Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
File: v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft (raw, json)
Hash identifier: 42pJUexGjtbOOLJUdiADlhpbaqDYKphp/kUnp8v0jvc=
Subject key identifier: 0B:8A:D7:DC:94:A6:6E:06:72:38:F9:DA:04:B0:41:C7:CE:D9:23:6C
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 019351626765915D6BCD6B491CD8C2A78835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
Manifest number: 1280
Signing time: Fri 22 Nov 2024 01:00:23 +0000
Manifest this update: Fri 22 Nov 2024 01:00:23 +0000
Manifest next update: Sat 23 Nov 2024 01:00:23 +0000
Files and hashes: 1: lFNYHlLDof3oDr3CFoTchrcoaBM.roa (hash: Bv9j1aNTtdkwEwDLE5uT7UlHNC/QmKIRQMxRa2amiDk=)
2: v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl (hash: FIPp3SlV83yLZ5JJVbGhxxaVvynzvHXwzkBgoWP+/dk=)
3: wWzeCArBBdH3VatbD7rupVHZrVk.roa (hash: d43o/2cJmCLJiSidnlIWehuYL3lGdMjd9gi6sBSD10w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:67:65:91:5d:6b:cd:6b:49:1c:d8:c2:a7:88:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Nov 22 01:00:23 2024 GMT
Not After : Nov 23 01:00:23 2024 GMT
Subject: CN=0b8ad7dc94a66e067238f9da04b041c7ced9236c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:be:58:22:5a:bb:53:57:9d:a5:23:f2:a1:
84:e5:d4:81:cb:70:70:09:b5:e4:4d:11:68:92:36:
c3:6c:ab:a6:a9:7e:58:0b:de:10:d7:4a:10:79:50:
02:57:9f:4d:2b:a1:a2:05:3b:93:69:ea:98:7c:3c:
38:a9:68:ca:1f:1a:c7:81:7c:d4:0d:21:7b:1a:07:
24:8d:ee:94:aa:48:99:24:72:06:1a:43:6d:21:4a:
a5:0a:fa:76:5c:f2:e9:33:68:8d:91:e1:b1:22:ff:
99:51:86:4f:a7:60:87:2c:41:12:7b:1f:12:e1:54:
7c:ca:b4:b5:da:84:f4:82:c5:8e:52:89:d3:b2:4b:
1a:19:fc:1a:1b:6b:df:05:ba:45:87:5a:08:42:61:
a4:92:ff:81:37:a2:4f:e4:47:11:4f:31:d7:6d:e1:
c9:14:41:79:4e:58:c6:3b:87:c5:12:8d:4b:a1:26:
75:e7:d6:84:fa:c4:bd:75:c7:9e:b1:96:7b:de:fd:
6d:78:81:7f:3c:c4:22:29:50:b0:77:e5:5a:8d:65:
fe:09:83:60:2c:75:e5:38:35:34:c0:26:d0:a0:da:
ce:b3:14:a9:fb:32:69:25:7c:00:b7:39:f0:90:c6:
52:10:70:07:29:df:92:23:cd:9e:fb:c8:2f:eb:25:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:D7:DC:94:A6:6E:06:72:38:F9:DA:04:B0:41:C7:CE:D9:23:6C
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:32:bb:1b:4c:f1:7a:80:97:f0:50:ea:23:84:f2:b3:ac:4e:
cb:c4:0b:1d:19:5c:31:14:e7:d3:17:60:29:f0:68:88:84:f1:
25:39:51:c9:47:d8:68:ff:59:5f:98:06:c2:a3:8f:ee:6d:89:
7c:7b:71:7b:42:bd:ed:6f:08:fd:a7:bc:da:72:9f:95:e6:9f:
c8:eb:d4:d0:7e:e2:7a:c0:c9:31:cb:e2:50:4e:91:58:c7:01:
6f:80:73:ce:72:eb:a0:a4:e8:80:f6:fc:81:96:e6:31:5e:63:
ef:82:2d:3d:8c:16:a7:87:db:ef:69:7f:94:67:0b:23:2a:75:
d4:4c:ea:73:b5:c6:a9:c1:f8:fe:7c:fe:4f:04:53:8f:e0:1a:
52:42:32:5e:42:d7:db:b0:17:75:5d:8d:00:3f:e5:da:61:dd:
62:0d:68:c2:62:51:b1:d4:ed:1c:4e:69:67:6e:bc:9f:ef:81:
7c:eb:0e:ac:7c:bc:5a:57:39:0c:23:fc:f9:e8:5d:66:7b:60:
49:53:bd:37:b1:02:2e:93:83:04:28:7c:1e:c0:98:ad:14:76:
58:19:cd:00:39:6a:03:ed:c1:10:7e:76:81:30:6e:96:41:9d:
64:02:6f:2b:be:79:6c:a1:aa:f4:e2:7d:77:ff:67:ee:1e:be:
45:ad:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:18 2024 by rpki-client on console-ams.rpki-client.org