Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.mft
File: gDQDJoIlMPlDhZxz5989NlUWi3A.mft (raw, json)
Hash identifier: tRctQCgpOd8IREoV7FHaIZiJSLSTrM6RHReFGPHFrZ8=
Subject key identifier: 7F:AE:C0:B9:41:2B:AF:80:BB:B0:FA:EA:D8:9C:B2:90:D6:4D:3F:02
Authority key identifier: 80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
Certificate issuer: /CN=80340326822530f943859c73e7df3d3655168b70
Certificate serial: 018711049B5D6EA454E2CA13299886523747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.mft
Manifest Number: 067E
Signing time: Fri 24 Mar 2023 00:28:47 +0000
Manifest this update: Fri 24 Mar 2023 00:28:47 +0000
Manifest next update: Sat 25 Mar 2023 00:28:47 +0000
Files and hashes: 1: NpYHT7I0cy5reN8uHR3Q7qovC6E.roa (hash: jfDe4PtIeovLYx34pZ71DZh8oTod64KYFNf/kgANyNs=)
2: gDQDJoIlMPlDhZxz5989NlUWi3A.crl (hash: mZ6p6ONKzVepFXqRIaeBDn5XinxOm4+JoWEdtxrTjBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Mar 2023 19:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:04:9b:5d:6e:a4:54:e2:ca:13:29:98:86:52:37:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80340326822530f943859c73e7df3d3655168b70
Validity
Not Before: Mar 24 00:28:47 2023 GMT
Not After : Mar 25 00:28:47 2023 GMT
Subject: CN=7faec0b9412baf80bbb0faead89cb290d64d3f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:a5:86:82:8a:f2:78:53:ef:92:2b:d5:07:
9b:75:5a:c3:d2:93:f1:f4:e3:aa:87:a1:4a:60:f0:
26:f2:48:43:40:1e:e7:b8:80:6d:d0:23:67:2c:34:
ae:d1:68:61:3c:1b:5d:fd:f3:bb:d4:4b:f0:ba:1a:
b2:5e:35:55:6f:81:bc:ba:cb:7c:d7:de:6c:b9:ce:
bb:e1:f4:a6:6d:8e:27:0a:f9:1a:64:12:53:52:01:
41:16:35:39:36:a1:88:b8:84:62:4e:ab:ee:54:d3:
3b:b4:20:75:4c:a6:ab:ae:86:d6:1f:d6:02:b9:aa:
9f:0c:9f:06:45:4b:e8:56:b5:1b:9d:30:4a:e5:71:
b1:e5:9e:a8:93:17:9c:95:c7:f1:e7:75:e7:ae:ed:
8b:a3:62:3b:1a:45:64:40:19:c3:ad:04:f6:7c:01:
2d:a0:e0:68:ac:04:35:06:ba:d1:9a:38:6f:1f:be:
df:44:59:b2:f6:fd:55:14:eb:c0:cc:a3:60:5e:c8:
b4:b8:12:ea:b1:2c:01:5e:65:52:14:12:45:db:52:
5a:9f:ec:88:6c:9e:88:7d:b1:f4:d7:2f:ed:97:fc:
d6:31:2c:52:ec:e7:e6:9e:82:f4:01:b6:f0:5d:b4:
d1:9e:2c:a1:b7:62:02:71:07:b7:db:00:43:0f:7b:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:C0:B9:41:2B:AF:80:BB:B0:FA:EA:D8:9C:B2:90:D6:4D:3F:02
X509v3 Authority Key Identifier:
keyid:80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bc:13:b9:9d:df:14:9d:d7:f4:6c:a0:26:39:11:61:e1:f5:
ae:e2:60:b7:ec:ac:25:f7:01:f9:91:bc:28:c2:d8:69:77:1a:
