Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
File: GCDxMTkWE4Tq8ToffbYOLGikOVY.mft (raw, json)
Hash identifier: WroVmQHKEgblvjHH/klSm6BptGPjM9XpBVTMHBelMWw=
Subject key identifier: 82:D8:45:C3:B5:F0:21:B8:D9:B0:20:7B:FD:C2:9C:BD:93:C7:1C:B6
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Certificate issuer: /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial: 0193568A9F155EDBEED63494AA62605F11E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 01:02:25 +0000
Manifest this update: Sat 23 Nov 2024 01:02:25 +0000
Manifest next update: Sun 24 Nov 2024 01:02:25 +0000
Files and hashes: 1: A9zYDm6opAp8-8C97xv7LWC0AFQ.roa (hash: IdI2CF0mEK2+hRV98P4pKsVshltXrrD6OsEb/lON2D8=)
2: GCDxMTkWE4Tq8ToffbYOLGikOVY.crl (hash: 9MgQ1LlY3NEO5tCcEUq2hQoEw93rRiv9PmZPNGHrab0=)
3: cL5rqWTJuXbqojs7a-H_wPc0hVQ.roa (hash: vHBMA2C5dkk4W8b9ylrnUt8i90Tao9lgfWOH2Ch7jB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:9f:15:5e:db:ee:d6:34:94:aa:62:60:5f:11:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
Validity
Not Before: Nov 23 01:02:25 2024 GMT
Not After : Nov 24 01:02:25 2024 GMT
Subject: CN=82d845c3b5f021b8d9b0207bfdc29cbd93c71cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:45:ef:42:7f:1b:e0:24:a2:42:8b:fc:56:
b7:72:d0:20:c8:22:bb:e9:24:46:63:e8:43:b8:2f:
dd:60:6f:be:cd:ec:92:24:92:48:fa:e4:38:14:47:
93:ce:bb:c9:6b:81:63:7f:33:a7:99:0a:ea:63:ac:
f4:11:46:4f:cf:8f:af:8e:df:87:13:ec:9d:ad:99:
90:9f:16:4a:5d:d8:9d:ff:0b:11:e4:98:b3:75:d0:
73:87:b2:88:f3:89:4f:47:60:09:1b:85:46:7a:f2:
6e:93:d8:f0:82:c4:31:ee:e5:63:84:4c:06:3f:01:
5d:9f:5b:3a:9c:9d:31:55:a3:4c:ff:ae:5f:fd:0c:
51:bf:be:56:07:b7:a1:bc:a6:86:05:59:65:6c:22:
79:0e:35:fd:c5:1c:65:83:07:61:92:5d:eb:0b:47:
ca:e1:ed:9c:24:9d:b3:e5:26:02:5b:39:1f:13:a1:
47:2e:fc:91:a2:e7:84:86:d6:74:82:ce:22:36:09:
48:93:3e:35:76:6a:9d:0d:f8:e2:d8:b5:ea:7c:5b:
fd:27:3e:9c:bb:2a:4b:bd:53:de:12:5b:f4:f7:01:
8e:d3:c1:07:58:8c:5c:0f:13:e7:33:ed:b3:02:32:
b0:e0:bf:3b:62:36:e3:17:84:f4:d2:7c:b6:eb:c4:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:45:C3:B5:F0:21:B8:D9:B0:20:7B:FD:C2:9C:BD:93:C7:1C:B6
X509v3 Authority Key Identifier:
keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f6:67:e5:8c:37:aa:53:f9:a7:c9:41:23:f6:1b:4b:46:0f:
ca:ba:35:ff:54:ef:b2:3e:d1:99:3f:24:41:22:58:00:6d:cb:
0a:17:a6:65:02:5d:76:70:35:53:a9:2d:17:a2:f1:ee:18:27:
31:47:83:91:46:69:6e:1e:63:f4:43:b9:a2:80:4e:74:83:c8:
a5:d8:3d:03:b2:bc:02:e2:46:bc:1a:f1:42:0b:f4:43:8f:0b:
f3:e8:d2:d7:15:52:55:7d:d8:d3:69:81:bd:9f:b5:32:ce:45:
34:01:45:0e:4d:f5:8d:70:74:c2:7b:b5:04:13:5c:41:e2:47:
c3:37:76:3c:00:b5:e3:fb:4f:9e:fd:d7:e9:ca:cd:36:06:e8:
b5:f8:90:df:ec:5b:e3:c2:55:27:fa:50:c1:69:ff:c6:89:36:
24:92:6a:7d:29:6a:9a:6c:09:a3:2c:f2:a2:9f:b7:d8:87:ac:
43:57:aa:4c:fa:c1:e6:ef:ae:29:ef:98:63:0b:c6:d1:70:26:
5f:3d:86:27:98:99:30:9a:74:71:d2:6e:b1:02:ec:66:55:0e:
16:2c:c6:98:c0:10:4d:af:18:6b:f3:aa:6c:ef:92:70:8d:8a:
ba:8b:e0:c8:77:07:4b:23:91:58:cf:1d:c2:51:a8:f1:9e:b4:
7e:a1:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:25 2024 by rpki-client on console-fra.rpki-client.org