Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: 8N8a8HS7Yt/l28AJ63MgkNQdyridNahtATlWwBpfCy8=
Subject key identifier: 16:78:0B:13:51:FA:C0:F0:F1:6C:84:AE:27:9A:3D:EB:7D:C7:AF:35
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 0193568AFFA4515F991319700A85DAB1FDD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:02:50 +0000
Manifest this update: Sat 23 Nov 2024 01:02:50 +0000
Manifest next update: Sun 24 Nov 2024 01:02:50 +0000
Files and hashes: 1: CXi-FUeQUxztaSiWSsS8vkY8x98.roa (hash: xDc+ib2JfMRO+Ad2Ej8gF26zy3uMbBJF9nfpic2hoO4=)
2: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: 2MBUaYsYGv7MApyUG4eY8jIB9l5fLbcsw0wo1hZoE6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:ff:a4:51:5f:99:13:19:70:0a:85:da:b1:fd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Nov 23 01:02:50 2024 GMT
Not After : Nov 24 01:02:50 2024 GMT
Subject: CN=16780b1351fac0f0f16c84ae279a3deb7dc7af35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:32:97:ae:54:ba:dd:51:f0:c7:60:aa:2d:
c9:de:ea:b7:f0:8c:d9:86:06:c9:d5:1b:71:3a:66:
7e:e9:2e:67:57:11:76:fe:c5:3c:cd:54:57:58:e4:
49:81:60:f5:99:68:b9:9b:27:58:19:3b:3e:96:f0:
6f:49:96:cc:c6:81:5b:26:0d:7d:3f:b0:9e:28:6f:
02:df:b5:09:41:be:fc:96:81:07:17:3a:22:85:db:
14:0d:d4:a9:dc:89:93:ba:97:b2:eb:8c:d1:bc:15:
c7:d6:f0:bf:1a:0f:91:dd:1f:74:8c:d7:39:f3:b4:
34:a4:b2:71:f9:9d:91:97:32:d0:1f:96:6d:63:a5:
ca:c9:73:fd:6a:4c:8f:20:8f:11:1b:ea:e8:03:43:
22:11:ed:c1:d2:25:71:d2:45:f0:b4:82:9d:98:9c:
cd:c9:8d:77:e9:d9:f9:a5:df:86:c9:1e:f8:e7:ac:
91:dc:b5:95:dc:9d:e1:ac:d7:fb:fc:ce:74:9e:95:
30:a5:a6:a5:cb:5b:0c:95:d5:f4:24:78:85:23:8e:
86:7d:53:44:2c:41:dd:b0:6f:63:fc:3d:72:09:c4:
f4:17:14:10:e8:f5:eb:57:2c:3d:aa:3e:cb:8e:8b:
f6:80:ef:ea:8e:d6:da:13:10:13:48:6c:58:e3:81:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:0B:13:51:FA:C0:F0:F1:6C:84:AE:27:9A:3D:EB:7D:C7:AF:35
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:47:88:b8:53:08:f0:00:77:ab:ad:a4:2c:d4:02:b0:56:9c:
5c:ee:56:7c:1a:cf:e3:6b:82:80:4c:b5:03:15:15:10:8b:aa:
8e:bc:20:e0:f4:ec:8e:81:7d:95:d0:30:69:72:18:4a:7f:fe:
50:25:a9:30:8d:ce:07:18:7e:33:3c:9b:c6:19:3f:97:e0:0f:
80:a2:d9:70:7d:2d:6a:4b:c7:f6:0e:66:8a:23:b8:33:57:19:
e4:06:4b:a3:76:8b:a9:ee:c5:02:67:a5:46:be:c0:d2:84:e1:
00:2e:01:2a:f1:68:bd:81:90:ae:a0:19:6c:ef:84:0a:78:44:
fd:7c:f7:37:82:0d:6f:2a:bc:ac:83:e6:2c:3f:da:0e:da:82:
05:c5:9a:05:10:eb:84:fb:4a:69:9e:f3:3f:84:d4:17:27:2f:
cb:10:af:58:69:7d:7e:00:23:9e:70:f7:2f:bd:69:02:80:d2:
ca:4d:0b:1c:25:83:36:26:90:ce:ae:37:81:c6:a9:30:13:7b:
1b:7e:d3:64:fa:30:43:83:97:2e:37:66:9f:ad:fd:af:f9:fe:
b3:8a:53:f7:3a:30:fb:d1:c2:83:0b:e2:d7:aa:17:f2:c0:57:
43:79:9d:ca:97:11:e8:cb:63:de:d3:a1:72:35:88:07:b6:5d:
22:0f:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:28 2024 by rpki-client on console-ams.rpki-client.org