Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: CEm/G3bNe5rl8jFvDH1jPOsPIAWb7DbXGucf21Bj0w8=
Subject key identifier: 4C:8D:9E:50:6A:5E:2F:9D:81:DD:D6:78:C3:A8:53:8C:63:D6:87:A3
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 019356891945226515F36F3250F8A71EB474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 03B2
Signing time: Sat 23 Nov 2024 01:00:45 +0000
Manifest this update: Sat 23 Nov 2024 01:00:45 +0000
Manifest next update: Sun 24 Nov 2024 01:00:45 +0000
Files and hashes: 1: GRWQYbY7Gx_ve8HeDZ9wg9cqZeg.roa (hash: c5AgW3XFh1uzGeTy1dXSWN03+ecHhPjeA2sLQ1T8vDE=)
2: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: Op/g9d4tsf8vSDzVRHcJJiMsXzCdKNk6y2dRjEx1lNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:19:45:22:65:15:f3:6f:32:50:f8:a7:1e:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Nov 23 01:00:45 2024 GMT
Not After : Nov 24 01:00:45 2024 GMT
Subject: CN=4c8d9e506a5e2f9d81ddd678c3a8538c63d687a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:c1:08:cb:9e:3c:09:e8:23:80:1e:c7:1e:
49:45:d8:3d:01:10:0a:38:0c:d4:ab:d5:ee:a7:db:
a6:50:25:3f:e5:18:e9:05:dc:59:ef:c2:45:6d:5f:
8d:a1:9e:87:58:0d:20:b2:b5:dd:8d:8d:28:77:af:
1c:70:3f:93:ca:5e:fa:f8:30:bc:b3:67:92:e8:78:
22:12:94:30:b6:3c:d6:db:e0:02:bd:dc:97:6b:57:
7b:0d:a5:ac:95:a5:2e:90:13:a8:5f:51:ba:40:44:
f2:2d:ea:30:cc:20:19:8c:29:30:e2:2c:1e:da:c1:
ac:ab:c8:f1:0d:53:8d:4d:3e:69:4a:bf:b8:6c:66:
78:dc:0f:27:ae:e5:11:33:79:ca:4e:42:cc:46:b5:
75:9b:05:5c:23:43:c5:8c:68:43:af:da:59:ef:e9:
77:23:24:ef:64:63:9c:cf:c7:f2:40:ed:59:d3:cf:
23:d4:50:b9:39:4a:69:d9:06:89:19:f3:39:ee:2f:
0f:33:3f:d6:c2:d2:a3:bc:65:e4:17:86:b8:bd:51:
ae:60:42:91:7e:fd:87:ed:97:a1:8a:c7:6c:1e:3d:
75:4a:53:5f:1c:a5:e8:92:ed:01:8e:1a:4a:83:4d:
0c:08:f1:ed:38:a9:01:cf:33:49:4f:86:9e:0f:65:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8D:9E:50:6A:5E:2F:9D:81:DD:D6:78:C3:A8:53:8C:63:D6:87:A3
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:45:e9:9a:b4:6f:5f:e2:6c:6d:56:b4:8d:ae:90:16:a5:2e:
eb:59:cc:ae:d4:b2:ab:95:56:96:fe:22:00:f9:15:b4:7a:ea:
bc:03:ab:b8:4c:96:2b:cb:25:f9:e9:b0:40:7e:f4:8d:33:94:
e7:56:3d:75:72:d0:2b:8e:78:5d:ea:6b:38:74:b3:4e:15:dc:
40:39:5b:89:8a:e1:80:62:a9:ab:32:c0:1c:2b:a4:32:6c:5c:
d3:21:a8:01:fb:43:b7:90:7f:10:04:af:9a:d3:1f:1d:c8:6a:
c2:5d:78:5d:d1:18:eb:21:f0:46:fc:13:aa:0b:af:cf:e3:42:
5b:69:a8:8d:8e:5e:97:c5:96:eb:b6:c9:f5:5e:5d:24:a0:25:
f3:b4:d6:2c:df:c3:c9:b5:5d:8d:9b:0b:10:43:b4:ae:74:d5:
64:65:bf:13:9b:64:46:22:20:f5:95:d3:99:d9:1e:a0:1d:e7:
03:8d:0b:78:c0:35:d2:f8:4d:d6:42:bb:bd:26:65:1e:dc:80:
67:b2:6d:d7:5f:32:a1:8d:90:76:58:44:9c:9b:bc:50:3d:53:
f9:b7:4f:f2:ca:d7:da:e3:97:8a:fe:d6:5c:f4:24:69:28:f9:
05:fe:94:5d:fd:13:4c:12:32:53:e9:bb:22:48:fe:5d:df:5d:
e2:dc:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:27 2024 by rpki-client on console-fra.rpki-client.org