Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
File: gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft (raw, json)
Hash identifier: ry63Rom9yoj8tnFh84qm4ygbuZaVLyRgJ431PqBP44U=
Subject key identifier: BC:28:4B:39:D5:BE:85:E1:21:48:96:5D:E1:1C:84:76:8A:AA:B4:78
Authority key identifier: 81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7
Certificate issuer: /CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
Certificate serial: 01936556F0E0CB7D48795A5AA973E8E991AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
Manifest number: 10A4
Signing time: Mon 25 Nov 2024 22:00:16 +0000
Manifest this update: Mon 25 Nov 2024 22:00:16 +0000
Manifest next update: Tue 26 Nov 2024 22:00:16 +0000
Files and hashes: 1: 74dE9K-1t7X3osXGKKA2Yrz9m1Q.roa (hash: +G3AnBpHm48/4REveTmD9LZAmJDRxkhRBo5R9LKaPpA=)
2: gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl (hash: 5V9mrsOq1ufqneJerZprJZ9nSdQ2OgMa+xFbbxi8FF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:56:f0:e0:cb:7d:48:79:5a:5a:a9:73:e8:e9:91:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
Validity
Not Before: Nov 25 22:00:16 2024 GMT
Not After : Nov 26 22:00:16 2024 GMT
Subject: CN=bc284b39d5be85e12148965de11c84768aaab478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:27:9c:dd:68:44:14:b8:ac:9a:45:40:69:
03:ff:ce:d4:f5:c2:2b:8d:5d:67:ae:f3:a8:31:56:
a8:14:04:0d:05:b1:39:e8:97:bb:e5:df:92:db:5f:
09:8c:ba:2b:a1:d4:3f:12:d8:22:1a:07:75:50:cd:
93:7e:6d:ac:e6:ee:31:b2:16:50:af:5d:37:73:02:
24:f2:09:71:6a:74:b7:ee:c4:64:e5:5f:f0:11:e3:
66:d6:0c:a2:36:53:cf:40:d3:37:c6:85:f6:af:8d:
ea:9e:01:9c:25:ad:e6:ff:c2:8a:38:32:cd:e3:90:
3e:eb:a7:66:4b:63:56:d2:ac:9e:a0:f9:33:c1:30:
84:6e:d5:97:4f:74:d7:8c:1b:d8:d8:b3:2e:1f:ac:
94:e5:a0:47:5a:ca:36:ff:59:7a:75:81:05:ff:66:
4f:3b:6f:6b:a9:52:aa:46:8a:53:b4:cd:a9:3e:4a:
91:20:64:7f:61:48:2f:de:bb:e4:c6:7f:4e:52:ad:
0f:6e:75:e0:b5:ba:22:af:38:cd:c1:28:41:ea:9e:
c7:04:64:40:32:fe:a1:eb:98:a2:69:bd:80:ea:a4:
0f:8b:1e:7a:28:7e:a5:90:d5:e4:92:d6:61:e6:6f:
1f:32:2e:9d:8e:0d:8c:fc:83:e4:fa:a9:ac:9f:84:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:4B:39:D5:BE:85:E1:21:48:96:5D:E1:1C:84:76:8A:AA:B4:78
X509v3 Authority Key Identifier:
keyid:81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e5:ac:41:15:38:66:f1:d6:45:2e:9d:2f:83:2f:02:c7:d5:
30:72:6a:15:28:8d:39:cd:e6:72:ef:ac:2b:b6:31:68:0c:d0:
e1:71:a8:31:75:f5:94:87:61:53:1d:5b:6c:d6:f5:4a:c6:1f:
a9:3f:10:14:db:cb:d8:0a:f2:11:ba:60:2a:af:8a:a9:d7:17:
17:4c:ac:63:3d:68:26:cd:3e:a9:97:97:a5:32:09:39:9a:e6:
2d:21:96:55:e0:a8:6c:4c:a4:34:d4:09:9c:bc:4f:91:47:fe:
0d:27:c4:0d:a5:f8:10:37:b5:97:0c:86:b3:2e:83:b5:8a:eb:
bf:24:32:cf:42:a6:e1:72:98:0a:c1:a9:ac:d7:de:5d:3b:cc:
6f:af:43:5f:94:11:c6:33:86:15:8a:0e:d9:35:22:31:67:5a:
ce:de:74:b4:95:f9:c2:8e:d3:e8:58:bc:cd:76:bc:10:99:5f:
e4:f7:88:8c:9c:73:07:a8:5d:d1:95:fc:28:77:de:1f:38:4c:
96:d5:dc:ae:b9:ce:ad:bc:2b:f7:41:f2:ed:67:f2:2b:d0:9c:
a4:11:43:93:91:3d:30:64:06:00:9b:0a:cd:97:7f:df:bf:8e:
b6:b1:17:2d:cd:84:9d:86:b9:5b:f7:f7:bd:c8:d1:f8:64:8f:
86:fb:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:36:09 2024 by rpki-client on console-ams.rpki-client.org