Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: o9cBRvdFvmZmsylikvLG8DCcqdQYwn2JjGfBS8Zmmv4=
Subject key identifier: 34:C0:7D:EB:78:CB:3D:26:A2:5F:B2:43:15:0D:77:D8:3B:DE:E9:3D
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 01936AB4B891DFBE6B7E1A5BA98019760BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 1238
Signing time: Tue 26 Nov 2024 23:00:48 +0000
Manifest this update: Tue 26 Nov 2024 23:00:48 +0000
Manifest next update: Wed 27 Nov 2024 23:00:48 +0000
Files and hashes: 1: TL9ZqPWTTTuSwQVc63fFFWUBLSI.roa (hash: Fc9YlAyqnzBovpiBxm+TI89JjASpNpVUA9t+X+TuMkI=)
2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: ud2t/xvm8sbPPTKwZxSgovSYF7gcqyj6CpZAl2yJdJk=)
3: r7_7kTyolk7kGA8EKa6Y8cw-sLY.roa (hash: NZyKlENyPp3IUmcZUZs8Y3Xxhc4EYSmw4Nzb+ub7PlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:b8:91:df:be:6b:7e:1a:5b:a9:80:19:76:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Nov 26 23:00:48 2024 GMT
Not After : Nov 27 23:00:48 2024 GMT
Subject: CN=34c07deb78cb3d26a25fb243150d77d83bdee93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:47:1e:3d:4a:ce:5a:bf:c5:9b:5d:0d:83:
68:46:c2:fc:2f:55:79:d3:5d:a6:90:e1:dd:53:b9:
ad:75:00:50:85:31:7a:f9:c5:ac:b4:34:bf:73:f2:
2f:93:3e:d0:84:66:2d:fe:d4:49:ca:b6:2e:87:5b:
9c:95:ad:f1:de:a9:5a:c7:e4:d3:2f:96:be:a9:51:
1e:7e:aa:01:5d:d5:7e:5e:e5:99:4e:31:ce:41:76:
e9:cc:a3:7e:6e:e6:99:da:e5:91:aa:89:1e:96:1d:
99:c7:d7:5f:f1:55:4d:56:e9:a0:86:70:ed:64:be:
ff:e8:9f:f3:61:13:ba:5e:cc:3a:e5:e9:c4:65:65:
9a:5e:b3:cc:63:7b:d4:e3:60:ed:92:c6:10:9b:78:
15:e9:67:a9:db:d0:f8:0c:a2:3b:02:25:a6:5e:b8:
1e:78:d5:f7:0f:73:5d:6c:d4:ac:67:88:63:5b:d8:
59:db:c7:2d:65:e1:82:ba:81:bb:76:cb:a9:f7:fb:
3e:09:83:ec:bc:c3:d6:ab:a9:eb:97:76:0b:d8:11:
68:39:57:95:90:6d:87:8b:06:1a:a5:9f:8e:c0:02:
56:c0:a2:f1:47:cd:35:48:75:dc:7c:cb:dc:44:9e:
57:7e:19:56:87:41:ae:14:a6:12:5b:e6:14:da:1a:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C0:7D:EB:78:CB:3D:26:A2:5F:B2:43:15:0D:77:D8:3B:DE:E9:3D
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bf:60:3e:e4:e5:3c:35:8a:f9:d2:f9:39:6d:3a:c3:1f:bf:
67:8c:c7:36:17:03:35:c4:8c:98:41:44:7d:b7:94:31:ef:eb:
b6:88:e1:8e:b3:23:e4:a2:d8:a4:33:ac:57:e5:c9:41:86:c7:
57:e7:4d:27:df:ee:6d:70:a9:c3:eb:13:48:0e:c0:1f:a8:7d:
8b:a1:38:88:17:7b:00:82:d4:a0:00:6c:7b:5e:dd:fb:75:55:
91:c1:70:35:78:e9:a8:12:d6:64:aa:4c:eb:40:63:2a:ba:4e:
f3:cb:29:8c:f1:fb:f1:fc:6c:05:c9:c1:4f:ff:de:ec:bd:f8:
5b:09:3d:9d:ba:ba:4a:56:3c:91:3c:a6:79:6f:1a:33:6d:bc:
e4:80:fa:96:29:ab:c0:f1:2f:52:9a:64:a0:f7:aa:01:96:df:
4b:ab:0f:c2:df:79:13:78:50:c0:f6:f9:28:27:35:1c:c9:58:
bf:7a:0e:a2:44:25:25:85:59:6b:cd:13:b5:c9:1a:00:ea:db:
71:48:f0:05:32:0c:f9:29:57:10:5c:ff:2f:1c:33:ce:50:a5:
78:01:1e:c9:a8:bc:84:1e:d3:31:cc:f9:f9:da:f6:c3:a2:e3:
dd:5d:8e:b4:1c:21:e6:ec:7f:ad:4e:ab:27:00:d2:c6:80:cc:
10:ad:93:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:34 2024 by rpki-client on console-ams.rpki-client.org