a7:96:67:62:8c:9d:7f:67:a7:16:7d:4d:ae:65:00:98:d5:3b:
65:f4:25:bd:e6:8a:8f:39:31:58:9a:29:95:6f:70:21:f3:86:
02:90:6d:ef:a8:87:27:e5:e6:8b:bd:fc:36:23:eb:16:e9:05:
48:03:ff:49:6a:03:78:5d:54:66:2f:29:18:83:15:af:4b:15:
f8:52:bb:89:1d:31:15:fd:e9:dc:4a:4d:dc:f2:4a:57:b2:c9:
18:05:30:4a:e9:da:f9:7e:d0:43:74:e7:48:18:01:c7:2f:59:
bd:f6:6a:ef:4b:6f:ba:94:15:48:a1:48:8c:20:25:54:d1:91:
61:e8:47:a0:87:09:7a:3e:d3:19:dd:d6:bc:90:00:bf:01:04:
38:9d:72:57:a7:02:89:2b:c5:df:03:32:74:93:f1:b5:57:bb:
5e:37:b1:d2:a9:4d:4d:44:64:e0:7a:0a:34:e7:de:8d:a9:25:
8c:26:4a:e2:5e:3e:86:6f:a3:07:a2:8a:22:9c:fe:a2:d9:40:
f5:dd:55:31:23:dd:33:63:25:0a:85:1a:1e:b3:50:3b:91:07:
55:79:ab:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcRBJtdbqRU4soTKZiGUjdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzQwMzI2ODIyNTMwZjk0Mzg1OWM3M2U3ZGYzZDM2NTUx
NjhiNzAwHhcNMjMwMzI0MDAyODQ3WhcNMjMwMzI1MDAyODQ3WjAzMTEwLwYDVQQD
Eyg3ZmFlYzBiOTQxMmJhZjgwYmJiMGZhZWFkODljYjI5MGQ2NGQzZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgClhoKK8nhT75Ir1QebdVrD0pPx
9OOqh6FKYPAm8khDQB7nuIBt0CNnLDSu0WhhPBtd/fO71EvwuhqyXjVVb4G8ust8
195suc674fSmbY4nCvkaZBJTUgFBFjU5NqGIuIRiTqvuVNM7tCB1TKarrobWH9YC
uaqfDJ8GRUvoVrUbnTBK5XGx5Z6okxeclcfx53Xnru2Lo2I7GkVkQBnDrQT2fAEt
oOBorAQ1BrrRmjhvH77fRFmy9v1VFOvAzKNgXsi0uBLqsSwBXmVSFBJF21Jan+yI
bJ6IfbH01y/tl/zWMSxS7OfmnoL0AbbwXbTRniyht2ICcQe32wBDD3vlPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+uwLlBK6+Au7D66ticspDWTT8CMB8GA1UdIwQY
MBaAFIA0AyaCJTD5Q4Wcc+ffPTZVFotwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RRREpvSWxNUGxEaFp4ejU5ODlObFVXaTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jZWMzMTEtODk4OS00ZjQxLWE0OTkt
YjY5NWE0YmEwY2I2LzEvZ0RRREpvSWxNUGxEaFp4ejU5ODlObFVXaTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jZWMzMTEtODk4OS00ZjQxLWE0OTktYjY5NWE0YmEwY2I2
LzEvZ0RRREpvSWxNUGxEaFp4ejU5ODlObFVXaTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLwTuZ3f
FJ3X9GygJjkRYeH1ruJgt+ysJfcB+ZG8KMLYaXcap5ZnYoydf2enFn1NrmUAmNU7
ZfQlveaKjzkxWJoplW9wIfOGApBt76iHJ+Xmi738NiPrFukFSAP/SWoDeF1UZi8p
GIMVr0sV+FK7iR0xFf3p3EpN3PJKV7LJGAUwSuna+X7QQ3TnSBgBxy9ZvfZq70tv
upQVSKFIjCAlVNGRYehHoIcJej7TGd3WvJAAvwEEOJ1yV6cCiSvF3wMydJPxtVe7
Xjex0qlNTURk4HoKNOfejakljCZK4l4+hm+jB6KKIpz+otlA9d1VMSPdM2MlCoUa
HrNQO5EHVXmr3Q==
-----END CERTIFICATE-----
Generated at Fri Mar 24 00:52:25 2023 by rpki-client on console-fra.rpki-client.org