Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: qQMipZ00Z71YO6EkB3ZXnljG5p3wyZrsMGAz6cVHzHQ=
Subject key identifier: E8:A4:0A:52:38:10:89:40:99:51:C7:9C:C3:4A:A0:74:67:9E:E4:D5
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019357649F4E5DF18E7D5D252B335CAC4827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 05:00:32 +0000
Manifest this update: Sat 23 Nov 2024 05:00:32 +0000
Manifest next update: Sun 24 Nov 2024 05:00:32 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: 2eXNoDa621zSNrEhYbBfgaUN1hphisj17i2P6WNKRu8=)
2: v-lyzaf_xA5Tumq8lg1Ei7EzQfI.roa (hash: cyO2gFZSO/KcvLI20z1qxd7D5XluK8buyz9GgBc7Kg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:9f:4e:5d:f1:8e:7d:5d:25:2b:33:5c:ac:48:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Nov 23 05:00:32 2024 GMT
Not After : Nov 24 05:00:32 2024 GMT
Subject: CN=e8a40a52381089409951c79cc34aa074679ee4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:16:ca:8c:e3:15:57:bf:6b:e0:94:61:0c:
9f:4a:20:ed:cf:8d:74:8a:f2:a5:6e:14:95:1e:55:
dd:b4:9c:1e:f4:fd:03:d7:cf:73:c3:27:ee:cb:77:
5c:28:fa:2d:55:9f:1f:a8:44:27:a9:8f:4f:e3:6e:
1c:80:20:b6:10:42:f2:27:75:ef:35:2b:4e:6a:8a:
30:61:9a:a4:01:b9:c1:58:52:ac:97:a9:7e:f1:ea:
53:5a:36:8e:05:59:ca:4a:38:21:cf:6b:33:8c:da:
b6:8a:a9:7e:0e:35:4a:d5:4d:f7:0d:06:ac:57:c1:
28:cb:e7:47:1a:e2:9b:d2:9b:43:9c:71:19:ba:dd:
d8:44:8e:ad:14:1a:1e:c3:7d:28:97:48:9e:5b:75:
f5:b9:b4:12:9b:20:a7:15:e1:11:17:30:95:91:94:
7f:65:8e:a0:cb:42:01:5b:75:54:12:56:b6:a4:24:
ba:4e:50:90:4a:5b:d0:e8:84:fe:8c:1e:5e:df:39:
6a:d3:79:33:cf:46:2a:85:ae:ce:53:ad:c0:7a:4b:
3d:c8:4b:52:a1:3c:77:cd:f1:3c:5c:03:82:a2:73:
f1:1b:39:80:ed:4b:58:d8:fd:e5:13:bf:fa:d9:0f:
d3:77:f8:5f:bb:27:98:8c:5e:29:58:a8:ad:b7:a0:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A4:0A:52:38:10:89:40:99:51:C7:9C:C3:4A:A0:74:67:9E:E4:D5
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:91:09:a4:76:b1:ee:14:06:a0:7c:e5:20:13:48:be:54:5b:
06:f2:fb:24:72:e9:25:98:f0:9e:15:1c:0c:e5:81:c1:04:2f:
62:85:cc:d6:b0:16:eb:80:a1:b6:c6:d8:d7:fd:2e:4a:79:f8:
54:a3:b1:ee:c7:34:1d:40:4d:57:db:5d:34:62:b6:7f:8b:fe:
da:9b:95:3e:ef:8e:e2:0d:40:d7:d1:f6:a0:ae:bb:ce:49:99:
d7:4f:43:39:7a:fc:3c:a8:e3:6f:b4:05:c7:57:21:da:15:24:
8e:ab:ae:66:f6:da:51:ac:2e:18:b0:4f:52:b4:a0:d8:75:3f:
ee:15:11:98:23:5e:61:9e:6c:56:1b:df:70:4a:54:73:11:a2:
ab:30:51:57:42:cd:41:b1:73:4a:80:9d:9d:e3:6e:18:29:d5:
30:25:00:70:c0:b7:3b:8e:fe:59:7f:37:96:54:49:2e:df:14:
bc:af:6c:21:7e:9c:79:42:1a:ff:94:46:9a:51:ff:84:21:c9:
f1:f9:c2:b4:44:87:41:52:5f:7a:9c:5e:ed:2a:92:b2:52:fc:
ac:03:b4:b2:6d:c6:91:55:a9:0b:5a:7e:03:f0:ff:b7:d3:15:
c5:00:b6:d9:59:83:b6:e9:fd:85:41:12:cb:6b:2b:f6:b5:02:
bd:13:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:23 2024 by rpki-client on console-ams.rpki-client.org