Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: baQBqK3JavFRv9eHR4ohHKh5CaR+uQrgwXlZJILFgRA=
Subject key identifier: 94:4D:87:B8:70:E0:59:2F:6D:D3:FB:31:5C:A1:ED:A0:F9:66:0C:AA
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 0193579BDB55374BB170FA61892CAA8BE186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 1211
Signing time: Sat 23 Nov 2024 06:00:52 +0000
Manifest this update: Sat 23 Nov 2024 06:00:52 +0000
Manifest next update: Sun 24 Nov 2024 06:00:52 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: 9INsxZpXGGSEV7zoDFa3pC9sCn12xRaPXyyjiFghKPE=)
2: fQVEtKDzussz1PRDw8t4hQlQL3E.roa (hash: 4pW0vjjiFOuF9QS+P79WQbJ3SbBvyVwpixLrgw2HXuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:db:55:37:4b:b1:70:fa:61:89:2c:aa:8b:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Nov 23 06:00:52 2024 GMT
Not After : Nov 24 06:00:52 2024 GMT
Subject: CN=944d87b870e0592f6dd3fb315ca1eda0f9660caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:d1:30:30:3f:1a:e3:82:82:00:99:e9:b2:
12:48:5e:14:df:05:1f:b9:b8:e7:da:b6:05:dd:4e:
25:8a:6e:21:97:74:80:8f:a6:4d:bb:1e:0d:fb:19:
db:b1:9f:8d:69:23:f8:ef:5b:4f:f0:20:51:9a:5e:
32:53:30:ad:96:53:13:cb:67:54:3f:ca:59:f0:54:
82:6c:d9:cd:99:e6:66:f7:63:cc:29:1d:40:32:df:
1f:98:0d:fb:27:18:a9:70:3d:72:e1:4a:4f:4d:ae:
9e:a2:5a:ef:85:48:03:24:4c:1f:9d:55:ab:a7:82:
eb:9a:0b:7b:cd:05:b2:76:76:21:73:44:89:d6:79:
b0:7c:d4:51:fb:9b:d1:b4:28:bb:21:e5:b5:a7:ab:
19:57:b4:55:44:9f:01:07:2c:f6:cc:8b:87:91:af:
34:e8:54:a6:01:31:10:2b:e6:bc:f1:5e:e5:c1:e2:
ce:b0:a5:96:6b:27:e1:77:0d:4a:04:bc:69:49:8a:
84:cc:a1:d9:e1:4c:a1:0f:fd:2d:66:62:2d:4a:0b:
69:e4:d3:3d:80:95:79:63:7c:79:f2:13:1d:fc:30:
5e:f3:80:ad:9f:9d:7b:ef:ec:b5:04:6c:65:df:d2:
2e:0c:c4:e1:d3:42:08:a6:04:8d:44:6f:76:68:f7:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4D:87:B8:70:E0:59:2F:6D:D3:FB:31:5C:A1:ED:A0:F9:66:0C:AA
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2a:db:00:59:75:79:fd:88:ae:59:2f:b0:3a:f4:a4:63:3b:
cd:c0:a2:98:94:84:08:c9:8e:c5:f7:35:cf:e3:5f:27:74:41:
7c:c4:4f:c7:b5:bc:f2:67:c4:ab:ae:fa:da:dd:3b:35:4d:57:
0d:5d:f6:ad:36:33:6a:94:00:74:ad:98:cb:ff:41:65:35:22:
3f:fd:46:6c:d7:11:86:e7:a0:a7:76:90:c9:ff:1b:83:de:4d:
73:34:e8:d6:ae:bc:71:83:c8:69:fa:88:ce:d1:bc:bd:db:f0:
b5:b5:6f:34:de:00:53:19:34:c6:92:66:6a:05:b3:c0:b5:ad:
71:b3:6f:a7:da:df:d3:9d:02:c7:1f:52:5a:33:de:dc:66:f3:
b9:48:d8:ef:e7:3b:20:15:12:4f:86:bc:64:57:a5:0b:42:82:
de:b3:b6:7c:5c:8e:65:12:8c:f3:f5:33:6e:ee:2e:0a:2c:4b:
71:fc:b3:fd:85:5c:ff:95:9f:a8:ad:3a:52:92:e8:83:1a:92:
5d:fe:32:e8:d2:ee:85:df:34:4c:30:80:6f:75:5d:d1:88:d6:
6c:04:7d:9b:55:1e:71:0e:bf:6a:1e:d1:1a:3e:ce:35:dd:94:
0d:14:61:53:0a:42:2b:fb:a5:78:09:53:cc:b6:47:64:e7:64:
6f:d4:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:39 2024 by rpki-client on console-fra.rpki-client.org