Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
File: 2gttm-19ptQiB7kAZNPhPv0yVKw.mft (raw, json)
Hash identifier: JN/IjQQtdOd0F9GIMDEbaTxWlnZDuSPrjtfytMz3+ck=
Subject key identifier: A7:46:0D:3C:E9:23:2E:63:42:D3:AF:25:E9:68:BA:F1:07:C0:68:D3
Authority key identifier: DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
Certificate issuer: /CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Certificate serial: 018F448E2FAB7A7FBB5C1F8A28981F2BFB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
Manifest number: 1156
Signing time: Sat 04 May 2024 17:01:59 +0000
Manifest this update: Sat 04 May 2024 17:01:59 +0000
Manifest next update: Sun 05 May 2024 17:01:59 +0000
Files and hashes: 1: 2gttm-19ptQiB7kAZNPhPv0yVKw.crl (hash: beqtnBLfW3upUwWH8c57McHXUm435ixLPPzW4D7MIZg=)
2: 9ykJEphKAtuM8oVBgtkf9R0XVKA.roa (hash: lf+2RvjH4TQ4tmWT429FDAbRXIFtiS7DYzLDVUFuWlU=)
3: eQm2-Cdcdo9KOeNEyyjjcPLoQdI.roa (hash: b73RjAAgibx9UhxX6QMh5GwDV7Trou8uK/oEig2JMKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:44:8e:2f:ab:7a:7f:bb:5c:1f:8a:28:98:1f:2b:fb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b6d9bed7da6d42207b90064d3e13efd3254ac
Validity
Not Before: May 4 17:01:59 2024 GMT
Not After : May 5 17:01:59 2024 GMT
Subject: CN=a7460d3ce9232e6342d3af25e968baf107c068d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:3c:99:a5:1c:8b:ea:82:2c:f3:fe:09:7c:
f3:8b:f7:c0:1d:58:66:0e:b7:d9:42:14:5b:00:f9:
20:c3:ff:31:dd:a4:04:49:e2:5f:bd:d9:b2:65:92:
f3:d5:c1:48:7e:af:e7:5c:a9:2e:06:32:8d:b5:97:
2a:9c:68:8e:f3:88:00:dd:34:dd:c0:ee:59:1b:4c:
9e:e2:a2:fd:ef:03:85:cd:d7:ed:a5:ef:b1:7f:3a:
45:ed:e3:35:0a:5c:bc:1d:31:44:90:86:85:54:a0:
f3:85:95:69:ef:ca:bb:93:9c:cc:aa:56:8e:fe:7f:
c5:34:55:38:3a:09:0c:8a:d7:be:77:10:7f:ba:2f:
bc:1d:c9:cb:8c:35:9c:20:e5:21:95:a7:06:aa:9e:
2a:c2:12:e7:cd:3d:68:1a:97:65:1b:24:d8:8e:9d:
40:b8:93:59:c1:79:14:ce:a5:43:66:d4:73:04:86:
6d:f3:d7:c4:f9:87:60:5b:75:c7:cd:c8:cd:4c:28:
a6:73:e4:5f:7d:47:96:46:00:02:0f:b9:24:72:fe:
dd:36:7c:ca:10:fb:80:1e:0b:ee:82:a0:64:1a:3a:
d4:bf:38:d1:89:51:42:33:5a:67:c8:73:cb:80:ac:
30:41:67:67:e2:59:15:ca:c1:8e:42:3e:69:23:c2:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:0D:3C:E9:23:2E:63:42:D3:AF:25:E9:68:BA:F1:07:C0:68:D3
X509v3 Authority Key Identifier:
keyid:DA:0B:6D:9B:ED:7D:A6:D4:22:07:B9:00:64:D3:E1:3E:FD:32:54:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gttm-19ptQiB7kAZNPhPv0yVKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/13d49f-5e0f-422b-bcf1-e172d6a01e03/1/2gttm-19ptQiB7kAZNPhPv0yVKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:83:bc:9f:c4:b1:cc:7e:17:a6:43:ee:8a:8c:b0:a9:9c:7f:
40:da:81:d2:ed:a2:ac:96:a7:9e:6e:f4:5a:3f:c7:88:c1:af:
71:e5:3c:1e:d4:95:a8:4c:27:b2:ce:a7:62:5e:f2:c3:37:a3:
fd:f8:bc:b5:f4:c6:bb:76:80:43:6e:90:e5:e0:96:76:2a:fc:
30:2c:6e:cd:7a:46:02:ec:78:f8:e8:7b:ee:89:e2:a8:39:5f:
e0:f9:c0:e4:69:86:7a:b7:c9:8e:3e:ba:09:62:e3:aa:a0:c3:
76:c6:a7:1d:53:7d:0e:2d:9d:49:4b:0c:47:84:3c:9d:12:ed:
a8:9e:3a:69:97:30:e4:7d:41:31:92:3f:40:fd:cc:66:6d:d4:
ef:82:a5:23:17:22:04:9e:f9:d1:5a:58:4b:e3:14:54:7e:fc:
c8:60:9e:8e:d8:0d:fa:03:07:7b:67:de:56:16:14:1a:9a:65:
d7:f9:17:a6:4f:70:4d:21:b4:dd:a9:f5:9b:9a:59:a5:2c:53:
f3:38:68:7c:f9:23:e5:34:33:96:31:cf:74:0f:9f:ed:96:e0:
84:69:02:86:c2:35:05:12:26:e7:3e:81:71:a0:d9:cb:b3:a7:
93:fd:1b:31:71:09:ce:49:46:ed:d6:54:4c:8b:5c:a4:64:39:
fd:97:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:05:46 2024 by rpki-client on console-fra.rpki-client.org