Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: T+16Q+mYEF8u/DkY/JPbxhuhsEJYZIMcXHDDVhSmbvM=
Subject key identifier: E9:09:8D:06:9E:B8:94:FF:91:29:F9:D1:D5:EE:65:26:07:B3:16:D0
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 01935989DDB2B573C9DA45F42E5243862E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0574
Signing time: Sat 23 Nov 2024 15:00:27 +0000
Manifest this update: Sat 23 Nov 2024 15:00:27 +0000
Manifest next update: Sun 24 Nov 2024 15:00:27 +0000
Files and hashes: 1: 0s-egozASf6GRFCeT9R7BOcNlfk.roa (hash: CySmtTPeNCP0nBWJp7gZo+alMvYcGYox0tPzGUf+FRo=)
2: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: PhNPynN8vKaLpA5VlvNkK7DJdRDOvvtg+6kzxq2d1bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:89:dd:b2:b5:73:c9:da:45:f4:2e:52:43:86:2e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Nov 23 15:00:27 2024 GMT
Not After : Nov 24 15:00:27 2024 GMT
Subject: CN=e9098d069eb894ff9129f9d1d5ee652607b316d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:c6:4c:3e:16:24:20:13:b3:50:ec:b2:b2:
7f:c3:91:80:37:93:2d:56:0e:7f:f2:8f:cc:c0:2a:
23:62:ff:4b:a7:9b:a6:79:98:e4:bf:c1:21:90:cb:
74:97:3d:a7:82:83:81:0b:ce:25:11:65:41:ff:6b:
89:99:ed:15:62:d9:3d:c4:85:d8:89:ba:85:a8:30:
2b:20:19:99:68:d3:bb:64:60:a8:c9:f3:ec:10:43:
fb:c3:d2:10:30:54:cc:33:ab:34:fe:68:3a:28:a8:
8a:b9:d7:eb:fa:3d:d1:b1:e1:5d:70:aa:d7:f9:f9:
01:91:df:63:21:0c:39:c9:9d:8f:31:5d:15:54:81:
d0:53:71:a5:ad:8d:36:e9:f2:b3:b7:57:70:58:ad:
c6:2a:9f:60:1a:c9:9c:f4:38:35:5f:dc:82:5f:1b:
92:a3:44:1b:2f:44:9c:33:8b:44:1d:d6:49:19:0f:
fb:8c:fc:d5:b0:39:a7:7e:d9:e3:e6:98:55:d5:c4:
6a:da:b9:45:fc:fb:d0:b3:3d:e1:f3:06:0b:87:25:
9c:9f:2a:e3:83:0c:6a:55:3c:48:41:9f:1d:ca:49:
6b:7b:a4:61:c4:b8:00:d6:e1:e3:5d:39:c5:df:75:
9b:8f:e8:d0:80:f9:b5:e3:a6:f5:07:03:17:05:de:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:09:8D:06:9E:B8:94:FF:91:29:F9:D1:D5:EE:65:26:07:B3:16:D0
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:61:16:0b:53:9d:d2:27:28:e8:67:4e:30:44:2b:c3:e8:62:
f2:46:46:7a:d2:f2:b7:ae:46:9b:7d:45:3b:56:e3:4a:8b:01:
49:fb:1c:24:3a:eb:44:91:57:96:11:4d:01:1e:06:de:79:f0:
33:96:65:56:82:10:a2:09:1b:8e:7e:bf:f5:22:a6:1e:61:7b:
c0:bd:9b:27:06:e8:b5:f1:ec:f7:4f:a3:13:ff:46:11:04:f7:
a8:f4:41:9d:45:70:35:60:81:55:2d:95:03:14:e3:e5:a0:ea:
2e:13:64:90:cd:2a:4d:44:b4:af:25:85:75:cb:b6:eb:02:3a:
4d:19:bb:7b:c5:e4:d3:75:fb:0a:3f:33:a5:4d:20:b9:f6:e5:
d1:04:25:f3:21:cf:4b:d5:b9:ea:9b:27:7d:b9:a2:3a:91:00:
9b:56:fe:ee:b8:68:cd:f8:17:71:0c:25:fd:3f:fd:8d:f7:4c:
4b:49:d9:67:89:0d:a9:fb:8a:58:79:c4:2d:ee:88:e4:be:b8:
3a:a5:36:55:79:67:f1:a5:e7:01:e3:08:91:ca:90:06:a4:59:
55:66:87:dc:3c:0f:1e:be:db:e9:dd:4b:b1:7a:f7:eb:90:92:
a9:e4:74:97:91:2f:c5:48:6e:55:f5:c8:2d:67:5a:eb:28:25:
04:1a:e5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:04:13 2024 by rpki-client on console-fra.rpki-client.org