Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File: G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier: YTGDKAbkP+1hQhA3iaokBjHsWPfsGC63LfSg7L39OhQ=
Subject key identifier: 6E:5B:BD:7D:50:AA:A5:75:C0:D7:4E:33:36:CC:E9:C2:0B:6D:74:83
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial: 0193584037C1D356DB4148AE9B4BCAF99BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number: 02C7
Signing time: Sat 23 Nov 2024 09:00:23 +0000
Manifest this update: Sat 23 Nov 2024 09:00:23 +0000
Manifest next update: Sun 24 Nov 2024 09:00:23 +0000
Files and hashes: 1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: RFIPQlMc0fDRzoJrTps7OGQIh9ZWw0MpSvNXX6Kt5lY=)
2: NUcZgRpwb_fFXQrte9Oe2FBeaG8.roa (hash: nLhgCTC7vNdcye8I2Oj4B+m9PSwLlHWnVTk7zVuOmkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:37:c1:d3:56:db:41:48:ae:9b:4b:ca:f9:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Validity
Not Before: Nov 23 09:00:23 2024 GMT
Not After : Nov 24 09:00:23 2024 GMT
Subject: CN=6e5bbd7d50aaa575c0d74e3336cce9c20b6d7483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:46:34:ac:4a:17:38:ce:3f:20:a2:c0:0c:
9b:f0:34:2a:0e:ca:91:fb:24:6f:59:9b:b0:e5:63:
7d:c0:1a:c7:ad:3e:5b:3a:64:a6:47:37:3b:db:b4:
9a:d5:92:39:e3:93:40:a0:a1:07:20:80:b5:ba:0c:
6e:35:77:57:06:8c:9f:9e:bf:8c:02:f4:8d:23:48:
9a:4f:e0:02:9d:2d:bb:63:87:07:62:85:71:38:4e:
c1:01:c0:14:9c:95:82:b6:76:eb:3c:26:ae:c6:66:
55:1e:ab:9e:1e:de:cd:53:21:bf:93:e6:9f:b8:a7:
87:c1:0c:ed:a0:3b:9e:5f:51:a4:45:00:e6:58:8a:
0f:04:8c:88:a4:37:8e:70:a7:6e:29:85:85:3e:2d:
ef:7f:b9:53:b3:d9:9c:75:bd:a0:ce:59:b4:f0:33:
10:dd:25:b6:bd:01:88:11:49:15:0c:7c:8b:0b:22:
e4:dc:a0:86:fe:f0:0d:03:48:6c:c1:5f:91:4c:d4:
a3:c5:ca:ea:46:3c:78:81:bb:e0:5c:89:57:6d:fb:
03:54:32:f3:d0:48:ec:72:1c:d1:24:2c:15:02:51:
e4:90:74:5b:84:24:14:f8:54:67:8f:d5:c6:71:e0:
64:53:67:a4:0f:36:9c:78:15:6b:6d:61:89:93:28:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:BD:7D:50:AA:A5:75:C0:D7:4E:33:36:CC:E9:C2:0B:6D:74:83
X509v3 Authority Key Identifier:
keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4a:d1:9d:57:a2:c7:72:d3:69:24:3c:d4:e3:ec:e4:c4:c4:
b4:be:81:72:54:ca:03:bd:09:b0:6f:7f:37:9b:44:b8:5d:ec:
30:a9:aa:e9:18:5b:11:5d:03:3b:24:39:b2:79:2f:91:fa:d9:
de:ca:42:d8:20:04:76:1f:57:31:f0:53:8e:1c:10:4f:45:8d:
8a:ae:25:82:a1:a9:c1:1e:a9:77:61:5b:45:b2:70:fb:7a:4a:
70:17:4c:8c:fc:37:3f:eb:80:bb:2f:70:3b:c2:46:6c:fd:b0:
6c:a7:06:b6:4c:49:f1:6d:cb:59:ce:df:24:f9:5f:30:29:70:
62:3f:26:34:71:32:bb:b0:a9:32:e9:32:49:5f:f7:2c:1c:cd:
ea:b8:41:80:b6:8a:49:c5:8c:51:e7:64:29:48:6f:6a:ae:b1:
4c:2d:a4:f1:65:f8:e9:37:ce:d2:3f:05:9d:6b:98:70:4a:3e:
aa:5c:9e:82:19:d2:b6:14:cd:99:92:1b:13:a3:44:56:f1:34:
54:3e:9c:24:21:79:06:53:22:b4:be:22:b1:07:02:63:7a:9a:
92:84:6f:35:91:b1:d9:be:99:ff:76:68:bd:bc:82:03:63:b1:
67:5d:06:26:39:27:2f:0f:3b:22:25:66:49:91:54:2d:50:34:
a4:c4:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:26 2024 by rpki-client on console-fra.rpki-client.org