Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: EiXHvzBwE2Rn0t3SkPI2dyx+FQmg6X4RrOYnJA5EYMs=
Subject key identifier: 71:28:AE:37:A5:3D:0B:D3:10:4D:0A:28:AA:0C:C8:53:73:8D:A6:7D
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019358093840A3C6F79801E3CC7EFEECD278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 0B7F
Signing time: Sat 23 Nov 2024 08:00:19 +0000
Manifest this update: Sat 23 Nov 2024 08:00:19 +0000
Manifest next update: Sun 24 Nov 2024 08:00:19 +0000
Files and hashes: 1: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: EzqLte9Z7yCKo3ttRNhyW0t1lbjr4cggPZbTOjw3mxI=)
2: nsnCeLDyo36Hg2dDNLeRwxmD4TI.roa (hash: h0P936Z4d0N315HUPdUvWwifGz5vv8GGcOUEhQxhrY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:38:40:a3:c6:f7:98:01:e3:cc:7e:fe:ec:d2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Nov 23 08:00:19 2024 GMT
Not After : Nov 24 08:00:19 2024 GMT
Subject: CN=7128ae37a53d0bd3104d0a28aa0cc853738da67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:2d:69:a9:72:02:f7:ef:b5:f7:dd:7a:07:
2b:3e:f8:45:14:e0:e7:b2:00:93:8f:0a:87:31:08:
4f:5c:9e:7c:52:ec:be:94:c0:ca:cc:46:63:ae:5a:
24:18:f4:26:3b:08:01:59:3f:1d:ac:4d:e5:4f:c3:
1a:07:6f:d0:b5:e2:99:b8:6d:49:f2:4a:ce:88:13:
2a:a2:41:24:dd:7d:6f:23:8f:2b:3b:0d:68:6b:41:
99:7d:5a:5b:f6:33:31:1d:be:10:cd:50:e7:32:5f:
d0:94:91:3e:06:f4:5f:d1:dd:1b:0f:bd:52:7e:7a:
25:f4:67:e4:ff:df:d6:ea:12:d1:8f:0f:ea:b1:17:
71:c4:83:38:d1:16:f6:f6:a2:3f:f6:31:c6:d9:92:
62:65:fd:74:26:f2:01:30:9c:67:1b:b1:33:52:94:
71:94:2f:71:19:67:37:2e:70:e8:3e:4e:52:81:8c:
dd:78:a5:dc:d2:0b:3c:fb:88:7f:8e:0c:f7:c4:3e:
e6:5c:74:d8:02:fe:2a:4b:26:ed:80:3e:1f:18:15:
f4:0e:b2:bd:fa:8b:4c:a4:60:0e:6d:25:26:19:6a:
e8:62:64:81:4e:5c:8b:17:5b:9f:28:f6:cb:ec:ae:
02:fb:f8:92:c0:7c:29:59:81:86:f1:1f:bb:81:d0:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:AE:37:A5:3D:0B:D3:10:4D:0A:28:AA:0C:C8:53:73:8D:A6:7D
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:fb:11:fc:38:a0:57:cb:00:d2:a9:d7:a9:d6:38:5a:4d:26:
99:91:5b:bb:44:df:74:84:ba:c3:f7:2e:55:9b:e3:23:a3:27:
c9:16:aa:9b:fd:74:26:54:f9:30:72:8b:10:47:07:38:5f:26:
4e:f4:3d:a5:bd:e6:48:92:3e:ad:90:a2:14:55:34:85:9e:ee:
87:12:8a:bf:a7:1e:02:59:7f:fc:61:12:19:bc:b4:a3:56:fe:
b3:71:c4:df:93:1a:36:6d:71:cc:c8:5d:d9:ab:14:21:3d:c6:
56:93:0d:89:92:14:bf:0a:ca:d8:c4:f4:45:a5:20:d9:1b:b4:
88:b1:ac:24:5b:64:9f:00:31:ba:d9:f4:b6:a7:b5:f5:3d:1b:
1d:af:56:8f:c7:88:1d:cc:88:af:d6:e8:52:5f:a7:94:81:3f:
c2:fc:1e:30:3f:ca:d2:d5:95:c6:44:c1:64:29:a3:7e:66:25:
c4:67:ac:9c:42:04:e3:a1:fc:20:47:37:0a:cf:26:50:96:7c:
3b:c2:4f:65:db:84:0b:a5:ca:c9:f9:a8:2e:a3:9f:ce:80:cb:
83:ca:13:80:26:6c:40:f6:a4:3f:f5:84:66:84:40:43:e0:a9:
21:27:cd:56:1b:79:c8:b5:43:f6:4b:e4:7f:61:80:22:bf:cf:
37:15:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:17 2024 by rpki-client on console-ams.rpki-client.org