Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: Gp/qfR886C55PZDsBti49PMGexhsidH4Fd8tEK61+MQ=
Subject key identifier: CD:A2:AC:14:83:83:0F:5E:98:34:A8:2D:F9:1C:05:FF:43:0C:7B:41
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 019405A0F71474DF2807404A00B7D178F9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 01:00:22 +0000
Manifest this update: Fri 27 Dec 2024 01:00:22 +0000
Manifest next update: Sat 28 Dec 2024 01:00:22 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: z24fQ9NaWPquuzx9W1bq6R3dLIceZNmq6NEpTC7aGho=)
2: IwruxxNaDDS3Xg_wz0J5vQEkpOc.roa (hash: KcIC9Pd6OlK8OLZcB7bqjdJZNzn52XAZlc9msdOsOV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:a0:f7:14:74:df:28:07:40:4a:00:b7:d1:78:f9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Dec 27 01:00:22 2024 GMT
Not After : Dec 28 01:00:22 2024 GMT
Subject: CN=cda2ac1483830f5e9834a82df91c05ff430c7b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:78:89:fc:bb:90:b7:3d:38:47:b9:be:49:
56:de:5a:f6:6c:5a:4b:1a:4f:af:08:6f:a9:15:f0:
18:dc:f0:ce:59:8d:97:6a:11:59:be:81:a7:83:9e:
b3:63:1f:9f:ee:dd:21:ef:2f:b2:4f:33:73:10:c5:
e5:29:1c:4e:c1:1b:f4:1e:9b:e2:92:69:91:be:4f:
34:5b:76:67:e9:08:d6:67:9b:40:4c:90:07:c1:37:
ca:5b:92:3f:55:ed:02:3f:57:e3:f5:48:3b:aa:1c:
11:0e:e5:60:49:6f:d3:d3:45:f6:02:a5:d2:e4:6c:
44:77:2a:a8:22:28:04:9c:cd:48:94:b8:bd:e1:39:
ad:e6:61:0b:80:7a:42:d9:32:9e:0b:94:e1:09:99:
b8:a9:c0:b4:10:ed:56:cb:0f:e5:de:8d:b8:c4:d7:
1f:bf:f3:14:0c:76:71:b1:15:65:71:66:ba:19:53:
4d:93:05:d9:84:e6:86:fe:33:48:c7:51:2a:2d:cf:
bb:ce:67:58:80:44:9a:f9:8f:03:2e:c6:49:2e:55:
6c:92:09:23:20:f2:93:37:7c:b6:52:3c:de:29:ff:
74:5e:b3:7f:2a:9a:51:23:41:63:37:20:24:1b:6a:
13:d5:ad:08:69:9f:fe:c8:67:45:50:f3:12:7a:d9:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:AC:14:83:83:0F:5E:98:34:A8:2D:F9:1C:05:FF:43:0C:7B:41
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e8:72:ea:7e:f7:e7:41:76:30:96:78:c2:8c:b0:61:04:cd:
4d:8f:81:71:5f:1e:58:6f:a2:54:c7:fb:b5:b3:6c:5c:0d:fa:
b9:60:7b:03:09:cf:52:e8:e7:87:99:94:80:a9:1b:bd:d9:c5:
e1:74:96:bf:b7:27:6b:ad:ad:c9:3d:6b:aa:f0:14:3f:d9:fa:
c7:34:0c:07:4f:81:96:53:33:d9:4b:70:ee:bf:ef:a4:f2:65:
c6:b0:82:79:b4:7a:6b:03:eb:a5:f3:b6:1a:34:97:42:6c:1d:
97:eb:ca:64:f0:97:33:8d:b2:67:18:70:33:4c:66:12:cb:76:
b9:d7:19:c1:75:2f:61:80:e4:e5:f5:1e:80:2c:61:3d:a7:38:
a3:c7:8d:0a:b7:90:5d:d4:f5:9f:96:29:4c:87:d6:0b:95:a0:
8a:ab:b5:f6:81:c6:0e:fc:7c:4e:7f:83:ca:27:7b:27:8f:9e:
94:9e:5f:eb:d6:ab:ec:4c:b5:cd:6a:31:9b:0f:6b:36:b4:35:
0f:c4:10:e0:d2:7b:28:bb:30:aa:3e:95:42:8a:81:0c:d8:71:
7d:8f:09:d8:e6:d3:2f:dd:1e:47:f2:24:e3:1e:2f:02:f5:1d:
1f:74:34:35:03:81:b7:7a:19:a5:0d:61:39:2d:c9:f6:62:39:
47:93:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:51:09 2024 by rpki-client on console-ams.rpki-client.org