQ3tJn2WMbe3F4yBo2XSe5EbH40PEHl5Ny/SFg
srjEFvMPygBi8K0pevV4dMISpq0553B7lG48D1Qn74PqtE4hv4xg/dS0Mw9mlc5X
4PwS87prCDsPGd0mQXs2+OuQCFSbPMZVUPhEsmkoMwnc2EAZK5UhefzF2rMbL8Gg
cnpaITWW+No2ww==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:22 2025 by rpki-client on console-fra.rpki-client.org