Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: 94bO7jjS34/SWw620SO0alHJ5kTX4qsVcB+6Qb8tsxE=
Subject key identifier: 89:69:D8:CC:A7:A0:AD:50:A2:AB:94:66:B2:52:D0:74:53:EF:44:F6
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 018F47C55C0A924C75F162F0B8B93C6754BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1159
Signing time: Sun 05 May 2024 08:01:07 +0000
Manifest this update: Sun 05 May 2024 08:01:07 +0000
Manifest next update: Mon 06 May 2024 08:01:07 +0000
Files and hashes: 1: 2vUxuIMJhQXwtYF3KvatYLHYHR4.roa (hash: 7m7ZGMO89OoievqFMTNKCI450e/DXHfX4fydxjFN6Aw=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: 7y0e6H/ahcJN8MBMWXQT3UzlIPf5VMqcIc9mlrTqOLA=)
3: KzBm6DsLgDUDl4P8yKGvaY11SO4.roa (hash: SCAYPZEFnvekxTopBR1u6jQcUSu7s4r8mL5GllJg6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:c5:5c:0a:92:4c:75:f1:62:f0:b8:b9:3c:67:54:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: May 5 08:01:07 2024 GMT
Not After : May 6 08:01:07 2024 GMT
Subject: CN=8969d8cca7a0ad50a2ab9466b252d07453ef44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:22:4f:66:f2:0d:3f:a7:3e:84:a7:3a:87:
94:2c:17:e3:f1:e4:c2:80:4d:e4:3b:b4:52:1c:67:
b1:8b:c3:95:89:47:da:af:62:15:1d:a8:67:96:2c:
ac:0b:0e:ee:59:5a:60:c5:bc:3f:b3:51:07:4d:84:
86:af:4b:4d:43:c5:c8:91:64:20:84:f9:05:aa:57:
c6:9f:0d:1b:b9:40:2b:55:4e:ea:f5:0a:14:a2:cc:
e2:0d:5d:a9:cb:4c:00:4c:7a:6c:33:6a:2e:93:88:
13:cd:96:91:8f:84:1b:94:7b:9c:9e:6d:63:31:cf:
74:ca:63:d8:19:8b:07:79:ca:b6:a2:42:50:cc:1c:
a5:4d:0a:86:60:1b:3c:53:f0:b3:dd:f7:96:7d:e5:
c5:4f:84:c0:75:a7:25:ec:8c:21:68:e8:21:da:b5:
ab:b4:13:f5:fa:c5:55:b9:dd:61:2c:ab:ea:d7:c4:
ca:53:b0:b1:64:c6:79:7e:da:8b:6b:8a:4b:82:4c:
22:cc:15:96:6f:38:8d:12:7a:5c:80:ac:9b:6d:85:
51:f4:34:cf:1a:15:7c:f3:9a:fd:28:13:4c:ef:1c:
5a:93:18:da:55:47:ef:10:9e:bc:6e:d7:7d:1f:a0:
fd:fc:31:77:fd:e5:e9:c0:a3:b4:a3:69:15:41:36:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:D8:CC:A7:A0:AD:50:A2:AB:94:66:B2:52:D0:74:53:EF:44:F6
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:33:f5:e5:7c:33:43:25:2c:99:43:f7:b7:9f:01:33:90:06:
68:65:08:db:87:41:90:12:ff:09:f5:1c:b6:60:04:91:9a:dc:
d1:e6:f8:c7:c2:6e:63:8e:32:c0:19:42:87:ab:da:63:2c:01:
3b:70:ea:af:0b:cd:df:2b:3b:18:c1:d3:81:be:0d:3c:39:67:
ad:0f:5d:65:7e:84:2f:7c:62:b4:22:69:e3:63:66:42:db:5c:
6f:ae:c9:a7:fe:c9:80:4a:91:f7:6c:73:c5:9f:24:ff:a6:0f:
a7:3c:73:13:2f:f7:c6:3b:84:ee:cc:fe:e9:1f:55:f0:17:69:
33:22:66:7e:0c:6f:48:cf:36:a5:17:3b:e5:c9:35:00:ea:2d:
45:ff:2b:61:1c:d2:95:8f:59:fb:7c:6e:79:56:f9:0e:07:dc:
d5:7e:3d:2f:cf:01:d8:e6:c8:77:ee:09:bc:7a:da:f4:17:59:
b7:db:9f:b6:72:9e:2b:c8:33:6d:d2:a8:c3:0e:ba:3f:1a:f9:
22:49:76:da:ac:21:d9:c9:4e:f6:29:54:87:ed:de:c3:ee:e9:
5e:cd:b2:e6:d7:65:ca:5b:2e:18:dc:91:8a:e4:3a:f7:a1:04:
40:47:2f:ea:38:f8:33:00:e2:2b:0a:36:19:73:83:9e:f7:6c:
70:d4:05:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:16:45 2024 by rpki-client on console-fra.rpki-client.org