Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File: 3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier: 9kTgl1896snRO3OtfUn0NWT1b0RJ6/FZ7qAAy5OHReo=
Subject key identifier: 78:AC:82:FE:E9:A7:C9:C0:9A:86:EF:21:4A:BF:72:1A:F1:DD:36:FA
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer: /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial: 018F4D5B226C0EB640EAB74EA2D4786E5CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number: 10EB
Signing time: Mon 06 May 2024 10:02:49 +0000
Manifest this update: Mon 06 May 2024 10:02:49 +0000
Manifest next update: Tue 07 May 2024 10:02:49 +0000
Files and hashes: 1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: 0gQJDXQK5aBsTb7FYPqsaslJwoqih4vrAq2Jl8Zr1ZA=)
2: FQew73I1tcPKd7CADYPf9aukLvo.roa (hash: g9U2vzatyyFjrlVqcqfitSqpzUK3PHVbQsUAROxeHxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:5b:22:6c:0e:b6:40:ea:b7:4e:a2:d4:78:6e:5c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Validity
Not Before: May 6 10:02:49 2024 GMT
Not After : May 7 10:02:49 2024 GMT
Subject: CN=78ac82fee9a7c9c09a86ef214abf721af1dd36fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:f1:2a:21:77:11:3f:63:44:51:e6:cc:b9:
c1:57:37:f6:b5:2e:ec:6a:4e:24:66:c0:e8:57:26:
e9:0d:de:37:a5:4a:3e:8c:a7:a0:be:c9:11:ae:6f:
87:d0:6a:40:92:e2:0d:fa:2c:1c:0a:09:ce:bb:07:
e9:cd:9c:b2:1c:9d:8b:f7:9c:0d:02:be:f0:fe:d0:
0b:13:6c:f8:76:8b:7e:de:b5:05:d9:f4:bc:94:3f:
a9:ab:8c:db:06:4a:50:e2:b5:ee:54:80:58:45:0f:
12:06:c3:4d:55:0e:8a:e0:4b:86:3f:0a:42:ce:be:
c7:36:9d:db:36:7c:8d:0f:d3:81:59:e3:68:89:33:
d5:46:c9:e3:95:09:10:29:c8:49:29:70:28:2d:a0:
43:52:0f:71:95:c5:47:cb:ff:35:ad:f0:4e:03:4c:
9f:54:fa:60:18:a6:f5:69:0c:89:56:0c:ff:31:4f:
cc:ba:93:b3:63:56:3b:33:fe:38:30:a3:dc:8e:87:
ca:45:bc:50:cc:3f:2f:fc:d8:ca:f9:78:ff:67:5c:
ee:c3:55:41:90:70:ba:36:aa:97:18:e0:ad:01:97:
92:b0:70:72:b4:60:71:73:46:7b:fc:eb:3e:67:12:
d1:73:7f:b3:dc:20:42:21:70:6f:f7:4f:c8:57:14:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AC:82:FE:E9:A7:C9:C0:9A:86:EF:21:4A:BF:72:1A:F1:DD:36:FA
X509v3 Authority Key Identifier:
keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:08:ef:1c:8c:8d:32:53:0d:e0:a5:42:80:90:87:07:89:21:
bc:70:4e:25:a3:d5:10:09:30:5d:86:f4:1a:0a:75:63:eb:f4:
1b:a5:5c:17:c2:8d:c4:17:10:ae:4a:bb:8a:ac:57:4d:6a:0a:
a5:27:c8:3c:56:a9:c2:79:e3:e1:57:76:ad:f8:83:cd:fb:27:
37:58:38:19:f4:6f:d0:df:96:74:23:56:99:cf:38:c7:33:2c:
dc:51:13:c2:dd:c0:c8:9a:07:3c:2c:c9:89:d2:c0:9a:c5:d2:
4e:c2:d1:8d:23:4a:0b:24:72:33:2c:58:94:16:7a:b1:45:cd:
d1:0f:a7:66:54:69:9c:3e:80:10:f1:85:c4:e7:4e:4c:2c:5e:
4f:c8:ba:d1:93:a6:5e:9f:e3:f2:63:6b:3d:aa:4d:fa:2d:9e:
99:1c:03:18:74:40:39:7c:77:f6:35:ef:ea:73:9f:84:d3:3c:
a9:dd:42:46:48:00:6f:39:b5:2f:d9:00:c8:47:c4:00:6f:5d:
58:0b:7d:c7:d0:91:db:a0:50:0c:c7:27:41:28:cc:41:b1:2f:
d2:61:cd:3d:93:7d:5a:ec:54:36:cf:1b:c7:14:41:e9:70:92:
df:04:76:3d:16:83:92:07:ac:d0:58:84:bd:37:8d:81:74:09:
35:7f:a0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:48:48 2024 by rpki-client on console-ams.rpki-client.org