Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: 5YqxOolJGLhPFRdB5YYyMworz/s0LSgDOEYWBgu4pIQ=
Subject key identifier: 9A:EA:C5:CF:BB:CA:D6:00:90:B7:B6:60:99:95:D2:D4:06:A0:15:67
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 0194BAF25ED2ADB9A268A7C8CB2EE60DD728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:33 +0000
Manifest this update: Fri 31 Jan 2025 06:00:33 +0000
Manifest next update: Sat 01 Feb 2025 06:00:33 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: b00IG+MlH+TvWiIKzotw0+2esqoNeKZxKIZUfRDc2vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:5e:d2:ad:b9:a2:68:a7:c8:cb:2e:e6:0d:d7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jan 31 06:00:33 2025 GMT
Not After : Feb 1 06:00:33 2025 GMT
Subject: CN=9aeac5cfbbcad60090b7b6609995d2d406a01567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:0e:de:9f:1e:a2:08:82:22:bd:7e:58:8a:
3a:20:d6:02:3e:c9:05:ac:66:fe:13:1d:c1:1a:68:
d6:58:9f:4d:5e:96:05:af:23:ef:b3:0f:17:ff:88:
e6:0f:40:60:44:13:fb:78:04:8a:83:8f:fc:cd:d4:
96:30:2c:b9:f8:39:44:d1:43:40:77:64:f8:8d:d8:
ee:59:dd:73:ac:3a:d1:ed:09:55:38:96:9e:48:41:
24:d2:0b:3c:be:c6:f9:a0:ec:c8:95:5b:5b:2a:ce:
82:40:18:a6:ce:01:c3:5d:d8:93:3b:2b:b7:cb:38:
46:8d:34:dc:7a:4b:c2:76:98:44:14:68:9a:a1:77:
9b:02:a8:d0:00:e4:c4:49:f2:50:42:10:9f:e0:f2:
d5:6c:17:a3:2b:d3:21:7e:e1:f6:c7:4b:79:e7:60:
4f:17:f3:cf:bd:88:c5:2d:03:46:37:77:b7:c8:24:
e3:d9:01:04:a1:04:9d:f8:cb:e8:e7:f3:c3:42:90:
eb:a1:a6:81:31:92:75:bb:84:a6:8c:8f:99:f1:ac:
27:61:a2:42:67:9c:0b:dc:7d:41:b7:37:06:bd:85:
f1:f1:32:a3:ea:71:e6:1e:af:fd:ed:3f:9f:d5:8a:
61:ad:a2:1d:b0:e4:b0:3d:0a:06:8d:05:a0:7a:6d:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:C5:CF:BB:CA:D6:00:90:B7:B6:60:99:95:D2:D4:06:A0:15:67
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5d:d1:0a:ee:8a:35:f8:66:d9:ad:ad:84:c2:57:bf:42:31:
34:35:ea:58:94:04:76:02:45:2e:68:86:35:ce:eb:dc:f1:bc:
d0:b0:5e:c5:5a:fb:b3:5c:63:46:32:3b:ed:2a:ec:08:e0:ff:
8b:b2:16:ef:55:ca:23:53:78:29:56:ce:4f:4b:b4:c0:de:bf:
06:73:41:1e:e1:dd:ef:36:43:3c:f4:46:3a:0f:32:68:8b:a0:
e7:a1:14:63:6d:15:23:f1:d4:2b:11:5d:01:cb:7f:fe:bd:c0:
d3:6d:bc:8c:c0:b6:63:65:73:8f:d1:82:35:1e:4d:e4:cf:bf:
45:c8:c4:e2:5f:2b:44:4a:98:d2:22:14:90:cb:18:30:eb:7b:
d8:48:09:20:40:99:44:4b:75:cd:f4:9f:62:df:95:64:86:03:
7f:3d:2e:53:27:6e:11:7b:5c:ff:8d:41:82:4d:2d:e4:27:88:
c8:1f:ca:b9:c1:5a:7a:c1:a5:93:50:55:ff:be:53:94:cb:16:
91:ba:89:14:34:67:06:b7:fe:27:ea:8d:fa:73:d6:e8:2c:2d:
73:5d:84:71:8a:cd:9a:e6:f9:a3:37:6d:4f:ef:0f:12:00:6f:
85:1d:c3:bf:da:d9:83:f7:ec:48:54:a6:c6:7b:3b:1c:77:49:
db:79:09:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68l7SrbmiaKfIyy7mDdcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzcyZWFlYmMyMDQ2MWMzMWNmOTQyZTRlMTU1ZjA3Yjhh
MDNjN2MwHhcNMjUwMTMxMDYwMDMzWhcNMjUwMjAxMDYwMDMzWjAzMTEwLwYDVQQD
Eyg5YWVhYzVjZmJiY2FkNjAwOTBiN2I2NjA5OTk1ZDJkNDA2YTAxNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4MO3p8eogiCIr1+WIo6INYCPskF
rGb+Ex3BGmjWWJ9NXpYFryPvsw8X/4jmD0BgRBP7eASKg4/8zdSWMCy5+DlE0UNA
d2T4jdjuWd1zrDrR7QlVOJaeSEEk0gs8vsb5oOzIlVtbKs6CQBimzgHDXdiTOyu3
yzhGjTTcekvCdphEFGiaoXebAqjQAOTESfJQQhCf4PLVbBejK9MhfuH2x0t552BP
F/PPvYjFLQNGN3e3yCTj2QEEoQSd+Mvo5/PDQpDroaaBMZJ1u4SmjI+Z8awnYaJC
Z5wL3H1BtzcGvYXx8TKj6nHmHq/97T+f1YphraIdsOSwPQoGjQWgem1aJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrqxc+7ytYAkLe2YJmV0tQGoBVnMB8GA1UdIwQY
MBaAFIDHLq68IEYcMc+ULk4VXwe4oDx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzIt
ZDBjODNiZTQwMTg1LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzItZDBjODNiZTQwMTg1
LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV3RCu6K
Nfhm2a2thMJXv0IxNDXqWJQEdgJFLmiGNc7r3PG80LBexVr7s1xjRjI77SrsCOD/
i7IW71XKI1N4KVbOT0u0wN6/BnNBHuHd7zZDPPRGOg8yaIug56EUY20VI/HUKxFd
Act//r3A0228jMC2Y2Vzj9GCNR5N5M+/RcjE4l8rREqY0iIUkMsYMOt72EgJIECZ
REt1zfSfYt+VZIYDfz0uUyduEXtc/41Bgk0t5CeIyB/KucFaesGlk1BV/75TlMsW
kbqJFDRnBrf+J+qN+nPW6Cwtc12EcYrNmub5ozdtT+8PEgBvhR3Dv9rZg/fsSFSm
xns7HHdJ23kJOQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:15 2025 by rpki-client on console-fra.rpki-client.org