Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: deFQjHkqzP9QfY3uVhTo79SiGK0Y7cQ/SxA544M+2Jw=
Subject key identifier: 8C:7C:80:24:5D:3C:A4:4E:1A:0F:6F:C5:BB:DC:4B:9B:BA:6D:B7:71
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 019369DAF505365711549ED1C528D0A36C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0AFE
Signing time: Tue 26 Nov 2024 19:02:57 +0000
Manifest this update: Tue 26 Nov 2024 19:02:57 +0000
Manifest next update: Wed 27 Nov 2024 19:02:57 +0000
Files and hashes: 1: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: 5FsV3gZ4aZPCtZpj6y0oUK6RzekjrytQUg1qmi6ftZI=)
2: IMaJb3_DWtc999UgSBcVctVwm3c.roa (hash: WDChAXsYGkjhzH5azTg8uBwPYLMd3030OB1/+WKy3L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:f5:05:36:57:11:54:9e:d1:c5:28:d0:a3:6c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Nov 26 19:02:57 2024 GMT
Not After : Nov 27 19:02:57 2024 GMT
Subject: CN=8c7c80245d3ca44e1a0f6fc5bbdc4b9bba6db771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:59:36:80:0f:5f:f4:c3:ca:d0:6f:32:98:
b3:4a:73:5c:f1:09:90:01:09:9d:da:50:d7:86:f5:
8d:f3:38:c8:c5:06:de:92:f1:2f:71:8e:a1:e1:bc:
fd:98:84:9c:80:ea:41:9b:ab:43:d8:5a:a8:7f:d4:
19:a8:13:5f:bf:e1:c8:ea:94:6f:fd:50:fe:0a:86:
82:41:e9:0d:95:4d:1c:29:8e:f1:d9:dd:ce:d7:a8:
7f:a7:73:b4:59:a7:b8:ac:2d:c4:78:9a:71:3e:01:
ea:a9:38:8c:03:84:6e:5c:07:7c:02:76:90:e2:73:
37:f6:a0:13:8c:dc:e4:5d:6b:1e:c4:f7:bb:a2:54:
56:1d:03:e3:50:4a:93:ef:d9:69:b4:ea:d2:e1:a0:
42:e7:86:24:f5:58:92:d5:17:48:9b:09:4b:f9:ac:
46:c9:be:d1:77:76:6e:dd:6c:39:9e:99:77:36:46:
5b:7c:9c:6b:a7:fa:62:e1:cb:59:61:e6:d8:43:db:
f9:3f:7c:a0:5b:d3:38:3f:08:28:77:9d:9f:a3:1d:
14:04:94:29:ea:05:94:37:07:16:2d:a1:3b:a2:bc:
fb:45:d4:03:78:bc:f2:be:f1:11:59:98:09:08:7e:
2a:1f:5b:e8:93:aa:84:62:50:39:6a:03:a5:d5:c3:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7C:80:24:5D:3C:A4:4E:1A:0F:6F:C5:BB:DC:4B:9B:BA:6D:B7:71
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:08:74:9b:b8:67:75:16:5e:b8:3d:1a:de:ac:1b:19:28:24:
f5:ff:79:81:7a:80:72:fd:8b:28:2f:06:4c:d9:e1:45:cc:97:
c9:8d:10:ad:01:0d:77:a0:27:8e:bf:fc:1d:96:8e:a7:a2:bb:
ee:2b:f8:47:4e:1c:7c:d2:e2:41:d9:84:3d:c3:6d:b6:fa:b3:
7a:3f:fa:d0:19:72:22:2d:1b:24:73:cf:27:11:d4:46:c5:e1:
f3:21:0e:23:e5:c6:05:7a:7a:98:e0:76:64:60:b8:65:4e:8b:
47:43:70:66:7e:29:81:d0:6b:79:b5:58:4e:c8:6a:b6:b5:bd:
34:0f:de:c2:0e:74:c7:92:9d:0f:5f:2f:91:8f:93:c0:eb:ee:
af:5c:e8:5b:12:93:66:bb:57:c3:de:d2:15:0e:93:38:84:f1:
27:c3:c8:35:5a:8a:7a:42:a7:c0:3c:33:f9:fb:30:e2:7d:fb:
38:04:96:42:b5:d7:c0:e7:c3:ae:25:b4:e2:53:17:30:e9:3d:
9b:d0:d6:d8:b4:b9:ce:43:2a:0b:90:b9:3e:69:0e:3e:0f:2e:
65:12:88:71:0f:c5:07:39:9d:87:5c:2a:ee:74:af:50:a8:96:
39:96:d8:be:d0:e6:f3:27:68:94:97:ce:78:8b:5c:99:7e:52:
da:99:f0:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2vUFNlcRVJ7RxSjQo2xlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjIzZGJhNjJiODU3Y2E3M2Q4YTgwYTExOTkwZjcxZTA0
ZTdkYjYwHhcNMjQxMTI2MTkwMjU3WhcNMjQxMTI3MTkwMjU3WjAzMTEwLwYDVQQD
Eyg4YzdjODAyNDVkM2NhNDRlMWEwZjZmYzViYmRjNGI5YmJhNmRiNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq9ZNoAPX/TDytBvMpizSnNc8QmQ
AQmd2lDXhvWN8zjIxQbekvEvcY6h4bz9mIScgOpBm6tD2Fqof9QZqBNfv+HI6pRv
/VD+CoaCQekNlU0cKY7x2d3O16h/p3O0Wae4rC3EeJpxPgHqqTiMA4RuXAd8AnaQ
4nM39qATjNzkXWsexPe7olRWHQPjUEqT79lptOrS4aBC54Yk9ViS1RdImwlL+axG
yb7Rd3Zu3Ww5npl3NkZbfJxrp/pi4ctZYebYQ9v5P3ygW9M4Pwgod52fox0UBJQp
6gWUNwcWLaE7orz7RdQDeLzyvvERWZgJCH4qH1vok6qEYlA5agOl1cNI4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx8gCRdPKROGg9vxbvcS5u6bbdxMB8GA1UdIwQY
MBaAFBtiPbpiuFfKc9ioChGZD3HgTn22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMt
MWE1Yzc2MzU1ODhiLzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wYTBlNGQtNGU3NS00OWE1LWJkMGMtMWE1Yzc2MzU1ODhi
LzEvRzJJOXVtSzRWOHB6MktnS0Vaa1BjZUJPZmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwh0m7hn
dRZeuD0a3qwbGSgk9f95gXqAcv2LKC8GTNnhRcyXyY0QrQENd6Anjr/8HZaOp6K7
7iv4R04cfNLiQdmEPcNttvqzej/60BlyIi0bJHPPJxHURsXh8yEOI+XGBXp6mOB2
ZGC4ZU6LR0NwZn4pgdBrebVYTshqtrW9NA/ewg50x5KdD18vkY+TwOvur1zoWxKT
ZrtXw97SFQ6TOITxJ8PINVqKekKnwDwz+fsw4n37OASWQrXXwOfDriW04lMXMOk9
m9DW2LS5zkMqC5C5PmkOPg8uZRKIcQ/FBzmdh1wq7nSvUKiWOZbYvtDm8ydolJfO
eItcmX5S2pnwww==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:39 2024 by rpki-client on console-fra.rpki-client.org