Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: IA3gTrUlX94Ne7AVTbCVhYNayZ+fJ7xQUfk9V6lM0eg=
Subject key identifier: 4E:4A:F0:05:C1:58:6D:8C:5D:07:D2:A6:70:D8:87:FC:FB:D2:74:84
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 019358785FF5463E8D922E736C2BD58EC139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 02E0
Signing time: Sat 23 Nov 2024 10:01:43 +0000
Manifest this update: Sat 23 Nov 2024 10:01:43 +0000
Manifest next update: Sun 24 Nov 2024 10:01:43 +0000
Files and hashes: 1: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: SP6Znskwut4HGx7XTGCOxAMq5suGti6hMNOzosKoRaQ=)
2: oSpWfFOU3aRKp0HFQ0dRBAdEHFk.roa (hash: V/JRVxnvnfuYl2qN2GBtmCBFKMwjN6VGYG92xm3oo88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:5f:f5:46:3e:8d:92:2e:73:6c:2b:d5:8e:c1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Nov 23 10:01:43 2024 GMT
Not After : Nov 24 10:01:43 2024 GMT
Subject: CN=4e4af005c1586d8c5d07d2a670d887fcfbd27484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:97:b4:4e:87:9b:ef:9d:71:36:99:89:3f:
c4:da:56:9f:eb:a5:9e:ff:41:c3:bf:14:b1:0b:2a:
8c:cb:21:6b:4b:3e:c4:c0:4c:54:5d:ed:bc:25:0b:
34:79:29:76:96:66:8f:50:ec:b6:97:23:96:aa:18:
39:1a:98:5b:90:aa:c2:00:d8:d0:db:b0:87:db:a1:
15:cc:05:f0:17:d3:b9:e4:80:09:ef:88:69:d9:4b:
07:06:8b:52:63:23:69:f1:3c:0d:f8:33:0f:0c:69:
87:50:04:13:ec:7c:a2:19:33:4b:97:fe:7f:49:a6:
ad:0c:cc:b7:1b:a5:3f:8e:c2:d7:db:db:8d:53:23:
51:11:fb:8d:6f:e7:42:26:28:54:d8:58:c0:22:0e:
68:10:51:e2:70:41:fa:9d:2e:20:d7:e2:81:53:ca:
b4:a2:03:18:75:a8:25:12:4c:f7:0f:50:a5:e6:3d:
28:32:0d:74:0e:d4:5f:5f:66:1e:91:9a:b4:2c:5c:
e1:bb:67:ca:25:2e:ce:11:af:e1:1f:b8:80:d2:05:
2c:fa:7b:28:5f:74:73:1e:b6:24:c0:a2:75:8b:1b:
9e:71:5b:a0:02:6e:56:e5:1d:75:75:b2:16:0d:3c:
dc:d1:8a:df:79:7e:9a:d7:a4:ba:34:25:79:1b:1f:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4A:F0:05:C1:58:6D:8C:5D:07:D2:A6:70:D8:87:FC:FB:D2:74:84
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:82:92:90:8e:f0:4a:6e:47:46:ec:28:6d:3c:b9:90:4a:e7:
43:9c:d6:2d:43:8e:e6:1d:15:b0:4c:56:d7:da:ba:40:80:8a:
56:19:47:00:8f:43:fb:dd:39:05:be:55:f2:43:5c:5d:a9:5b:
f7:bc:63:2e:a6:2b:23:93:96:61:31:60:c8:99:35:1e:2c:9d:
4a:eb:16:47:18:da:6b:4b:06:49:67:b5:3e:65:30:43:7c:d8:
57:fe:38:9a:6f:9b:0f:e4:47:e4:8d:25:77:c9:ae:f6:7b:39:
f8:7f:9b:d1:2e:b4:a1:f3:87:13:44:bd:75:09:44:ea:27:5e:
c7:a8:42:40:e6:15:ad:a4:ab:6e:3c:ac:da:a5:6d:25:4b:5d:
a5:49:77:1b:38:e2:53:80:6f:d8:be:54:50:40:27:c0:97:ec:
09:f6:42:fb:bd:d7:d6:2d:14:18:fe:ef:65:e3:e1:d3:4b:46:
85:6e:6b:9f:a5:66:06:18:b4:a8:89:e6:08:06:08:5e:f7:23:
0a:3f:55:ff:bb:7f:e2:3d:fc:22:6d:77:1d:c7:b5:05:e0:37:
4d:fd:4a:57:19:f0:ba:8d:80:d2:9a:4c:99:89:5e:f6:93:22:
06:3e:94:dc:70:70:39:cb:39:67:13:ad:ee:a3:a6:4a:81:d8:
a4:e6:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:23 2024 by rpki-client on console-ams.rpki-client.org