Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json)
Hash identifier: BmZu83ThYrMWq6USlyBQIajIJzttx76hJNBhSCPCnps=
Subject key identifier: D8:BF:BA:53:57:24:3C:0F:65:DE:A6:B6:1E:BF:DC:56:86:7C:35:E0
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01935274FB8B512024C569AF1BD9965A66D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
Manifest number: 07A7
Signing time: Fri 22 Nov 2024 06:00:18 +0000
Manifest this update: Fri 22 Nov 2024 06:00:18 +0000
Manifest next update: Sat 23 Nov 2024 06:00:18 +0000
Files and hashes: 1: 0bABeRMYuX78NRzSkd775HwUjOY.roa (hash: nllE3FYcFKI4zij4iqpDVyUZWzElLtQMpa+khJGZDf4=)
2: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: FdkQOIGUbUKNhQ/dTs5aRpHDuNZvaAB9P/o/PJ0ISdQ=)
3: KhNiOPNuy3H9w9y4XQMlWYwBD6A.roa (hash: Sqheap4M0xCPgDrxXhmlkPC8i74yuXEIxKy/e/B0CI0=)
4: P-wRpDD_4FREzde1CksThLCd5fI.roa (hash: VQ8zN8Uvpw7va2TRrkm2HcgCv5WdSq6ydHOcT0K0K2U=)
5: Qp5SUCM1MRXK3_HKOn3GkKQmFJI.roa (hash: OO1BdbP6DzLCx9PqvcxU0wNudkGDTm1QdOCp43ZMNXg=)
6: UrGfyvGxzsWdBVvABaZO8t0XrKc.roa (hash: IHM48LMc66Za6rJgEwxPnv3ej1ByJ3ESd2yw2c7oJrA=)
7: WU9La3gtDzbYELLK8QrU8M1LZ0c.roa (hash: 5dURrWYkWgU7NAXTK6199K3njWEhcNrOP00m3Sk81eY=)
8: cc9aiJN4LxW3d4wCJ3F0bzi_4X0.roa (hash: X1Qo2+KTYfP/hhRxZ2fR5XdljJuWEszqpo7VS2RYI6o=)
9: nQ1zIAOGr4VIOGTGnepvTDMvnWo.roa (hash: jltl3jjQ45m0rEiIiusjcI2T1Gqt1DfrL4GPoK6OCy8=)
10: u4D1o1XupW2SC-i0ocGdOS7eRVw.roa (hash: 4AW31mdFaOjEBeYYEGQfKK9a3peIlMOljIrDDqdd0o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:fb:8b:51:20:24:c5:69:af:1b:d9:96:5a:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Nov 22 06:00:18 2024 GMT
Not After : Nov 23 06:00:18 2024 GMT
Subject: CN=d8bfba5357243c0f65dea6b61ebfdc56867c35e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:43:11:9e:0c:30:02:fb:b5:93:a2:24:94:
28:92:4d:0d:96:f6:23:5e:93:6b:8c:f9:49:8e:c1:
57:aa:f6:95:a2:a1:f9:68:2c:53:28:c4:ce:2b:fa:
24:c7:f1:9e:03:9f:8d:a8:11:61:f4:5b:97:57:bc:
cd:a1:9a:09:44:ac:3f:52:25:e9:97:84:fe:45:7a:
cf:44:4c:a9:88:c2:6a:a9:26:1a:ea:23:06:5e:5b:
35:14:2a:54:f4:6b:f0:9f:b2:12:99:fe:8a:96:85:
d1:6b:de:12:1a:1d:d5:14:a2:0a:a0:9a:90:0f:0e:
20:c2:8e:d3:b1:16:a1:ee:29:32:20:e4:fe:c9:74:
d4:46:fe:ba:4c:d5:8c:81:7d:f2:f9:f9:73:b9:a6:
5d:dd:64:b5:90:51:ce:1d:d5:e0:85:40:57:c4:fe:
42:a6:f5:e0:e5:78:6b:d3:47:78:aa:4b:84:53:ea:
3e:a1:fd:b7:69:84:1b:a3:a6:8e:53:4c:7a:bb:2f:
61:b5:3c:36:d2:0f:1f:87:1d:71:10:b1:f4:25:a2:
10:d8:86:d8:af:80:99:16:34:77:d0:16:1a:fd:45:
e2:5b:3b:e0:22:82:36:37:67:de:0d:af:6c:e6:c9:
d9:bc:57:d8:cf:af:0c:36:0c:a5:24:ec:9e:a3:42:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:BA:53:57:24:3C:0F:65:DE:A6:B6:1E:BF:DC:56:86:7C:35:E0
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:33:b1:bf:3a:ea:cd:70:4d:64:9a:f7:81:69:49:1e:06:42:
df:f7:4d:be:f3:ae:de:8c:d4:08:25:a6:56:76:55:21:d2:be:
e5:01:76:12:54:63:71:51:6d:98:5b:29:47:a8:eb:74:67:75:
4d:72:68:43:0b:c6:36:0a:d4:dc:0d:ea:51:b9:71:5b:df:98:
a8:16:57:1d:c0:c8:29:a5:56:f9:65:3c:ca:72:de:10:19:90:
ea:89:a4:2f:e1:0a:13:43:2a:e0:04:2d:b7:e0:5b:18:53:6f:
cc:0e:56:67:23:38:23:e6:41:7f:cf:cd:0e:af:4f:07:80:f2:
5c:b0:f0:20:fb:ac:c3:e3:c2:13:59:ce:ea:1b:3e:2a:ee:e2:
21:16:36:c0:04:4a:69:2b:24:91:1c:5f:d1:6e:18:8a:55:8a:
d2:0a:26:81:4c:02:30:f1:f6:b1:bb:65:18:df:90:c3:88:3e:
a3:94:68:71:3e:8c:7b:86:9f:72:a7:08:e6:ad:b4:88:3f:02:
88:41:4e:b7:fa:99:a3:a9:df:d8:09:76:02:0a:66:5e:9a:30:
0c:e6:7a:38:3a:c9:f0:5c:29:f5:2c:d7:d4:45:18:a4:2b:75:
ec:6b:e9:11:dd:05:78:46:f8:9b:c6:b8:2c:27:6f:c4:77:c1:
db:81:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:49 2024 by rpki-client on console-ams.rpki-client.org