Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File: GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier: iJGXQAgZjloXQ02JUgUjA2/MUSwx9KzYxwqp6BP2UVI=
Subject key identifier: 73:FC:D1:28:6A:18:31:6F:08:26:8C:EB:70:8A:D8:BE:58:F6:EF:11
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 0193512B4DC3D7DE6F45871183FCDFF4B21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number: 0679
Signing time: Fri 22 Nov 2024 00:00:12 +0000
Manifest this update: Fri 22 Nov 2024 00:00:12 +0000
Manifest next update: Sat 23 Nov 2024 00:00:12 +0000
Files and hashes: 1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: bI9oKhvoxOZz648Skl18enOnHTjP+BzjhPgZXCXU3HU=)
2: eFidgy0gQaopaU7JCsh9VyOvHp8.roa (hash: Ra4UxaCS4WUjqaROld22ALQB3mrDZCO+2cK7BNTuGyo=)
3: lptZY6YVZqy3A8BX9_A6YcNCaTM.roa (hash: 4/VpfQfi8ZA4BV1E/CGzQ9Sc90wwC26I7S0j/o9SaNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:4d:c3:d7:de:6f:45:87:11:83:fc:df:f4:b2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Nov 22 00:00:12 2024 GMT
Not After : Nov 23 00:00:12 2024 GMT
Subject: CN=73fcd1286a18316f08268ceb708ad8be58f6ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:c7:47:c6:6c:ab:0e:d8:1b:44:af:97:3e:
a4:05:98:5d:ef:b8:56:91:e2:b4:68:c9:b8:30:32:
63:4f:d7:85:52:63:c7:ec:25:6c:db:8a:26:ed:2c:
e8:43:3a:92:04:ef:25:55:06:cd:ff:9e:10:bc:b6:
34:cc:35:82:9a:8f:f6:e2:c4:5e:c2:f3:6f:42:9c:
97:c0:22:97:6e:71:13:83:a5:f7:ab:ff:e5:83:54:
2c:37:15:6d:6d:1f:34:fb:a2:63:12:7e:ee:85:e8:
7a:61:53:39:2c:35:3f:b3:c1:69:fa:da:94:de:11:
83:01:49:6e:71:66:9b:06:fb:95:18:f7:17:6d:0a:
a9:b1:3d:89:8e:52:34:7c:d7:29:8f:b3:29:5a:6f:
84:83:c0:1f:40:5f:8e:25:d1:61:e3:c2:88:5a:bd:
4b:64:e6:72:c1:99:dc:80:d0:e7:1c:fb:28:a5:35:
8a:8d:41:ac:3d:ee:db:47:d1:b1:b2:8a:38:a4:55:
3a:03:19:2d:da:7c:ce:8e:10:77:b3:4a:fc:3b:d5:
4e:49:87:f1:09:2d:f2:56:e0:8f:b9:9d:99:ef:39:
04:ad:eb:91:cf:3c:91:f8:91:69:67:37:d2:27:78:
9c:0a:58:e9:ab:c5:41:10:da:7e:ff:67:c4:77:68:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:D1:28:6A:18:31:6F:08:26:8C:EB:70:8A:D8:BE:58:F6:EF:11
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ff:57:90:e3:72:f3:7c:da:da:6d:4b:2d:12:d7:4f:35:58:
f6:fa:1d:7f:c3:3e:09:bd:3c:85:b8:11:36:39:00:51:dc:69:
60:06:65:42:e7:a6:0d:4f:ce:b7:a0:b0:43:c5:f6:3d:bf:50:
05:4e:ed:98:f0:0c:18:c5:83:39:f4:2d:22:48:12:44:bc:5a:
df:a8:76:6f:7d:28:d9:fc:a4:74:a6:c0:72:d5:4e:cc:06:da:
92:0b:93:08:e8:1d:e9:ac:ea:a3:23:84:ca:f5:29:8a:1b:90:
d4:97:b7:c3:dc:fd:47:e0:2d:a2:9e:60:21:e0:a8:f4:d2:c7:
cc:be:72:fd:9a:77:aa:0a:02:01:50:a6:b6:d3:62:69:9c:4c:
3b:65:75:90:9d:e4:4f:59:77:54:ce:f1:f4:2d:a0:94:d6:29:
6e:7c:0b:40:0b:45:19:b2:27:c9:53:c2:48:a8:01:c4:3c:ed:
35:41:04:00:da:67:37:06:1f:45:5c:ad:56:ba:90:8d:5a:fe:
7c:dd:20:c3:85:ad:52:e7:08:5b:ce:78:61:5d:91:2e:7b:43:
b7:d5:71:b7:f0:c1:85:9a:dd:5e:ef:ce:41:b3:79:eb:90:50:
55:2c:5c:13:b7:14:b6:6c:4e:23:9c:ee:0a:8b:88:ba:c4:64:
a3:d7:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:48 2024 by rpki-client on console-fra.rpki-client.org