Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: iaPjU59V+aaPu9pVbs10i9bTBHuZ4NaEAMeMuLv/qrI=
Subject key identifier: 88:D7:9C:E3:42:C7:FE:36:E4:7C:3B:BF:CF:16:09:20:71:AE:CE:C4
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 019072E4D1739877A85BC0164E116110E18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 11F4
Signing time: Tue 02 Jul 2024 10:01:56 +0000
Manifest this update: Tue 02 Jul 2024 10:01:56 +0000
Manifest next update: Wed 03 Jul 2024 10:01:56 +0000
Files and hashes: 1: Wj-xAKBrfYiVNxKtpLQMz8Bv5wo.roa (hash: d1aaRRJRNPDRAxbCnxejEteaCfsW2geLbMzsEP7df5U=)
2: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: bp9THsQG6ATj/MijVZJ5Kf2Xyg2N2vGVE5I/0tKQwJw=)
3: toav0epsCN5bPvLo-Pa7oL4Y9gg.roa (hash: YG4HoxnQBaf2XxWGMPsXGhvD0lxjH0BJFYf3nSo49vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:e4:d1:73:98:77:a8:5b:c0:16:4e:11:61:10:e1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jul 2 10:01:56 2024 GMT
Not After : Jul 3 10:01:56 2024 GMT
Subject: CN=88d79ce342c7fe36e47c3bbfcf16092071aecec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:51:7e:ee:74:ae:e4:be:a8:78:08:27:9f:
4a:19:81:0f:08:0d:1e:b2:e8:6a:e9:80:bf:55:86:
65:3a:f5:06:ac:94:65:a0:23:9d:97:14:2a:56:14:
bd:67:52:42:6d:79:22:60:1d:ea:5b:a9:c7:80:62:
eb:9b:15:7c:36:97:1b:8f:f6:1b:a7:30:b6:11:47:
d2:36:1d:68:86:c3:df:5b:c1:a2:59:8d:d0:0b:d9:
bf:a6:1a:82:b5:8f:82:1a:7f:67:90:00:f2:23:6b:
38:46:72:82:f8:eb:1f:ff:24:c9:0f:2c:49:71:80:
99:41:34:2e:92:45:0d:9c:20:a7:19:67:88:5f:52:
84:46:22:34:47:79:87:db:80:a0:08:f4:a7:35:5b:
cb:71:98:26:82:3a:af:e8:de:5f:67:cb:75:2b:f0:
53:c2:de:05:b5:59:39:27:7a:10:2a:bb:38:3a:f2:
e8:a9:dd:55:3a:fb:fb:6f:26:a3:72:f3:5b:9c:55:
93:f1:72:21:6b:17:e1:8d:41:80:1c:56:48:25:dd:
75:b2:6b:9d:61:79:0a:96:95:82:49:47:8c:3f:b0:
56:be:0b:c9:90:31:64:78:df:05:18:48:8f:43:48:
22:c2:8b:f3:81:3e:94:de:59:9a:63:47:f4:cc:49:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D7:9C:E3:42:C7:FE:36:E4:7C:3B:BF:CF:16:09:20:71:AE:CE:C4
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:d8:2b:1e:57:55:50:fe:b0:92:3a:49:8c:df:13:d8:53:
56:e8:c7:fd:c2:57:36:ba:7e:a4:d5:74:fe:7b:4b:f4:2d:f9:
ea:f4:13:63:88:8d:06:7c:35:9e:06:0e:f5:28:ff:c4:fd:97:
43:5f:75:ca:6d:a4:f1:e9:e5:c9:d3:fc:35:3e:32:58:95:f4:
ff:60:e6:72:b9:22:a3:c9:4b:2e:50:e2:6a:fa:87:73:c7:86:
d1:23:d0:79:a4:fa:1b:f7:6a:53:9c:ad:dd:85:c3:61:92:a1:
bd:ec:51:53:7d:f1:dd:a6:59:01:59:35:5c:9a:3e:3e:e3:cf:
4a:c5:29:1a:14:c1:a8:3e:05:05:87:1b:3e:70:26:59:e4:f7:
66:46:d8:49:04:79:06:4a:c7:fd:d8:b7:67:bc:9c:aa:e2:3b:
e2:e2:3c:c9:56:0e:fb:10:aa:d5:22:91:a9:ed:43:f5:53:50:
52:34:ff:9e:be:63:41:e0:a5:4e:dc:9a:d9:16:73:7a:87:05:
77:c6:e5:f6:64:ed:09:ca:2e:45:8c:1f:ca:2d:5c:fe:41:fb:
31:c2:e7:1b:45:1b:ba:39:61:32:85:13:7e:49:66:cf:25:6f:
df:c3:50:2f:3b:68:e3:43:b9:ae:dc:2b:fa:11:08:de:57:43:
89:20:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:08:31 2024 by rpki-client on console-fra.rpki-client.org