Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: InYwH5JVnUO9nFB033akU4AR5mQFW4W7I6iynRAVGCA=
Subject key identifier: 13:EC:06:E2:84:EB:E7:CD:11:0B:C9:93:4D:7F:00:24:9C:65:46:FE
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019355AD36A0F753E593A4B3696AD65DC0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 0FE2
Signing time: Fri 22 Nov 2024 21:00:35 +0000
Manifest this update: Fri 22 Nov 2024 21:00:35 +0000
Manifest next update: Sat 23 Nov 2024 21:00:35 +0000
Files and hashes: 1: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: Evq/7gXSIGOEJ5+X3HeI5TkIg24vU2wI9jmI7RVrsy8=)
2: wuhX8oITFzu7BnpahOHbcGXmIS8.roa (hash: cCrTMLFRYSOxlgn5aQy6ZvKllgaNe+m7D1cJYZA5uQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:36:a0:f7:53:e5:93:a4:b3:69:6a:d6:5d:c0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Nov 22 21:00:35 2024 GMT
Not After : Nov 23 21:00:35 2024 GMT
Subject: CN=13ec06e284ebe7cd110bc9934d7f00249c6546fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:db:e8:0c:09:7d:ff:99:86:5e:84:64:85:
9c:51:35:1b:76:ca:4a:5c:79:bd:1f:51:49:2f:24:
c4:ea:98:12:66:c3:09:01:41:b2:60:59:8d:e4:b1:
7e:04:6b:ca:55:40:7c:aa:90:ad:87:79:68:fd:ab:
4a:14:64:83:64:8a:11:05:c6:22:3e:8e:86:12:35:
e8:d2:38:79:b3:af:16:09:6f:e4:db:48:c4:9d:a4:
13:a7:24:1c:8a:f2:5c:da:2c:55:fc:fd:17:ff:7f:
04:28:c3:60:47:1b:a3:5c:51:b7:bf:fd:7f:68:2b:
f8:69:c8:61:92:eb:9e:d2:c9:b0:f6:d9:de:9c:2d:
df:d7:ca:eb:a6:19:86:e9:85:18:aa:d5:fb:3a:a1:
21:4c:28:73:50:a4:7c:8a:01:67:8b:92:8b:51:82:
c9:c5:e3:e0:87:c2:80:91:fb:6b:d5:54:d9:99:2d:
0c:00:cf:d8:be:28:31:1f:0b:db:d5:76:5f:8e:a3:
b9:9f:33:e1:eb:ca:81:bc:7a:de:4a:a2:fd:06:50:
89:5a:53:60:92:de:40:e1:39:41:62:dc:0c:ea:aa:
32:bf:02:18:0a:8c:6d:a0:3f:a0:50:7f:ba:ef:f7:
29:60:80:d9:e2:34:0b:d9:f8:eb:e5:b0:c8:f1:c3:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:06:E2:84:EB:E7:CD:11:0B:C9:93:4D:7F:00:24:9C:65:46:FE
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ef:2c:bd:f0:98:a9:20:ec:8b:dd:76:98:d4:34:3c:9f:03:
3c:22:32:63:60:03:59:9a:55:01:97:36:a2:a9:45:7c:59:75:
d0:a5:1a:00:03:4d:04:1c:e9:88:00:0a:34:3d:ff:de:c2:5b:
0d:2b:a4:4b:e4:2c:a7:e3:09:26:29:cf:8f:c3:88:70:4e:4b:
d2:46:24:4f:39:94:71:3c:b3:35:57:d5:23:7c:ee:80:c1:9d:
b3:25:8a:97:30:37:6a:b8:48:ab:02:c2:a2:34:db:a6:b4:02:
28:bb:d8:35:6d:f3:8d:ac:82:9c:4a:01:0c:9a:fa:14:ea:6a:
62:b3:66:70:73:94:b9:f4:b3:92:2b:0e:80:06:ff:e6:42:ca:
64:58:ca:94:31:11:ac:73:cf:c0:f7:32:a9:34:f2:03:4a:80:
9e:33:45:94:91:24:34:8b:44:de:53:79:b3:eb:f7:aa:d8:eb:
5e:29:32:09:63:df:22:bb:e1:db:65:46:a0:09:74:93:ff:09:
bd:3e:16:f3:36:cf:a3:26:1e:bf:05:79:61:1b:30:b2:55:e7:
ae:2b:b7:f5:0a:89:98:03:5a:47:b4:f8:c6:15:89:15:3c:ea:
f0:c3:02:88:f8:f5:90:fe:47:b7:55:8e:4d:d6:e1:25:08:7d:
e9:cc:71:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrTag91Plk6SzaWrWXcC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGZiMDk4NWUzNjBjMzhmODY1OGQ1NjY4N2NhODYyZDk0
MDhkOTAwHhcNMjQxMTIyMjEwMDM1WhcNMjQxMTIzMjEwMDM1WjAzMTEwLwYDVQQD
EygxM2VjMDZlMjg0ZWJlN2NkMTEwYmM5OTM0ZDdmMDAyNDljNjU0NmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA/b6AwJff+Zhl6EZIWcUTUbdspK
XHm9H1FJLyTE6pgSZsMJAUGyYFmN5LF+BGvKVUB8qpCth3lo/atKFGSDZIoRBcYi
Po6GEjXo0jh5s68WCW/k20jEnaQTpyQcivJc2ixV/P0X/38EKMNgRxujXFG3v/1/
aCv4achhkuue0smw9tnenC3f18rrphmG6YUYqtX7OqEhTChzUKR8igFni5KLUYLJ
xePgh8KAkftr1VTZmS0MAM/YvigxHwvb1XZfjqO5nzPh68qBvHreSqL9BlCJWlNg
kt5A4TlBYtwM6qoyvwIYCoxtoD+gUH+67/cpYIDZ4jQL2fjr5bDI8cPhVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPsBuKE6+fNEQvJk01/ACScZUb+MB8GA1UdIwQY
MBaAFBiPsJheNgw4+GWNVmh8qGLZQI2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAt
ZDA3OTA2YTg0YjFkLzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAtZDA3OTA2YTg0YjFk
LzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqu8svfCY
qSDsi912mNQ0PJ8DPCIyY2ADWZpVAZc2oqlFfFl10KUaAANNBBzpiAAKND3/3sJb
DSukS+Qsp+MJJinPj8OIcE5L0kYkTzmUcTyzNVfVI3zugMGdsyWKlzA3arhIqwLC
ojTbprQCKLvYNW3zjayCnEoBDJr6FOpqYrNmcHOUufSzkisOgAb/5kLKZFjKlDER
rHPPwPcyqTTyA0qAnjNFlJEkNItE3lN5s+v3qtjrXikyCWPfIrvh22VGoAl0k/8J
vT4W8zbPoyYevwV5YRswslXnriu39QqJmANaR7T4xhWJFTzq8MMCiPj1kP5Ht1WO
TdbhJQh96cxxeQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:25 2024 by rpki-client on console-ams.rpki-client.org