Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json)
Hash identifier: iZjU3ye8dZD+cKN9gA2zbay3BHX02LjWk9YYt8i8kCI=
Subject key identifier: 46:19:EB:F9:42:97:5C:83:7C:67:E7:0A:16:79:1E:CD:96:A0:9D:64
Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Certificate serial: 018F2DCE8DF161E0B9E598F63493EC6A463D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
Manifest number: 0411
Signing time: Tue 30 Apr 2024 07:01:02 +0000
Manifest this update: Tue 30 Apr 2024 07:01:02 +0000
Manifest next update: Wed 01 May 2024 07:01:02 +0000
Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: /s1yC3GNlVSWXpJJBf2UDcEpPYOBjXRiQuscEWD1ciA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:ce:8d:f1:61:e0:b9:e5:98:f6:34:93:ec:6a:46:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Validity
Not Before: Apr 30 07:01:02 2024 GMT
Not After : May 1 07:01:02 2024 GMT
Subject: CN=4619ebf942975c837c67e70a16791ecd96a09d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:cc:73:95:ba:b5:16:14:06:dd:80:c0:08:
94:97:08:fd:e9:35:84:df:ba:7b:f1:e7:87:74:89:
a3:1b:c0:90:a2:cc:4f:0e:71:b1:03:6e:66:78:60:
bf:6c:a1:88:ed:78:98:49:1d:ac:48:95:be:b9:d4:
cb:49:8c:43:bb:6f:f8:e9:a5:14:3b:8f:66:2a:1e:
05:2a:4c:dd:fb:95:56:7a:e3:b2:b0:6b:7a:fd:69:
4c:1e:2d:ac:36:45:48:82:cd:cb:b7:ea:26:f8:5d:
03:e5:d3:ce:7d:2a:d8:f4:fb:47:2c:17:91:73:21:
e6:eb:d3:4c:a6:0c:7c:05:58:74:7c:ac:63:af:0f:
cb:d4:f5:39:e7:dd:47:ec:fe:4d:0c:8c:a2:ed:45:
17:41:c2:f7:cc:73:8a:ff:5b:2d:4f:bd:a9:59:43:
59:1c:1f:de:73:de:2e:05:96:f1:3a:c0:d3:eb:50:
ca:10:d3:77:6d:f5:67:78:5b:ec:f1:a4:b0:01:03:
13:ed:0c:36:b5:0f:e5:1d:0c:80:d0:72:7b:c9:65:
c8:15:e7:6d:68:b2:ce:d1:f4:7a:81:0f:cf:f6:6b:
ec:ea:4e:26:96:fa:66:5b:d8:17:64:bc:fc:ad:fc:
78:df:59:da:a5:62:2b:88:55:3b:bf:25:2b:f5:62:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:19:EB:F9:42:97:5C:83:7C:67:E7:0A:16:79:1E:CD:96:A0:9D:64
X509v3 Authority Key Identifier:
keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f8:19:87:dd:43:8b:f8:71:97:1c:ef:3a:e1:87:90:92:03:
a9:8e:b6:2f:1a:5e:fa:41:66:aa:23:9a:16:11:77:9b:2b:3e:
98:97:06:16:90:85:1d:34:f1:ce:65:d6:72:b7:fc:ad:45:61:
28:b1:66:16:a1:19:21:9b:51:c8:b5:f2:eb:a8:cc:35:09:05:
43:90:27:de:45:9a:e7:47:fd:c5:a9:3a:d8:4d:ae:f0:ae:52:
a7:57:e4:4a:f1:fe:38:6f:69:82:75:b6:75:20:11:56:d0:34:
68:5e:36:ba:4b:05:00:71:bb:e6:5a:8a:cf:76:78:21:c4:ce:
e3:b2:92:0b:96:c2:97:fc:4e:4f:5f:db:79:50:c7:0c:b0:56:
83:92:8f:b1:13:50:be:2b:44:e0:e8:a5:de:8c:81:e2:65:00:
0b:4b:7f:ec:bd:67:78:86:27:44:87:48:74:4c:6c:14:79:cf:
25:ce:dd:3a:d0:ef:86:41:3e:87:c1:19:74:24:7b:ae:25:79:
d6:52:b0:eb:ad:16:79:2c:36:81:9a:f1:02:ed:cc:f6:63:ae:
33:8c:ee:19:63:99:87:9c:5a:d2:1c:81:91:a9:87:bf:29:ed:
87:6f:3d:bb:53:a8:5c:e1:44:8b:0b:51:1e:56:71:f5:52:60:
fd:cf:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:30:46 2024 by rpki-client on console-fra.rpki-client.org