Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File: GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier: Ej1H1YsiS/6RK6Z6dih39IOLevzvcq0KEnu/eQeNSWk=
Subject key identifier: 87:5E:D1:8C:5C:7B:D8:E9:C1:9C:60:9D:B8:C7:9A:09:37:45:3B:1C
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer: /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial: 01901DED5D7F7834D51E263EF04CF92CABF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number: 0AE8
Signing time: Sat 15 Jun 2024 22:03:33 +0000
Manifest this update: Sat 15 Jun 2024 22:03:33 +0000
Manifest next update: Sun 16 Jun 2024 22:03:33 +0000
Files and hashes: 1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: CguYSDY9R578Sy3dkCKmmJewurLqFrO++oY3iB9H4/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:5d:7f:78:34:d5:1e:26:3e:f0:4c:f9:2c:ab:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Validity
Not Before: Jun 15 22:03:33 2024 GMT
Not After : Jun 16 22:03:33 2024 GMT
Subject: CN=875ed18c5c7bd8e9c19c609db8c79a0937453b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:63:71:5e:dd:97:fc:f3:18:96:29:7d:cd:
d1:d6:2a:bf:72:88:fd:ca:00:c7:5f:fd:50:fe:9c:
d2:31:0c:84:ba:fe:53:51:eb:62:98:bd:7a:9a:40:
32:83:7d:f0:43:7a:3b:0d:2c:9a:e4:83:b2:f3:6c:
56:03:f4:1c:bd:e3:8c:24:34:21:84:92:97:a4:8f:
b4:99:71:2c:e4:8f:c5:87:88:0c:9d:4b:82:25:c8:
23:8c:64:f9:b6:33:97:8c:90:35:de:c6:c0:7e:52:
48:03:cc:5b:88:55:a9:31:62:8e:5c:a8:19:af:bb:
85:d0:04:6d:d1:3a:22:37:5e:fa:d2:d1:90:6a:b0:
5b:8b:91:2c:89:f8:f6:44:6f:5d:8f:64:2f:3c:19:
61:61:88:73:a6:50:e7:e2:40:46:83:cc:01:19:08:
82:67:80:e1:0d:57:98:2d:9d:8d:ca:a9:af:78:37:
e8:7c:e8:6e:96:67:b3:ac:e5:c2:1b:39:74:5c:23:
66:77:11:f8:18:41:de:21:c6:69:01:ee:a1:78:6c:
3b:9d:ee:aa:9c:6f:dc:f0:9a:ea:9b:28:95:d7:e0:
34:17:34:1c:e3:83:b8:13:e8:50:52:2b:ee:58:a8:
a0:e9:d2:86:96:d0:7e:86:c4:d5:0c:38:fc:5f:fe:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5E:D1:8C:5C:7B:D8:E9:C1:9C:60:9D:B8:C7:9A:09:37:45:3B:1C
X509v3 Authority Key Identifier:
keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b2:8f:79:0d:5d:01:7e:53:0e:af:96:5d:d4:9e:c7:5b:27:
64:c4:3f:d9:30:6b:1e:51:0a:08:83:19:b2:eb:77:cb:71:a0:
56:39:04:e5:c5:4a:86:b0:08:2f:07:0f:8a:2b:18:f2:44:a7:
08:bc:e4:df:e9:ad:7c:05:da:21:78:45:72:77:8b:3a:6c:0a:
40:7d:38:2e:85:99:59:5d:a9:bc:09:18:a7:09:52:64:f1:e1:
ef:61:26:e0:b6:ed:a5:cf:4e:11:b3:63:25:af:54:00:6a:ed:
11:59:b8:b5:97:4d:fa:8a:66:52:e4:92:c1:84:c4:df:9b:c3:
31:69:ff:bb:51:62:6c:78:ec:ec:2e:1b:a0:66:ee:4a:5a:16:
c9:d8:ee:ec:c5:96:ee:dc:d4:69:c7:13:47:53:30:e4:7f:d1:
b5:cb:d3:a5:49:65:9e:14:53:f0:83:60:4b:e8:05:52:40:ec:
78:96:1f:e7:ae:9c:46:82:d4:8d:ee:18:ef:4f:12:ac:cc:49:
f6:aa:ce:13:a1:49:96:f5:bf:2c:0a:31:00:70:99:d9:64:f2:
7e:22:35:c6:93:6c:23:bc:72:fb:2a:7e:55:39:ea:b6:b8:73:
75:a4:cb:fa:a7:74:82:c6:f2:b5:b2:7e:86:08:4d:82:46:61:
08:04:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:50 2024 by rpki-client on console-fra.rpki-client.org