Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: S4b0fKapbDA+psqbm6CyUKXJ8Zo9CJbJ4pUUkcgh8jM=
Subject key identifier: AF:B4:14:35:63:78:87:5A:5B:AB:9B:2C:3D:46:88:2E:66:71:6E:07
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 0193568B21040E95A86AE3077898512A1E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 0FA0
Signing time: Sat 23 Nov 2024 01:02:58 +0000
Manifest this update: Sat 23 Nov 2024 01:02:58 +0000
Manifest next update: Sun 24 Nov 2024 01:02:58 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: YbHM4waedydVMVIyz6vF7edKaTaD6bS6HOn7UnHgLMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:21:04:0e:95:a8:6a:e3:07:78:98:51:2a:1e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Nov 23 01:02:58 2024 GMT
Not After : Nov 24 01:02:58 2024 GMT
Subject: CN=afb414356378875a5bab9b2c3d46882e66716e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:54:4b:ed:32:a5:4a:12:20:7e:a9:27:3f:
22:72:ce:de:56:0e:35:3c:c3:9c:59:14:2b:76:1b:
1d:17:44:bd:bf:f3:8d:dc:86:dd:f8:43:c2:49:be:
90:4c:c3:a5:f5:68:c2:fe:cb:db:f7:ba:32:5b:3a:
d4:f3:57:80:fe:a0:a9:54:bb:a4:ad:57:f7:e8:ef:
6c:56:8f:57:0d:2b:62:c4:21:88:45:b9:89:33:0e:
a2:11:5e:d5:c0:f6:00:89:11:4e:4b:97:d1:7e:77:
27:63:8b:62:2c:0c:96:b0:be:b5:ef:a9:f7:d6:49:
13:a1:f8:0c:5f:00:2c:e1:8f:5b:98:fc:de:d5:d6:
37:bf:17:3d:5c:5c:2c:b2:41:2a:4d:37:b2:d9:ff:
de:84:b8:be:70:b4:4d:5f:32:06:33:94:40:1d:20:
dd:b6:39:b6:a2:46:d6:3a:d1:8d:0d:c8:76:f4:07:
82:ce:ac:b3:ea:28:3a:cf:dd:fe:f9:89:1a:2a:71:
46:97:fe:cd:5c:9c:4e:8d:a8:a9:b0:dd:d9:e1:7d:
e4:76:a4:43:a6:4e:85:48:ce:65:4f:59:c1:70:8a:
45:55:f7:42:80:c0:c9:89:3f:81:75:01:d3:fa:1d:
db:29:99:c4:bf:b3:c8:da:be:9a:dc:40:36:4b:17:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B4:14:35:63:78:87:5A:5B:AB:9B:2C:3D:46:88:2E:66:71:6E:07
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9a:65:46:73:59:8b:81:db:69:e6:61:0b:7a:06:99:4a:ff:
b9:0d:2a:8f:81:82:a1:55:32:53:89:94:56:44:f7:d7:a2:ea:
7a:b8:f6:aa:92:7d:68:21:ee:29:a3:00:65:0f:52:ec:65:72:
1e:c0:a5:24:76:19:df:fd:36:fb:11:9c:26:de:b2:b0:65:29:
3e:f8:28:a9:22:98:a3:fe:8c:14:15:d8:84:ff:62:32:7c:23:
f9:da:43:b6:cd:0e:40:a7:ed:2a:27:13:6d:9a:0e:0d:d6:2f:
1f:20:a9:73:75:2a:bf:55:c5:ca:ca:a1:36:b5:da:d8:0b:44:
1f:9e:af:6a:b6:92:68:04:f0:c8:05:ef:59:5f:6c:37:7e:4a:
1e:0a:cb:a1:0d:39:92:17:5b:2e:7b:69:92:d9:fd:8d:2a:af:
bb:39:47:c5:e0:80:91:23:8d:db:e5:46:fc:fd:59:90:4d:24:
97:55:f4:d9:86:bc:89:03:c3:e2:ff:72:b8:f5:fc:3d:27:bd:
0d:5b:de:6c:27:bd:c2:26:76:af:54:3f:d0:d7:62:51:3e:55:
59:f9:84:bb:5d:df:95:6f:f8:16:df:0e:12:9f:17:a4:b4:fd:
04:c0:ca:d6:18:b0:a6:f1:44:9e:7d:ef:c9:aa:e3:e7:54:80:
38:51:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:00 2024 by rpki-client on console-fra.rpki-client.org