Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: MClF39U0iUzx3y9hfnv7Hpr8efv5pLZUMY+IeK0pEF0=
Subject key identifier: F5:36:AD:DC:4E:8B:0B:E7:91:8B:E9:B2:22:FC:98:96:CC:73:FB:7F
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 019357646C37094A906E80A66442F0725314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 08D5
Signing time: Sat 23 Nov 2024 05:00:19 +0000
Manifest this update: Sat 23 Nov 2024 05:00:19 +0000
Manifest next update: Sun 24 Nov 2024 05:00:19 +0000
Files and hashes: 1: Vd0LU7N3t78DCgm3MKX5BZSuGUU.roa (hash: FXo0j30W+yEFKii7AzIOf1NPp7tAb5VF2py+zqfciF8=)
2: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: DHiTvOR9fBvbq0kgAOeSrJDsdwCc+0SDTsvgx7NPKaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:6c:37:09:4a:90:6e:80:a6:64:42:f0:72:53:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Nov 23 05:00:19 2024 GMT
Not After : Nov 24 05:00:19 2024 GMT
Subject: CN=f536addc4e8b0be7918be9b222fc9896cc73fb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:81:ad:ba:df:3a:6c:0e:1b:49:a8:39:b0:
03:75:72:c1:e8:0b:8b:f7:e4:7f:7a:68:22:9a:6e:
00:cb:c6:20:d9:7b:d0:f6:1d:dc:d2:a8:a9:3e:2a:
e0:04:f2:e5:cd:33:31:68:9d:ed:ff:8c:b5:f7:41:
a4:18:e4:17:9d:e7:b6:ef:4d:92:28:b1:0d:98:c4:
92:94:65:cd:0b:68:a9:6f:98:bf:0d:47:49:5f:c5:
7a:35:d7:65:08:5e:4a:33:a6:50:c9:5a:7a:f3:c3:
82:f5:6e:94:c8:27:dc:d9:a1:ce:ba:f0:fe:71:65:
b4:46:5d:82:11:48:8c:59:74:7b:93:5c:25:9e:56:
f8:21:6b:02:50:a4:2d:85:cb:b4:17:17:66:e5:5a:
8f:58:20:52:04:7d:59:ec:8d:d6:77:04:f0:df:a2:
a3:51:cc:e9:c5:54:95:c6:6a:55:6a:b9:aa:eb:3c:
23:b5:37:8a:10:22:44:0a:34:15:a3:04:f1:43:26:
43:d9:ec:e3:34:0b:b4:60:3a:dd:46:d0:38:36:5f:
3e:5e:78:2d:51:d8:91:4a:b0:de:78:85:a8:2c:fb:
43:56:63:7d:c0:31:cc:91:a4:0c:c5:89:6d:20:a7:
3d:0f:dd:70:0e:a3:24:78:50:0b:ad:4f:e4:56:7b:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:AD:DC:4E:8B:0B:E7:91:8B:E9:B2:22:FC:98:96:CC:73:FB:7F
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f9:de:66:42:9a:b7:ed:e5:89:a0:c0:97:7a:98:55:16:f5:
49:41:37:cc:17:8f:ea:13:00:ec:de:01:75:3c:16:91:bc:38:
e5:d3:71:7a:50:39:0b:cb:ef:0e:e6:19:02:1c:9d:6e:24:19:
00:da:f5:09:66:18:23:c7:da:cd:b6:f4:2e:c5:80:01:6c:b6:
4f:40:32:40:8b:f9:16:2a:64:a5:53:10:a6:a5:78:fa:62:cc:
ca:39:e2:62:40:54:00:47:a7:9c:52:5d:9b:75:16:9d:88:21:
90:c9:2f:9e:ec:be:10:34:29:43:47:4a:46:26:ee:14:9c:a8:
a5:5e:83:6f:99:6f:64:77:2a:6c:48:5f:4e:39:51:43:07:6a:
c6:dd:54:a7:df:54:f7:34:d7:5d:7f:fb:8e:f8:eb:8d:73:b6:
6a:7f:2f:4f:a5:88:a9:5f:39:0b:6f:a6:a8:b7:32:bd:fc:2c:
9f:c4:1b:08:e5:ce:97:4a:17:f2:cc:e4:f4:8c:da:f0:fe:2d:
31:ef:ce:51:b1:19:28:0d:2d:8d:d2:a2:42:19:ef:4d:94:e5:
2f:02:09:f2:3f:e6:5b:3b:e4:41:fd:31:6a:c8:76:49:8f:26:
03:ab:f5:e2:3a:6b:b3:12:77:ad:bf:65:df:5f:96:4b:1f:11:
7f:e5:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:39 2024 by rpki-client on console-ams.rpki-client.org