Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: DtpRsbX7RTvcFYTJeezAPY989mHJz+1T0TqCCd40xcc=
Subject key identifier: C6:2A:F6:99:16:B0:DD:80:18:D5:4A:92:9C:A1:CA:04:A1:FA:80:FE
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 01935952E6E5DFBD047D1CA21A02B33A8A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 124B
Signing time: Sat 23 Nov 2024 14:00:25 +0000
Manifest this update: Sat 23 Nov 2024 14:00:25 +0000
Manifest next update: Sun 24 Nov 2024 14:00:25 +0000
Files and hashes: 1: 10sLUp0jXjaP8dEHrEFru1Kj5KA.roa (hash: jlA2qHCqYDh3tPg0XQcbwnX8dm19+KTLm2ymd25UOUk=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: qKMq7SGZAKvZAHw13wsS1CBoYQRpiPM7IJsmJbWbsMU=)
3: S5dYTF5Nmq4xSyUCjdVjDofstD4.roa (hash: azl+FMSvQPoVvsyJH/kZKgyyvOrgtiVIs6qf1gqhXng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:52:e6:e5:df:bd:04:7d:1c:a2:1a:02:b3:3a:8a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Nov 23 14:00:25 2024 GMT
Not After : Nov 24 14:00:25 2024 GMT
Subject: CN=c62af69916b0dd8018d54a929ca1ca04a1fa80fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:59:64:bb:43:c3:23:82:6f:70:98:9c:6d:
c1:c8:51:15:26:33:50:56:39:60:bd:04:c9:4a:73:
bf:a8:41:0b:66:1d:58:39:9a:61:e7:ba:bb:9f:5f:
8c:3c:fa:55:b7:a7:4c:37:2c:7b:1c:e7:bf:c3:23:
73:25:78:3b:f3:fa:3a:99:43:6e:f4:f8:47:49:fa:
25:c0:d3:b1:8b:53:6d:49:26:cc:f5:48:db:29:a8:
32:5b:ca:55:d9:f2:68:7d:59:ff:c9:9b:90:49:9c:
55:50:04:89:41:f8:8e:d8:c2:dd:ff:9f:28:ac:81:
de:57:a2:ef:06:82:d4:54:32:fd:52:f5:4b:22:c7:
fd:f4:4e:5f:fa:2d:be:05:b0:6c:60:a6:91:18:42:
bb:19:c2:a5:95:e1:1d:0e:16:b6:6b:9e:f7:5a:31:
57:5c:11:53:58:a7:0d:82:4f:cc:ee:37:1c:e4:69:
0e:c7:64:31:44:36:a7:a5:85:03:15:40:c1:cd:e3:
e7:04:86:a0:1f:3b:68:63:c5:a1:5a:36:d3:2e:23:
84:f5:78:f2:a4:1c:e5:67:16:29:54:f0:0d:90:00:
68:00:b7:a7:19:f3:aa:28:e5:f5:2d:6d:6c:6b:75:
0f:79:97:b3:ac:02:c3:85:d2:48:fa:33:a1:df:71:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2A:F6:99:16:B0:DD:80:18:D5:4A:92:9C:A1:CA:04:A1:FA:80:FE
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:20:4c:06:c3:a5:b8:41:f6:0a:1a:dc:b2:8b:76:69:e3:0a:
3c:1b:a5:b3:db:94:9c:cd:92:69:c7:4f:d9:7c:cc:c8:2b:ab:
8c:a4:b1:cc:11:ac:aa:a4:df:da:d7:24:d3:78:b8:ef:9d:c7:
c7:aa:d2:7b:92:a0:b2:4e:73:56:79:dc:b3:92:61:cc:12:80:
f6:f7:3c:aa:a8:75:fc:ce:bd:9a:8b:f1:ab:ed:73:81:15:48:
e9:b2:8f:82:b4:cb:4c:19:1d:52:d8:eb:b2:70:ec:f3:40:83:
60:7c:9d:01:e0:7c:7b:5d:94:ee:2c:55:ba:89:79:c4:e5:90:
f7:83:19:6b:bd:59:30:e6:c1:c9:3c:9b:6a:b0:5f:ac:f9:46:
98:a5:b0:7f:08:4a:9a:cc:80:10:67:1e:7b:61:10:0d:bc:66:
f9:29:d0:7a:12:cf:44:9b:1b:05:2e:6b:99:7c:58:d3:8a:d3:
0b:ab:c7:b6:4b:64:de:3d:5d:4c:15:05:59:73:ca:bd:d5:8d:
f5:66:72:5f:13:46:64:f2:bc:2d:74:58:3a:49:87:51:5c:27:
4a:e9:4a:81:f4:00:1a:fa:d0:3c:d4:60:73:7c:69:07:36:10:
44:79:19:27:0d:38:13:aa:2b:64:84:b8:09:02:d6:d2:a9:d0:
2d:72:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:59:42 2024 by rpki-client on console-fra.rpki-client.org