Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: BeAG1eZBSy3rp/IekS9EpSRLNaBoOBXPp4563F/mlCM=
Subject key identifier: 03:79:B6:B5:E5:99:B1:84:DF:8E:81:3E:08:C2:E7:C7:BE:DD:47:B3
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 0193568A857028A78FC6D400979F0333F86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:02:18 +0000
Manifest this update: Sat 23 Nov 2024 01:02:18 +0000
Manifest next update: Sun 24 Nov 2024 01:02:18 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: zvlpB8B1khIEkBnU/V5saIEeO6yz0FuOjW4tpz1e6z0=)
2: xrow0-ESHgBYU8kuva2IFWhtyOc.roa (hash: 6xMg8GGyzAidylC0jt25OEWSLFkyx8AVzYkmlr/s38M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:85:70:28:a7:8f:c6:d4:00:97:9f:03:33:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Nov 23 01:02:18 2024 GMT
Not After : Nov 24 01:02:18 2024 GMT
Subject: CN=0379b6b5e599b184df8e813e08c2e7c7bedd47b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:dd:ad:3b:67:a0:c3:da:8c:ef:e1:fa:0c:
66:89:11:64:0f:22:9f:eb:81:ec:5e:8f:9f:17:39:
b3:b5:d9:7b:d8:3d:ff:53:1d:c5:4a:5d:84:dc:2e:
1d:30:56:fd:57:4e:49:db:65:ea:b1:ac:b9:b4:89:
f2:94:53:dd:47:27:be:8e:b1:77:3d:e0:2c:0f:d3:
77:6d:ae:36:a5:33:06:0d:da:32:25:94:ca:f9:a3:
3b:5b:b8:3f:23:c5:b1:b5:b1:6c:e5:37:69:83:65:
e4:48:80:ed:92:f6:ab:cf:2f:f9:19:2a:a7:98:b2:
3c:86:a9:db:f5:89:83:79:cc:f1:ee:97:c3:cf:cd:
d9:b7:2b:d4:8a:75:af:f5:b7:77:35:6a:ab:11:44:
ce:59:02:33:80:33:56:31:b2:c5:e1:e0:cb:46:5c:
0e:19:98:bf:22:54:c0:ac:9c:c8:43:95:ad:10:c6:
44:f6:e8:e8:1d:ca:c5:32:c6:8a:9b:1a:bd:7a:2d:
19:40:bb:a2:cf:7b:68:da:c1:c7:99:44:31:a4:c9:
2b:78:81:43:e6:49:9a:4f:14:64:76:2e:37:70:23:
48:b6:74:34:95:af:f3:99:9e:96:67:e4:4f:d8:b0:
df:6d:09:d1:43:6c:e9:1f:63:ae:c7:a3:f7:f9:63:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:B6:B5:E5:99:B1:84:DF:8E:81:3E:08:C2:E7:C7:BE:DD:47:B3
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:89:48:46:cc:cf:c1:e4:e4:47:08:23:35:bd:c6:3b:67:a3:
3b:60:45:c1:21:46:45:df:7f:30:b2:b9:fb:86:c8:81:8b:3c:
a1:93:83:fb:f2:71:68:0c:d4:25:d8:0c:f5:e8:7c:f8:cf:ef:
86:97:38:0a:fd:24:1f:f7:7d:6c:38:fc:4c:a0:a2:0e:b0:a3:
c6:b1:a4:d5:51:2a:ae:18:18:3f:e7:02:5d:1e:d3:e0:e2:13:
ee:d3:ef:96:c9:49:c0:c7:72:03:b2:fb:bf:e6:45:b0:34:a2:
71:57:d2:5d:d2:5e:1a:6d:00:62:44:8f:8c:ef:90:1f:18:2c:
0a:48:2f:ed:5c:ed:b8:e8:77:5d:d2:54:43:00:98:21:77:4e:
23:a3:84:f6:15:91:cb:9f:92:d8:9a:38:02:4e:d8:2d:44:fc:
4c:54:fa:24:fb:7e:76:70:bd:e5:b5:c0:b0:c5:0e:eb:55:51:
ec:7b:75:a3:f5:81:88:8b:29:78:de:c4:f3:00:52:9a:e7:ec:
38:8e:15:27:c0:de:b0:e3:2c:5e:5f:ab:73:e3:09:35:0b:76:
78:bd:0e:16:be:c6:9c:d1:d4:b3:aa:76:6e:4f:15:5c:ea:6c:
c1:a9:00:7f:ea:7c:be:82:7e:bb:f4:e2:9a:1c:ad:9d:0b:d2:
db:53:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:30 2024 by rpki-client on console-ams.rpki-client.org