Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
File: gXzKamPisaqONiEq4uO2METHwds.mft (raw, json)
Hash identifier: 9Ert+2XDwltt9WVBXB+5/EXmkuC4YB7GttNpWBRV6UM=
Subject key identifier: E7:DC:A1:B9:CB:66:89:9B:68:AA:AE:D9:E3:A3:78:FA:0F:14:BE:48
Authority key identifier: 81:7C:CA:6A:63:E2:B1:AA:8E:36:21:2A:E2:E3:B6:30:44:C7:C1:DB
Certificate issuer: /CN=817cca6a63e2b1aa8e36212ae2e3b63044c7c1db
Certificate serial: 018F87B66682122368200782DE36A5F36A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXzKamPisaqONiEq4uO2METHwds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
Manifest number: 096A
Signing time: Fri 17 May 2024 18:00:28 +0000
Manifest this update: Fri 17 May 2024 18:00:28 +0000
Manifest next update: Sat 18 May 2024 18:00:28 +0000
Files and hashes: 1: gXzKamPisaqONiEq4uO2METHwds.crl (hash: PuGQxCnVUBdFnG1igM2LL8gskX5TFecrIMUnst/2SAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXzKamPisaqONiEq4uO2METHwds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:66:82:12:23:68:20:07:82:de:36:a5:f3:6a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cca6a63e2b1aa8e36212ae2e3b63044c7c1db
Validity
Not Before: May 17 18:00:28 2024 GMT
Not After : May 18 18:00:28 2024 GMT
Subject: CN=e7dca1b9cb66899b68aaaed9e3a378fa0f14be48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:bd:17:73:ed:95:bc:11:76:3c:33:0c:8c:
32:a5:5d:81:e8:a7:18:76:c7:1d:dd:fc:8e:eb:ab:
b3:2a:3e:50:e7:ec:29:a3:1f:b1:92:6e:b7:7b:6f:
26:e1:99:12:9f:8f:f7:2f:fa:e9:76:15:ae:88:fc:
4b:ce:10:d0:f4:ef:7e:81:b5:bb:b7:26:8c:db:ac:
54:de:81:03:05:fc:49:b8:de:01:91:2b:26:d7:3d:
62:69:ce:0a:9b:b4:a9:f8:43:23:53:cd:5b:63:ec:
48:11:4b:75:fe:bf:5e:7a:6f:1d:cd:47:cb:92:d2:
6d:09:03:35:97:57:94:24:ab:e3:59:2b:60:26:a7:
4e:15:47:ac:bf:79:33:59:a3:84:e4:d1:b7:3b:be:
8c:de:4a:28:c0:90:35:46:38:65:c7:c3:b0:5e:c0:
66:93:0c:54:03:aa:94:39:25:ce:1d:fa:de:a3:53:
7e:7d:b4:1f:e2:8c:b4:0a:bf:03:0d:1d:30:ef:b5:
5c:4f:b5:f0:37:df:89:ed:42:75:7a:d4:ad:db:9e:
9e:66:74:16:bf:a4:ce:a5:91:bd:26:03:a1:cf:e2:
c3:b0:30:ff:0d:ee:ec:79:5e:47:4e:9f:d7:5d:e4:
af:b2:f3:f5:b1:e3:03:d3:95:ba:f2:bd:58:41:58:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:A1:B9:CB:66:89:9B:68:AA:AE:D9:E3:A3:78:FA:0F:14:BE:48
X509v3 Authority Key Identifier:
keyid:81:7C:CA:6A:63:E2:B1:AA:8E:36:21:2A:E2:E3:B6:30:44:C7:C1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXzKamPisaqONiEq4uO2METHwds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7c:0e:55:be:4d:d8:f6:7e:f6:80:88:e1:85:27:2b:c2:d6:
81:3e:05:26:d4:11:de:df:85:46:20:17:8e:3b:59:0f:ec:59:
f0:b8:b3:1c:9c:37:35:3f:90:0e:3a:f6:54:33:60:0a:d0:54:
e7:df:ec:bc:a2:e6:8f:21:12:2a:c5:6a:61:1a:9a:a5:2e:f2:
8b:ee:34:a8:ea:a0:b1:b7:ae:40:e9:ec:75:fa:a3:b1:db:99:
25:ad:d5:7d:bb:d2:50:5d:58:ba:ca:eb:f1:51:1e:b4:92:b9:
a7:5b:ed:02:b1:c6:c2:d8:49:9a:d5:74:0a:d1:27:9f:39:ee:
e7:33:3d:2f:50:ef:50:7d:a1:d5:ac:19:c5:08:90:87:d0:4c:
bd:0c:c2:83:f7:42:78:ea:6b:4c:d0:ab:0c:79:89:70:a5:52:
6f:40:e0:16:36:22:9f:95:3f:ca:c1:02:8a:b8:6f:da:bf:83:
e3:df:00:86:e7:c9:b7:75:fd:5f:d6:29:66:1a:84:5e:cd:4b:
d3:15:4a:eb:e6:7e:d1:32:8d:98:86:64:01:6b:fa:cc:16:95:
51:a2:da:79:00:f2:86:d0:70:3e:f8:4e:f8:5f:65:27:02:7a:
a9:99:89:8c:25:32:b3:e2:34:af:3a:c5:45:b3:fa:e2:ad:73:
00:3f:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:51 2024 by rpki-client on console-fra.rpki-client.org