Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: qfrTiQnqW5mPqqVhCM7i459wlDJ1a88FZLupUl8ntA4=
Subject key identifier: 8A:36:15:33:32:19:09:76:15:23:21:5C:23:4E:B1:83:DC:D2:0C:9B
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 01935689EFBF4B991C39A82DD6D46FEBD0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0B99
Signing time: Sat 23 Nov 2024 01:01:40 +0000
Manifest this update: Sat 23 Nov 2024 01:01:40 +0000
Manifest next update: Sun 24 Nov 2024 01:01:40 +0000
Files and hashes: 1: 1MHjz11tSDSzqTLg4pv0prV8I4s.roa (hash: /f9tshTvtqrUIT2RjNgmkvB+G5K9sNk5rpVdP3+bne8=)
2: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: /bvTG0FBywuvjmCMqm8Y3E/L0j8sLcXa3SkBoTFMBiA=)
3: ywmvdxuATAVZRgO1PVAcVFaOIlE.roa (hash: dVEwHyJX1y05nWOyx7+6R5bqYtf88VDlAh1PL8nBzTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:ef:bf:4b:99:1c:39:a8:2d:d6:d4:6f:eb:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Nov 23 01:01:40 2024 GMT
Not After : Nov 24 01:01:40 2024 GMT
Subject: CN=8a361533321909761523215c234eb183dcd20c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:20:21:4c:fe:3d:16:08:15:d4:cf:3b:cd:
34:6e:ab:89:fc:d9:dd:f4:eb:80:77:87:44:c3:1d:
a1:6d:a6:ed:87:9d:64:76:99:01:18:72:4b:37:01:
a2:66:3f:59:1c:06:e6:31:c9:76:35:d5:e6:ae:78:
71:6c:14:b1:07:78:28:ec:94:6d:d1:cc:90:0b:ec:
53:eb:13:b6:a3:99:78:89:01:23:9a:9f:0a:e2:8d:
12:67:b4:e9:29:79:21:79:85:16:d2:42:06:87:1c:
45:49:5e:61:48:76:61:64:a7:54:c3:89:00:8e:a7:
8f:58:d3:0c:d1:61:27:42:11:7d:40:d1:2b:b1:e4:
15:0a:01:7e:35:2b:e0:fd:47:94:7c:ed:20:f0:34:
76:d5:03:68:81:24:04:eb:53:3a:e0:73:60:72:ed:
2f:88:43:d5:b0:ea:d1:48:33:7c:cc:d0:a3:0a:dc:
29:f7:ee:3c:e7:10:e7:f5:1b:d5:d3:41:ad:12:be:
39:ab:08:88:cc:7e:db:58:f5:2d:9f:a8:2e:2a:d2:
34:a5:39:9b:81:e6:e2:90:b8:c0:f4:23:4d:51:a3:
0d:45:56:72:50:ca:8b:61:b2:89:b8:8a:84:f4:0f:
e6:18:fc:6e:7f:2d:d5:51:af:96:c3:5a:f2:32:53:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:15:33:32:19:09:76:15:23:21:5C:23:4E:B1:83:DC:D2:0C:9B
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f8:b8:3a:cc:fd:4c:2a:6b:e5:a5:50:be:a8:d0:37:4e:e2:
d3:60:b7:6f:97:16:e9:e8:41:89:9c:c6:00:a8:18:58:16:b3:
5f:5e:7f:4d:89:32:26:2f:ff:f6:6b:6d:8e:fd:8e:b2:71:e3:
53:9a:8d:a5:1f:d2:7e:27:9b:b6:2d:b3:e8:86:68:fb:2f:66:
9a:e3:6b:2a:2a:77:a2:f9:75:9c:d2:7c:b6:41:f2:9e:99:77:
2f:78:5b:06:02:19:22:e6:36:f9:d0:5e:f7:47:cd:63:2d:06:
d1:9f:7c:6d:e1:85:5e:5f:65:ae:00:63:9f:ab:2b:e3:14:dd:
47:e3:78:19:32:0c:ca:e8:e8:e7:6b:fd:27:45:c9:fe:83:a6:
f9:de:71:9d:4b:bb:6c:b4:b3:0c:49:8a:ea:b5:d6:2c:a4:b0:
44:72:45:27:0d:d1:ad:f1:c9:0e:e9:25:98:27:f8:32:55:89:
de:26:4a:dd:c5:4c:13:3a:bd:15:11:1c:ad:9c:d7:83:af:d9:
48:f1:1d:92:48:de:b5:e5:a9:38:95:98:6b:38:52:3c:10:2e:
af:d2:36:25:48:96:11:94:d4:f3:90:ac:ea:b8:c5:97:68:1c:
7e:0a:cd:31:0d:00:4d:6e:01:b1:ab:bb:c1:0b:d8:18:42:38:
39:cb:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org