Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: lG4l5VAU2bDCmULu0clOgldnQjq4FqRqTUzoaRKHHKI=
Subject key identifier: D4:A1:D0:00:D2:D0:56:59:0A:DE:24:5C:5F:48:49:AB:65:C9:15:C7
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 0194BABBC762CEC7A68704167CA20E478355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:55 +0000
Manifest this update: Fri 31 Jan 2025 05:00:55 +0000
Manifest next update: Sat 01 Feb 2025 05:00:55 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: MaEW5nXUDs62mei+m5GxU2qRW2rJiDaEWGD1BBviYzo=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c7:62:ce:c7:a6:87:04:16:7c:a2:0e:47:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jan 31 05:00:55 2025 GMT
Not After : Feb 1 05:00:55 2025 GMT
Subject: CN=d4a1d000d2d056590ade245c5f4849ab65c915c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:10:7e:84:6d:3e:ac:22:bd:35:e5:49:9b:
ee:c2:9f:df:40:b0:72:bb:f1:a8:17:dc:4b:ec:6a:
45:4d:e8:54:8d:00:b2:4f:2c:ed:77:47:8f:aa:4f:
82:89:13:cd:11:44:dd:26:62:77:cb:16:21:5e:54:
66:eb:49:14:62:d1:58:95:13:79:26:87:be:2f:41:
2f:9b:33:9d:41:fc:7a:bc:32:7d:7b:aa:5d:ca:33:
ec:11:fd:19:d6:26:9d:5d:71:fe:4e:76:59:8f:5d:
e5:c8:88:ae:7f:c3:15:d6:8f:33:e9:3d:71:16:04:
25:34:11:76:10:0c:06:60:fe:91:2a:61:09:1b:44:
f9:ff:b4:bc:c5:bc:e9:0a:ba:f1:f4:b6:d5:d7:ce:
59:62:a5:64:6b:71:d0:47:d9:43:57:f1:e1:60:4f:
fe:e3:b0:56:15:0d:96:14:33:c6:6a:c9:45:31:45:
ff:97:f3:db:80:34:65:74:cd:3e:f0:a0:31:11:c5:
54:bc:3c:e0:61:5c:36:ca:97:e7:d2:6e:84:ee:e4:
20:96:3b:27:a8:5a:37:a5:98:14:95:f4:8e:81:2b:
c0:fe:38:a8:8b:ff:07:88:95:f3:5f:90:fc:d9:7d:
f0:29:93:24:e1:03:3b:7a:01:7d:9e:00:8b:d1:76:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A1:D0:00:D2:D0:56:59:0A:DE:24:5C:5F:48:49:AB:65:C9:15:C7
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:8d:26:8d:16:82:d2:0c:16:0c:28:c6:dd:f6:7c:25:1d:
c4:d7:88:71:52:b6:7c:3b:8c:9d:23:44:a5:64:9e:b6:4f:20:
9b:b7:8e:78:0e:42:a5:16:bb:26:db:4f:8d:5e:14:e9:26:5a:
05:6c:85:b0:d3:6b:ac:54:99:8d:a7:81:38:44:31:fe:ef:0b:
b5:de:df:d0:8c:77:b7:e1:7b:49:c9:f9:cb:31:4a:12:29:61:
2a:b6:78:5f:0b:f9:fd:1b:6e:ac:d9:7a:5c:b9:01:bd:fa:b8:
7b:c4:6c:54:9b:4c:78:99:2d:94:9a:31:11:0a:d4:a8:51:f0:
c6:d9:ea:9d:7b:b2:7d:d5:02:9a:31:bb:ac:f8:73:85:bf:84:
8c:5a:8e:82:11:4e:54:85:b5:c8:f4:fe:fd:cc:55:08:70:93:
56:8a:5b:89:49:2a:cf:e3:2a:d1:0e:42:b2:3a:7d:df:bb:27:
e9:8c:70:0f:f7:37:54:58:1b:fc:de:8e:74:6a:d0:a1:d3:59:
19:95:5d:31:57:57:65:09:54:65:95:53:b5:fc:27:d1:4a:52:
98:41:3f:24:55:99:8f:bd:16:ca:65:9c:57:77:ab:14:e2:6d:
07:3d:f5:e8:b2:a5:c9:06:36:2f:63:bf:d5:b1:b0:01:a7:74:
5f:63:aa:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u8dizsemhwQWfKIOR4NVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjI4MmU3NTEyODZmYmJlY2M3NWVhNmVkY2MyNTQxOTJj
NTVjNzYwHhcNMjUwMTMxMDUwMDU1WhcNMjUwMjAxMDUwMDU1WjAzMTEwLwYDVQQD
EyhkNGExZDAwMGQyZDA1NjU5MGFkZTI0NWM1ZjQ4NDlhYjY1YzkxNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dwQfoRtPqwivTXlSZvuwp/fQLBy
u/GoF9xL7GpFTehUjQCyTyztd0ePqk+CiRPNEUTdJmJ3yxYhXlRm60kUYtFYlRN5
Joe+L0EvmzOdQfx6vDJ9e6pdyjPsEf0Z1iadXXH+TnZZj13lyIiuf8MV1o8z6T1x
FgQlNBF2EAwGYP6RKmEJG0T5/7S8xbzpCrrx9LbV185ZYqVka3HQR9lDV/HhYE/+
47BWFQ2WFDPGaslFMUX/l/PbgDRldM0+8KAxEcVUvDzgYVw2ypfn0m6E7uQgljsn
qFo3pZgUlfSOgSvA/jioi/8HiJXzX5D82X3wKZMk4QM7egF9ngCL0XbtywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSh0ADS0FZZCt4kXF9ISatlyRXHMB8GA1UdIwQY
MBaAFAhigudRKG+77Mdepu3MJUGSxVx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUt
NmIwNGFhZGVlZjEwLzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUtNmIwNGFhZGVlZjEw
LzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7CNJo0W
gtIMFgwoxt32fCUdxNeIcVK2fDuMnSNEpWSetk8gm7eOeA5CpRa7JttPjV4U6SZa
BWyFsNNrrFSZjaeBOEQx/u8Ltd7f0Ix3t+F7Scn5yzFKEilhKrZ4Xwv5/RturNl6
XLkBvfq4e8RsVJtMeJktlJoxEQrUqFHwxtnqnXuyfdUCmjG7rPhzhb+EjFqOghFO
VIW1yPT+/cxVCHCTVopbiUkqz+Mq0Q5Csjp937sn6YxwD/c3VFgb/N6OdGrQodNZ
GZVdMVdXZQlUZZVTtfwn0UpSmEE/JFWZj70WymWcV3erFOJtBz316LKlyQY2L2O/
1bGwAad0X2OqHw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:32 2025 by rpki-client on console-fra.rpki-client.org