Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: sUrKrPuinRv8QDtLx8MsylPcOJK2mu3wCmv07JuGXn8=
Subject key identifier: 1D:7C:4C:BA:4C:07:0D:B4:04:C5:CE:26:42:16:22:2A:88:CF:A1:D4
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 019352ABD20BC7F50D1947A37D3C3EF39A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 07:00:12 +0000
Manifest this update: Fri 22 Nov 2024 07:00:12 +0000
Manifest next update: Sat 23 Nov 2024 07:00:12 +0000
Files and hashes: 1: DdB9Qhn4EYI41S3iKzilnZ5fOWo.roa (hash: kTuM8tXGjDXAEO5krla9vCMyLMIh0HsvB3TD6fdsaxU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: k4c4jlr+AJ9/Ly+zP+MV22DV5BJ/nZQp17qlqGw1srs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:d2:0b:c7:f5:0d:19:47:a3:7d:3c:3e:f3:9a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Nov 22 07:00:12 2024 GMT
Not After : Nov 23 07:00:12 2024 GMT
Subject: CN=1d7c4cba4c070db404c5ce264216222a88cfa1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:0b:64:ad:46:3f:27:7a:7e:90:50:85:e3:
12:45:1b:8c:a6:b5:c5:35:f4:d1:22:56:d9:24:95:
5e:50:fa:09:16:64:dc:ee:90:69:82:2a:63:e5:3d:
48:32:f4:4f:cf:0f:cf:de:19:33:9a:37:b3:83:e0:
8c:61:14:ee:3b:75:55:e4:06:5e:f7:2a:1a:75:1e:
1d:ab:79:0f:ca:e5:88:28:6b:74:f0:c2:bc:4d:35:
ce:85:19:2d:fb:18:cd:a5:4c:5a:10:2a:a7:b5:7a:
2c:09:32:a9:7d:ea:58:55:91:60:b4:24:b4:9b:df:
0f:12:64:d2:d5:9b:bd:56:9f:01:b2:57:a1:f1:91:
2f:af:17:ef:e9:be:96:83:af:4d:19:d1:dd:96:89:
01:26:4a:fc:ed:3d:af:b2:ee:39:3b:ea:1e:ac:be:
54:ef:96:58:78:22:4a:87:b7:ef:1a:ac:b7:74:69:
d6:95:41:69:0a:32:b5:9f:73:c2:37:7d:aa:c4:6b:
04:44:00:a2:fd:b0:6e:cc:de:e7:cb:fd:d1:2b:f2:
a9:97:44:ed:c3:bc:65:88:61:de:6d:c8:ae:3b:a4:
e7:c0:0b:80:4f:d2:d0:74:5b:cb:6e:1d:f1:61:ac:
9c:94:45:e7:85:93:b9:25:05:ad:8e:d6:e4:ec:0a:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:4C:BA:4C:07:0D:B4:04:C5:CE:26:42:16:22:2A:88:CF:A1:D4
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3c:92:26:67:b2:39:b3:b7:8a:58:e3:5a:25:45:24:65:df:
55:77:61:49:98:92:80:32:7b:2b:0a:c8:6f:5e:0d:5d:41:9b:
2c:31:93:fc:bc:1b:0e:50:dc:ca:d5:13:85:dd:52:e9:48:38:
f1:ef:97:40:71:8e:1e:5a:30:24:f5:1a:35:ac:5b:0b:ea:d5:
18:60:08:f8:09:ee:41:3a:5c:16:70:44:39:0a:06:ab:b3:24:
68:2c:52:b9:8c:83:a0:6d:c1:5d:8a:9b:49:a0:40:fd:be:1e:
0a:b0:75:28:6a:e4:8c:95:0c:cc:6b:76:fb:32:ab:45:f4:c7:
84:2f:87:7b:7f:72:d2:25:8a:78:66:23:fa:8a:de:5d:2d:a7:
ff:a0:88:5c:13:44:5b:23:64:83:4a:72:e9:50:a4:29:d4:d3:
47:b9:0d:6b:c2:29:b6:ee:9e:b8:fa:c4:71:99:f7:35:92:c5:
2e:0e:88:a1:1e:15:d3:19:83:fb:e4:09:eb:4a:52:59:86:11:
53:5f:75:0a:58:95:92:0c:85:c2:43:a1:e6:de:53:28:31:51:
93:96:05:95:10:93:a5:94:20:01:08:b6:72:9d:ac:8c:43:05:
30:1e:17:98:a3:6b:e2:fd:90:b8:3e:ff:78:58:b9:a1:f2:29:
e1:95:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:47:02 2024 by rpki-client on console-ams.rpki-client.org