Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: WEqqDbO0w1FgnIW/pYWJ3yLydiaUtKKX9h2txJZWUE8=
Subject key identifier: 86:50:B2:E0:76:4A:40:A6:01:4E:0B:6C:24:DB:0D:D0:B8:BF:54:01
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019353BE9FE9B86D056D96B9CE055BE7575D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 12DE
Signing time: Fri 22 Nov 2024 12:00:21 +0000
Manifest this update: Fri 22 Nov 2024 12:00:21 +0000
Manifest next update: Sat 23 Nov 2024 12:00:21 +0000
Files and hashes: 1: SQpZxKNN1xTp3KUAMTpcsSR1_uU.roa (hash: Tux3E+ncxVW5OPeYQ+eiErzQTkq8bm9R4lJB3uf9oVE=)
2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: Bn0tkDoWq9ihsLYzOdKGmsGeWPGlAZ4w3JNdPRSxCI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:9f:e9:b8:6d:05:6d:96:b9:ce:05:5b:e7:57:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Nov 22 12:00:21 2024 GMT
Not After : Nov 23 12:00:21 2024 GMT
Subject: CN=8650b2e0764a40a6014e0b6c24db0dd0b8bf5401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:28:41:18:2c:a3:67:45:20:33:82:69:36:
66:af:f8:41:c5:63:6e:db:6b:25:d7:f9:8f:d4:8d:
b1:e0:c5:5e:18:1c:94:14:61:c7:04:16:54:94:d9:
70:1b:c0:b3:4f:85:26:f4:6a:9a:a0:c5:ab:c2:86:
59:fe:9b:bb:23:9d:3c:d2:31:d5:ab:8e:dd:30:f5:
3b:1b:6f:1d:fa:39:eb:7e:88:f3:32:ce:c8:6f:aa:
f6:68:fe:f3:a9:ec:35:84:47:d8:cf:48:67:de:fd:
d7:57:f3:9e:1d:6d:48:a8:c5:ed:13:ea:62:a8:6e:
00:5b:d2:a6:e1:ff:0d:d3:d3:d4:a0:2b:9e:94:98:
db:70:04:b3:2b:d8:d9:41:0e:eb:5c:13:29:56:7b:
19:81:c5:3e:66:c3:81:d8:53:9f:a3:fe:ca:3e:4a:
a6:87:97:bf:e7:99:38:2b:6b:7c:f0:fc:fd:01:2c:
94:b9:f2:7d:0c:a3:9c:1f:64:f3:27:8c:12:6e:c1:
31:14:89:8d:f4:b7:15:d8:6f:82:ab:67:14:14:2b:
fb:41:86:d8:d3:27:ab:8b:94:b2:5f:03:7f:44:c3:
33:d7:42:85:4b:ae:da:45:5a:a1:a8:a2:0c:03:a0:
df:f5:00:13:f3:99:12:db:6f:30:80:a8:54:c5:1e:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:50:B2:E0:76:4A:40:A6:01:4E:0B:6C:24:DB:0D:D0:B8:BF:54:01
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0a:a6:8c:f0:39:f1:d6:f1:f6:25:ac:7d:89:47:53:32:31:
4c:db:b1:58:0e:3a:6a:79:6c:45:c5:e6:98:3d:13:f7:dd:29:
f1:5e:a7:7b:9a:b7:b6:2b:f8:4c:00:a0:55:1f:e5:1a:5f:c9:
9e:a5:de:1a:d8:e7:a4:84:b4:55:d6:cf:3f:7b:75:f4:f0:c1:
75:ed:c9:01:77:a2:3b:9a:60:1a:9a:51:df:3d:88:02:35:a8:
b0:11:10:a3:23:c8:59:c6:18:1a:6c:c3:d5:39:a4:ca:78:1f:
47:ea:f3:3a:5b:d6:bc:b6:09:2e:07:e4:03:2a:0f:72:28:06:
eb:55:5d:10:44:c2:95:34:3c:ad:45:ea:1d:db:59:e0:56:38:
c0:3b:b8:34:25:33:a6:17:ef:2d:8f:e8:65:b6:41:3e:b5:8d:
b8:b9:81:e8:1e:2d:5f:4f:32:72:54:3d:d9:f3:4e:04:e1:a0:
0c:b6:d7:06:5b:d1:d5:06:6a:df:c4:02:10:97:c1:7c:b7:8f:
88:77:61:b5:bf:f3:27:53:16:31:ca:23:35:09:97:0f:ff:83:
e3:35:84:6a:43:63:b6:6e:21:17:6b:61:4b:da:6a:da:02:10:
b6:d5:9f:d3:b6:53:c2:cb:e1:3c:07:bd:16:99:4b:47:2b:b4:
eb:85:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:01 2024 by rpki-client on console-ams.rpki-client.org