Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: b6Obah0GTinbaE+kjvyJTseakORKXnZOfShSI3Lx3mY=
Subject key identifier: B4:C0:04:6E:EF:37:3A:EC:4D:B8:49:91:50:D7:2A:CA:1B:10:28:A8
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 0193587889FA2D59AACF05CB3D322587D534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0B21
Signing time: Sat 23 Nov 2024 10:01:54 +0000
Manifest this update: Sat 23 Nov 2024 10:01:54 +0000
Manifest next update: Sun 24 Nov 2024 10:01:54 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: JeZ30aXatTpMIYGQJvyzXUm08BrT9Wih8ISlbtVuB+U=)
2: qOMfHbWZ1ZJEkZ9laxP6GOEEwFg.roa (hash: wOp2FnOM9U6oc1ZA3ZJErlaVfIFRdOrnBNbaEOjPnuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:89:fa:2d:59:aa:cf:05:cb:3d:32:25:87:d5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Nov 23 10:01:54 2024 GMT
Not After : Nov 24 10:01:54 2024 GMT
Subject: CN=b4c0046eef373aec4db8499150d72aca1b1028a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:aa:6d:44:ae:fb:f9:b1:24:53:7f:3b:ea:
45:3e:50:d4:9d:5a:92:5d:e6:73:80:33:ac:35:e2:
56:74:bc:2b:04:a5:c4:c7:5f:2a:b4:13:85:3d:78:
89:9d:42:b6:4b:20:2e:e0:bb:3b:24:2f:9c:ed:9a:
51:8c:b8:f5:b6:61:70:f5:3d:b1:53:53:3a:8a:3c:
c1:1f:c2:c3:81:d6:18:57:6f:9f:97:45:9e:08:9a:
56:fb:26:2a:1a:67:66:83:7d:b3:3c:0b:ec:91:7a:
c4:16:6d:d3:1b:33:d3:f7:b5:07:36:47:0f:a8:0e:
79:6d:61:2d:4f:c2:87:4f:08:73:9c:f5:fe:9b:2d:
d5:8f:10:c3:bf:c3:f3:ff:a0:e6:d3:99:5e:d7:ad:
b8:5a:e2:61:55:3d:15:a0:3d:7f:6b:f3:97:ff:f4:
d7:0e:92:e0:d0:8e:9f:c6:e5:ad:27:f8:1e:f9:3b:
a5:2f:02:40:45:41:eb:f8:a2:1e:b0:a1:56:93:6c:
df:c6:16:9f:6d:bc:30:79:34:2a:c7:9f:3a:2e:fc:
cd:c2:55:a9:78:28:49:01:de:8f:78:e6:c5:b5:ed:
b7:80:4e:39:1d:40:74:c5:ad:60:63:3e:54:50:3a:
64:f9:34:c1:df:2e:83:87:81:66:b7:b7:c0:a1:cc:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:04:6E:EF:37:3A:EC:4D:B8:49:91:50:D7:2A:CA:1B:10:28:A8
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2a:6d:c9:39:6b:b6:3a:d1:cb:97:4d:5a:28:18:51:e9:e0:
87:a0:07:ad:84:e4:39:1c:90:fa:b0:8d:49:82:54:c2:1c:de:
74:28:dd:45:f7:8a:7c:d8:f5:c6:c0:76:39:ec:d9:ac:dc:4d:
f2:c3:41:ff:41:cb:15:b2:de:9e:75:26:ac:42:2b:40:3d:a0:
d6:4e:6e:fb:cc:9e:9c:35:6d:a0:38:01:f5:27:31:7a:2e:34:
9a:f1:3d:c2:39:93:8c:12:eb:e3:83:04:04:d9:8d:33:0e:7c:
67:29:9e:0d:96:17:98:77:29:4e:6e:15:ea:da:01:dc:0d:6c:
8e:e2:30:ed:c1:0f:9f:9f:b2:ba:03:f9:4d:b7:81:29:d8:50:
8e:8c:0c:63:b0:62:93:76:e8:c8:d4:0a:7a:c7:8d:99:86:27:
0f:f2:0b:22:c8:e0:f6:89:92:7c:c7:44:96:1c:00:75:cf:12:
a6:22:4e:05:96:79:33:ab:6d:50:07:2b:71:4b:c5:81:46:7f:
ff:ea:f9:58:76:e2:4b:1f:89:36:c6:f6:76:01:72:b8:d7:9d:
26:1f:f4:5a:60:2a:9f:9c:72:fe:e0:56:21:7d:be:20:f5:ea:
15:8b:1c:b4:bc:78:78:44:b0:5e:ba:92:c1:b9:c4:ab:65:f8:
8d:b9:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:12 2024 by rpki-client on console-fra.rpki-client.org