Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
File: Ga7XMnKJFnAJuWxA44gK3maACj8.mft (raw, json)
Hash identifier: ibCX7xw35gPPn4/vUpN9/znnqUgdDnLIiLFcnWvBous=
Subject key identifier: 2E:0D:98:B1:90:C1:25:58:21:C9:BD:C3:20:96:E9:11:C2:C7:D7:8F
Authority key identifier: 19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
Certificate issuer: /CN=19aed7327289167009b96c40e3880ade66800a3f
Certificate serial: 01936AB49C867F31445438B3532370BA9ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
Manifest number: 0A0E
Signing time: Tue 26 Nov 2024 23:00:41 +0000
Manifest this update: Tue 26 Nov 2024 23:00:41 +0000
Manifest next update: Wed 27 Nov 2024 23:00:41 +0000
Files and hashes: 1: Ga7XMnKJFnAJuWxA44gK3maACj8.crl (hash: Wgi4KmFXjeqYJWhoYG89MtH3/AM2nXFsvpMlBOI1WSA=)
2: o9Wow6kC1jQPUQ45bI2bbxLFrlY.roa (hash: duJSB3HlrJUcSu+CCQ0txCqS1lnv2uSTuUMJl+oCDD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:9c:86:7f:31:44:54:38:b3:53:23:70:ba:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19aed7327289167009b96c40e3880ade66800a3f
Validity
Not Before: Nov 26 23:00:41 2024 GMT
Not After : Nov 27 23:00:41 2024 GMT
Subject: CN=2e0d98b190c1255821c9bdc32096e911c2c7d78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:47:a8:df:0b:c9:d7:91:e7:55:fa:1a:ee:
3a:b6:9c:ae:a9:a3:59:d8:c6:60:cf:c5:53:f6:fd:
6d:45:8b:fa:c4:b5:dc:6c:b5:f0:21:44:65:6f:d4:
90:bd:3d:cc:d0:41:60:c8:2a:60:24:b1:e6:9c:3b:
f4:e1:49:4e:65:88:c2:2b:f7:56:06:ca:f1:67:52:
c7:ee:f2:6c:69:df:ff:18:5e:c9:9d:28:41:3f:be:
2c:33:85:cd:a0:f4:c2:19:8d:a0:de:f2:c0:35:51:
60:05:3c:92:85:36:ca:ee:5e:3b:e3:ec:d0:35:c8:
80:da:cf:f4:54:bf:11:60:f7:f8:4b:b4:ad:df:30:
d6:e4:1f:f5:71:e2:24:62:a3:2f:91:ac:4d:f9:07:
1c:c2:07:af:e3:4c:6a:65:e3:7b:fc:89:1d:4a:ce:
12:e9:c7:8f:1d:80:1f:bb:88:44:4a:d8:0f:b6:fd:
88:b3:21:21:c1:31:7e:c9:c4:0d:74:fe:7d:77:05:
b7:c8:92:31:ce:c4:a6:03:b1:ea:c7:ce:c5:7d:8f:
b4:3c:66:7d:d0:ed:43:f3:6e:2d:69:e6:27:eb:f3:
85:49:ee:c5:a2:d7:3d:0c:d7:56:d3:7b:5a:de:cf:
de:14:ab:ec:86:40:b2:6d:bf:6d:e6:35:4c:2a:ce:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0D:98:B1:90:C1:25:58:21:C9:BD:C3:20:96:E9:11:C2:C7:D7:8F
X509v3 Authority Key Identifier:
keyid:19:AE:D7:32:72:89:16:70:09:B9:6C:40:E3:88:0A:DE:66:80:0A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ga7XMnKJFnAJuWxA44gK3maACj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/349616-e10e-41d7-9898-09aef8043b35/1/Ga7XMnKJFnAJuWxA44gK3maACj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bc:f6:57:05:54:0a:d5:28:a0:c1:e0:64:62:cc:b8:b9:6e:
f7:8c:c7:ca:09:29:86:4e:ef:76:ef:6b:7f:59:ca:52:2c:22:
b1:96:51:2f:31:77:54:61:29:66:e7:58:b7:a9:85:73:b6:19:
b2:9c:8c:db:93:5d:df:97:24:10:cb:6b:b8:e0:4b:33:b8:f0:
6d:08:91:34:7e:69:ab:86:89:22:24:ea:ca:20:39:43:7f:62:
a7:ad:5f:0e:25:a0:90:cc:7e:8a:4e:7d:eb:b0:23:9a:ad:79:
4e:4a:97:ab:c3:d8:b3:b7:25:fe:8b:ca:e9:c9:22:a4:7b:b3:
62:d8:94:92:cc:b1:1e:d5:b0:21:b5:8d:bd:c3:eb:18:14:96:
c2:85:ef:01:32:30:ef:bf:1f:a6:9d:cc:52:18:54:79:af:1c:
9a:5b:ad:c3:d8:4e:31:d7:1e:3a:d8:3f:f7:20:d5:9b:7d:71:
e5:be:17:f8:76:9b:05:31:8a:0c:aa:cb:4a:e1:e6:78:01:61:
47:85:7e:4d:f6:05:a5:e4:c6:d7:a5:32:d6:b2:97:a2:5c:a4:
31:0d:df:81:9c:89:a7:ef:60:3b:51:4d:76:f7:04:15:4d:8a:
49:a5:42:3a:50:72:84:4b:ed:3a:4e:75:1f:15:c2:07:39:72:
7c:f8:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:48 2024 by rpki-client on console-ams.rpki-client.org