Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: WatQPi7gwY704hMkTN0pvydWrTj3TjbbwrW51Wzm8V8=
Subject key identifier: 4C:1B:03:9D:E6:1B:F6:B3:D4:FD:B3:DE:ED:F4:EC:06:E6:69:F9:94
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 01936A7D6225093C46F2669E4052816C86D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 11DA
Signing time: Tue 26 Nov 2024 22:00:22 +0000
Manifest this update: Tue 26 Nov 2024 22:00:22 +0000
Manifest next update: Wed 27 Nov 2024 22:00:22 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: M+HIuFKqvLBFiOZIxV/4gWBx0B6ZXFUhTE2Rs7pvxIY=)
2: R7Vzte25pHTe8s1WmaoMJEaarTw.roa (hash: oQZO/drtv0a9sfBudNDEo2yygb20ltvvdHFBHKUqYt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:62:25:09:3c:46:f2:66:9e:40:52:81:6c:86:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Nov 26 22:00:22 2024 GMT
Not After : Nov 27 22:00:22 2024 GMT
Subject: CN=4c1b039de61bf6b3d4fdb3deedf4ec06e669f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:e1:10:f5:40:ed:cb:c4:be:d1:8f:ab:88:
ed:fe:98:0f:33:26:2f:9a:b2:14:1d:3d:0b:24:90:
c7:07:58:68:cb:ea:f3:6f:8d:c0:03:11:9c:cb:16:
b3:bb:70:39:3a:51:8f:e3:e7:27:86:74:0d:20:08:
41:4a:77:cc:ae:9f:82:b9:24:5e:f6:cc:41:d1:51:
ab:0f:ef:b8:01:62:c3:e9:7d:83:fb:fe:2b:96:94:
c2:6c:fa:df:93:e6:9f:3c:98:31:0a:2b:b7:5e:42:
78:94:8c:2e:2f:b9:cc:bb:f3:37:dc:53:d4:d9:04:
40:43:1c:b5:af:66:6a:43:53:85:e4:ea:6a:dd:b0:
e9:26:48:9a:71:c3:3b:0d:3e:f3:aa:8f:8a:27:26:
b2:bd:98:71:61:18:8a:d9:cc:7a:9c:a6:6a:a8:22:
03:cf:b3:32:57:0a:1a:8f:6f:f6:4e:61:e5:19:2d:
8c:d3:58:ed:af:cf:f9:b6:0f:98:4d:c1:f8:5b:11:
57:af:da:4a:df:36:f7:eb:a3:b9:e3:33:15:ac:63:
1d:43:0e:79:7a:72:78:e4:d2:0f:22:85:ef:f4:99:
08:1c:b5:80:48:cf:3e:59:db:b1:4a:92:7f:90:23:
92:9d:c2:d2:0b:61:b0:74:ee:6a:83:f2:b3:5f:cc:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:03:9D:E6:1B:F6:B3:D4:FD:B3:DE:ED:F4:EC:06:E6:69:F9:94
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6f:9b:65:a0:2b:87:1f:4b:af:f6:e0:f2:46:e5:8d:74:8f:
3c:95:ee:1e:74:9d:7b:93:04:57:73:d5:47:be:87:a0:b0:46:
4c:ba:7c:4b:61:85:4d:2b:fb:21:0e:a2:c5:78:45:da:5d:c8:
11:6b:03:74:11:e8:ec:c0:62:3d:0c:51:67:02:dc:86:d0:fa:
4e:d0:ac:4b:43:20:4a:23:2f:dc:32:65:a4:d6:06:e9:8d:2e:
59:c3:1f:90:df:f6:fc:63:25:ea:d1:1b:fd:35:b2:01:75:56:
be:e4:2f:1a:2f:3a:1e:80:56:91:6b:a5:78:a7:22:06:d4:2d:
26:ac:18:b3:9f:0d:b4:df:1a:6b:23:b1:08:ae:2a:f4:89:91:
36:49:dd:cc:7b:e8:c3:a0:20:55:c8:69:e7:86:f2:e3:40:22:
bb:72:c2:31:79:57:03:96:91:71:f1:c6:ea:fd:30:4a:07:9b:
94:1c:5c:f9:c9:0f:41:94:62:f0:ef:70:e6:e6:4f:57:c1:1b:
74:fa:67:58:e3:79:a9:e5:9e:c2:44:84:ec:6a:d0:cc:92:48:
a0:71:93:c6:36:91:e7:fc:9d:6b:00:0e:d2:52:bf:03:eb:4d:
bb:24:a0:60:ab:42:ea:5f:42:a5:db:9f:3e:07:2a:02:47:1d:
47:27:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:46 2024 by rpki-client on console-fra.rpki-client.org