Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: qtvNp7twJ71Y0Np0UrblbtvouJ0cKMITa5i8Z8pkiQQ=
Subject key identifier: 38:14:AA:0B:E1:41:28:64:06:21:1A:11:C1:CB:F8:4D:4A:4C:90:1F
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 018F4D5B954A2337A2320799EA172FFA1550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0680
Signing time: Mon 06 May 2024 10:03:18 +0000
Manifest this update: Mon 06 May 2024 10:03:18 +0000
Manifest next update: Tue 07 May 2024 10:03:18 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: XfmMc+xVlf0AmEQujG87c71qZH4LahXBRNoYohYffWA=)
2: LcuUlGrhIXee-sgNJD-6xSVIxqo.roa (hash: VxNYgNr9vv5MynMoNO1ggKVPvK5Nz83HAt9Tt4jnXbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:5b:95:4a:23:37:a2:32:07:99:ea:17:2f:fa:15:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: May 6 10:03:18 2024 GMT
Not After : May 7 10:03:18 2024 GMT
Subject: CN=3814aa0be141286406211a11c1cbf84d4a4c901f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:53:ba:85:9b:a2:f5:24:e7:79:3a:61:cb:
5d:10:2a:b7:02:59:07:75:fc:68:8d:e6:2b:55:e6:
b2:7b:f6:45:0a:01:62:11:c5:fb:e5:02:16:e6:31:
35:b1:fc:60:42:d5:2b:71:f1:ba:b6:e6:6d:bd:b5:
16:86:98:10:a0:2f:85:b2:47:f1:21:ab:01:15:b7:
e8:dd:b0:ec:e6:0f:e2:c1:4e:cc:43:09:27:e8:db:
91:9b:28:bd:bc:eb:30:cb:a4:aa:78:bc:fe:96:aa:
78:29:ee:8e:a4:07:c1:61:e6:3f:27:fa:27:e3:7e:
b2:9f:84:92:ea:9c:39:00:8a:22:2f:0d:00:6a:69:
95:31:5a:c6:bf:3f:93:b5:44:2d:84:8c:e0:01:f3:
70:cd:82:ff:96:ba:f9:c0:95:03:fc:fe:7c:79:48:
0d:84:ed:c4:16:74:24:db:4f:b8:38:f9:fa:cc:d7:
3e:a5:7c:88:bb:51:b1:23:bb:19:09:12:75:eb:d5:
b9:00:a4:9e:a8:98:a7:49:e0:ab:13:e0:04:70:bc:
5a:09:1f:15:51:4f:79:ea:9e:20:d9:29:03:07:7a:
40:e3:59:64:ca:0a:28:c2:21:a2:b0:38:cf:43:ff:
c4:0e:b5:05:eb:e4:58:57:26:df:53:c0:7a:c0:58:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:14:AA:0B:E1:41:28:64:06:21:1A:11:C1:CB:F8:4D:4A:4C:90:1F
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d2:20:b8:0f:b5:9a:63:94:14:0e:c1:bf:cd:16:c0:7b:69:
6a:97:47:4b:7d:af:00:ee:bf:38:b4:b3:95:7a:90:03:12:aa:
3e:d3:22:17:09:6e:a1:89:03:b9:75:15:33:ae:4f:f7:65:50:
c0:28:79:35:16:92:51:aa:a9:aa:08:f0:ab:97:22:e7:ed:d8:
5a:84:35:e0:f8:bc:91:20:65:77:18:6a:ba:40:7e:0b:68:db:
b2:8e:5f:bf:17:30:b5:62:90:ea:57:bd:18:30:59:01:21:1b:
d7:05:90:9d:63:3a:14:35:dc:4f:0d:02:dc:df:68:cb:6b:85:
43:6e:ec:cd:85:2b:7b:c8:23:c5:19:8a:91:20:23:39:b5:b1:
25:54:89:ef:71:94:80:b2:96:29:35:19:fc:95:64:5a:03:ab:
21:ff:7f:2b:2f:da:3e:ce:7e:45:91:e5:a0:1c:6c:81:aa:dd:
56:71:8c:f5:29:f2:f7:0a:14:7b:bd:14:41:5d:be:ab:e3:22:
c0:a5:4c:4c:fd:13:9c:1f:d9:48:a5:5d:20:2a:84:18:5f:81:
b1:84:3d:90:27:58:e1:20:7b:f6:2e:7e:a0:13:f1:c3:7a:0f:
1c:01:eb:0d:b7:8e:37:68:9f:9f:20:71:7d:0d:96:b0:f1:a8:
89:9e:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:55:51 2024 by rpki-client on console-ams.rpki-client.org