Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: 31CwTlW2jURGOhg+0TAVTR6ZbvH/RHHboZSXHuUF+u0=
Subject key identifier: 52:FA:A4:A1:6E:02:7F:EE:67:8B:56:B8:A8:F3:7D:9F:81:56:6C:A6
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 0193549A59DA68A0438EC993FFA76E2738CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 08F4
Signing time: Fri 22 Nov 2024 16:00:21 +0000
Manifest this update: Fri 22 Nov 2024 16:00:21 +0000
Manifest next update: Sat 23 Nov 2024 16:00:21 +0000
Files and hashes: 1: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: Xlwq8KzQP4aBYVIQMtZi3UWNXrWejBLmEjE+cxXq2w0=)
2: dAZLHVhfEA-6xjf2mftdjsvu8CQ.roa (hash: IBdeHJtEcqJ2Wrv/qLEvZ0hg7HBroD32PvJPMB+F+mo=)
3: glSyn9ZhnoDrM7qPF5erNeLtajE.roa (hash: UNus30gLvnBwtWL3qSyweIVHM6bx2fno/nSb/YhjSeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:59:da:68:a0:43:8e:c9:93:ff:a7:6e:27:38:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Nov 22 16:00:21 2024 GMT
Not After : Nov 23 16:00:21 2024 GMT
Subject: CN=52faa4a16e027fee678b56b8a8f37d9f81566ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:96:79:30:fc:4f:9e:aa:23:49:c4:4b:f7:
6e:1a:ae:77:26:02:05:79:83:31:4a:8b:53:c9:3b:
26:79:2d:0a:e3:8e:77:50:15:48:ea:1a:37:e9:70:
bc:50:99:b5:93:38:eb:9d:67:09:46:6a:d9:5c:79:
52:c6:04:85:c2:32:ff:86:3d:9d:48:8a:b1:cb:2e:
33:4a:98:36:aa:d1:06:5b:d0:13:9b:f1:28:7d:23:
f4:dc:bb:75:5e:0c:06:2a:a8:94:f8:00:0b:d6:df:
ce:08:d2:03:45:a9:a0:fe:c0:04:4d:37:ac:5b:60:
30:ab:e4:85:c0:c4:9e:f3:38:a4:ec:ce:f5:26:e4:
d9:bf:95:06:1e:c6:5a:5b:41:27:2a:f9:c6:93:2d:
c3:2a:bd:69:5a:a8:fc:f6:08:d4:d0:9e:20:c6:a9:
93:5e:9a:96:e7:2b:0d:60:35:17:5e:4d:53:5e:c5:
7a:d9:a9:ea:be:2d:9b:42:f1:fb:72:84:29:bf:c9:
c9:ad:84:6f:48:6d:af:7a:e2:20:d6:5e:e1:42:b7:
3f:de:bc:06:7e:6d:5b:c3:74:99:93:9b:ae:06:72:
26:78:7f:52:33:c8:e1:4e:56:e3:bb:86:53:aa:46:
b2:41:db:f2:47:ca:98:c6:f3:27:51:ea:e4:79:f1:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:A4:A1:6E:02:7F:EE:67:8B:56:B8:A8:F3:7D:9F:81:56:6C:A6
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:08:e6:6d:03:8a:9d:13:26:3f:34:cc:d8:ee:51:da:4d:25:
5f:0d:8a:f6:0c:da:37:9c:21:b2:09:5e:28:b5:07:a0:d3:d5:
e9:39:18:5c:6e:dd:6b:0a:7a:37:82:57:dc:80:58:8c:6f:4e:
bf:1e:e0:96:5c:e5:9c:2e:97:af:e3:2d:4b:50:c5:24:ce:43:
08:32:78:3e:94:ac:84:9f:3e:ab:ba:1d:68:64:2f:51:25:78:
7f:7a:89:e8:19:c9:16:32:83:29:8e:1d:17:db:13:52:87:b1:
94:70:ae:c7:a6:f9:7e:d6:8a:b4:37:ea:c6:84:5c:dd:f1:5f:
6b:8e:5d:8a:7e:b8:7b:4e:4b:f8:52:0f:7d:2f:a0:2d:36:a5:
e9:66:fd:5f:91:4d:be:cb:1b:c6:4a:85:dd:ce:bc:c2:35:33:
b3:3a:eb:03:5b:e2:a9:d0:22:c4:d9:be:30:6d:27:c9:26:88:
e0:b3:4c:99:61:99:1e:fd:45:15:ac:ee:32:d0:4e:b1:a1:80:
11:57:28:43:72:73:c4:c1:86:c8:ad:ac:f7:55:dc:d3:54:0a:
7d:2b:e4:f0:5e:08:ee:82:dd:ca:bd:55:e2:ab:ad:92:6d:ce:
e5:e0:0a:b1:05:c2:98:1f:88:05:c7:7c:9c:d6:0e:95:fa:74:
8d:3d:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:37 2024 by rpki-client on console-fra.rpki-client.org