Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: vl0uUC3MewTVWK+StfpIZrALDYDULz1//JXmkcid2H0=
Subject key identifier: 9B:65:3E:5C:D8:19:FF:49:E2:BB:C3:91:07:D2:3F:E0:E5:59:3B:1E
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 01935878B0CCE7FDFF5781FD84514D53BF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 10:02:04 +0000
Manifest this update: Sat 23 Nov 2024 10:02:04 +0000
Manifest next update: Sun 24 Nov 2024 10:02:04 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: 4wIhmQO2Z0PKC5Ug/DLHeejmgnjriGw6RPfgJ0FtSCI=)
2: Sj4x-jx2NkpR_FvYMq2b1VJq6jI.roa (hash: iDiqIcMV9s5c00WFKSC9SznzV+UQFH0XLV/888kIVdE=)
3: meh0LuGBb0m9EsMcFFLK03GRUC8.roa (hash: El/IcNkav/Ja+ZNg49+Mw+5al/Ar6FDMcW1Yv6/ukqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:b0:cc:e7:fd:ff:57:81:fd:84:51:4d:53:bf:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Nov 23 10:02:04 2024 GMT
Not After : Nov 24 10:02:04 2024 GMT
Subject: CN=9b653e5cd819ff49e2bbc39107d23fe0e5593b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d4:c0:ec:a5:3a:88:67:85:cd:39:e8:d9:31:
6e:8b:81:45:5c:f2:0f:25:e1:55:a3:36:a1:bc:3a:
fe:7e:58:0c:65:4b:f9:b9:b4:a7:ba:b7:cc:71:e3:
79:29:51:30:3e:d0:dc:aa:af:04:16:b8:28:ec:23:
e6:a8:93:3b:9f:36:02:3d:a1:ab:03:ae:81:f8:ee:
46:3a:27:eb:c6:aa:bf:a8:02:be:f5:de:fe:db:00:
aa:7e:b4:7f:e4:4d:67:bc:37:b7:a5:e5:f0:3c:32:
22:2c:2f:18:49:9e:c0:23:24:9a:33:f8:68:15:aa:
3b:5e:f2:2f:42:26:4e:5e:6d:8f:69:60:cc:74:87:
e7:34:98:ed:cc:17:43:b1:37:a6:03:f5:34:42:40:
54:f5:33:c4:4f:9d:f4:e0:b4:05:64:61:f4:7b:8b:
b9:af:45:e4:2c:bc:9c:22:6a:a0:41:fc:17:8d:0d:
49:d3:96:01:6e:ba:e8:72:41:2f:b5:1b:0d:8e:7d:
97:c8:23:e0:d8:d2:3e:f9:bb:35:1b:79:e4:20:b8:
8e:d6:50:76:2b:53:b4:97:c8:23:21:5d:df:1d:e2:
02:11:c7:57:e2:7f:00:01:dc:4c:48:9a:0f:f5:03:
98:83:19:82:94:63:a6:ca:81:ba:b6:b5:c7:e6:ba:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:3E:5C:D8:19:FF:49:E2:BB:C3:91:07:D2:3F:E0:E5:59:3B:1E
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:46:73:c6:09:44:61:09:55:73:03:51:a1:e2:0a:fa:97:59:
43:25:07:9a:da:a6:ff:81:4c:f6:9e:59:1c:9c:f6:e2:dd:f3:
47:7d:f0:c0:6b:6d:cc:5c:7b:6f:aa:e0:72:ce:8d:0d:06:28:
07:47:67:18:72:e9:50:9f:99:e9:8f:38:61:4b:32:b6:6c:ec:
17:9e:38:09:76:0b:2b:11:d4:15:4b:fc:70:12:a5:60:5d:4d:
6f:50:8a:4e:b2:87:53:1c:7e:ff:5d:38:16:a6:78:94:a1:bc:
b3:ee:e6:7a:d3:d3:1f:93:50:64:40:ef:e0:5a:30:ae:00:35:
e0:d4:87:d1:d4:55:d9:38:33:89:be:04:50:01:63:40:72:da:
2f:a8:28:db:19:18:ef:a3:1e:4a:a4:a6:f7:ea:98:f1:a7:f3:
b5:6c:80:96:9f:7f:7b:7a:79:1f:54:58:60:df:08:51:8d:d5:
d3:e1:2a:dd:ae:da:dd:49:d3:92:24:34:c5:82:a4:e1:90:2e:
9a:b5:9e:4e:93:97:52:d5:b3:4b:49:35:36:e4:c4:ad:5d:08:
cd:a7:e8:f1:2f:9a:64:18:18:b0:68:98:1e:ca:84:e8:04:85:
7c:6b:6b:f7:1d:78:03:5c:45:ce:e5:e3:26:3f:0f:4f:fb:88:
38:6c:fd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:54 2024 by rpki-client on console-fra.rpki-client.org