Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: AlgkOsRXWM+LJmN/C2bxet9D8xOWPM9lw5AOjsQRR6M=
Subject key identifier: 5D:B5:FA:AF:6B:1E:3C:E1:43:B2:8A:59:4D:E1:84:A1:E3:C8:5C:00
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 018F87ED61FD9B5287DF5FC50FDC0AB6E327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 8F
Signing time: Fri 17 May 2024 19:00:32 +0000
Manifest this update: Fri 17 May 2024 19:00:32 +0000
Manifest next update: Sat 18 May 2024 19:00:32 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: KraIUREZHr/TiosRe4Q+NXybFr6z9XJWbBDF+9oQLd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:61:fd:9b:52:87:df:5f:c5:0f:dc:0a:b6:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: May 17 19:00:32 2024 GMT
Not After : May 18 19:00:32 2024 GMT
Subject: CN=5db5faaf6b1e3ce143b28a594de184a1e3c85c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:9e:cb:ac:7a:3a:95:b9:d4:8d:54:c7:fb:
6c:85:a2:c6:c3:9e:2e:5b:2a:37:e5:ff:bf:e3:f6:
cb:f8:f4:a2:a4:80:1c:a5:45:87:19:03:d4:c0:7b:
ec:d4:91:29:d5:a6:81:79:46:f4:aa:4d:49:f8:d5:
ee:b5:d6:16:0b:72:d1:00:2f:d1:a5:be:03:92:45:
e3:59:2f:f2:02:ec:11:b4:c4:ae:13:66:fe:e3:fd:
d8:5f:d0:9c:0a:dc:be:2a:42:0c:3f:12:ca:ee:3e:
91:10:c6:7e:fe:40:2d:66:41:b1:72:7b:4a:fc:75:
9b:6b:d5:15:e6:45:0f:69:00:31:09:27:ca:e7:56:
11:e8:d4:6e:28:04:6a:1f:58:28:2a:42:46:b0:d1:
dc:bc:6a:62:25:bd:51:74:dc:cc:d6:8c:07:1d:f6:
da:72:fb:fd:69:55:2f:e0:c1:2b:b5:cb:a2:b9:42:
17:e2:79:88:50:ae:2a:ae:1b:b3:51:e1:d4:5e:4b:
bb:b6:ac:14:ee:ae:0b:f7:49:97:c6:ab:e7:31:f2:
cf:27:1e:b1:b1:92:ee:d6:b8:da:dd:9f:d7:84:98:
4a:44:70:c3:3b:fc:97:5b:66:be:b6:8e:2f:6e:a0:
08:2b:1f:59:d1:da:4d:ac:82:06:bc:85:ba:e3:17:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:FA:AF:6B:1E:3C:E1:43:B2:8A:59:4D:E1:84:A1:E3:C8:5C:00
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:21:2a:ef:d2:08:04:1a:66:f6:e4:db:3c:9b:b6:43:5e:85:
3c:fe:02:6f:aa:89:57:b7:0c:f4:4a:a2:fe:30:03:1b:21:0d:
36:bc:a5:7a:ee:70:9c:16:82:ba:01:e7:6d:80:d4:a5:a2:a8:
21:c2:ea:9e:bd:bf:af:67:10:5e:b6:5c:97:10:20:fb:b2:d7:
21:c9:c8:e0:92:5e:3c:f4:58:ea:db:60:85:2c:d9:8d:df:8f:
56:d6:a8:df:7b:fd:cb:65:e1:6b:7b:a9:23:5f:1d:f2:64:67:
6d:f3:bf:5a:5c:ac:96:ec:80:6c:3c:29:1d:cd:b5:c8:94:9f:
a9:cb:14:80:a5:a3:40:ec:00:4f:ea:92:cc:8e:9d:0c:2c:d8:
3f:a8:5f:99:83:21:48:8a:3a:dd:c5:bb:45:51:86:f5:df:1d:
73:e0:20:5f:b7:50:1a:16:47:0e:27:c9:22:64:9a:99:06:55:
22:5b:e5:11:52:ca:8b:4c:97:68:ab:9d:d2:86:00:50:a1:d7:
d3:69:42:a5:96:1c:33:47:74:42:db:6f:eb:92:10:3f:94:ce:
1a:f3:8d:11:3a:b9:b1:47:e8:31:9e:ba:d0:be:10:a8:72:94:
c1:f4:9a:6f:85:e6:35:00:1c:6a:66:75:9d:f0:81:a5:ac:32:
0c:c5:a8:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7WH9m1KH31/FD9wKtuMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMWI3MjZmY2M5ODIwMGNmMzkwMzRkZjk1OGU4ZmU4YjNj
NzljMzcwHhcNMjQwNTE3MTkwMDMyWhcNMjQwNTE4MTkwMDMyWjAzMTEwLwYDVQQD
Eyg1ZGI1ZmFhZjZiMWUzY2UxNDNiMjhhNTk0ZGUxODRhMWUzYzg1YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7yey6x6OpW51I1Ux/tshaLGw54u
Wyo35f+/4/bL+PSipIAcpUWHGQPUwHvs1JEp1aaBeUb0qk1J+NXutdYWC3LRAC/R
pb4DkkXjWS/yAuwRtMSuE2b+4/3YX9CcCty+KkIMPxLK7j6REMZ+/kAtZkGxcntK
/HWba9UV5kUPaQAxCSfK51YR6NRuKARqH1goKkJGsNHcvGpiJb1RdNzM1owHHfba
cvv9aVUv4MErtcuiuUIX4nmIUK4qrhuzUeHUXku7tqwU7q4L90mXxqvnMfLPJx6x
sZLu1rja3Z/XhJhKRHDDO/yXW2a+to4vbqAIKx9Z0dpNrIIGvIW64xdXcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF21+q9rHjzhQ7KKWU3hhKHjyFwAMB8GA1UdIwQY
MBaAFIMbcm/MmCAM85A035WOj+izx5w3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2Ut
M2MzNDM2MzY4NGU2LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNTE0M2YtYzNjOS00MzU3LTg0N2UtM2MzNDM2MzY4NGU2
LzEvZ3h0eWI4eVlJQXp6a0RUZmxZNlA2TFBIbkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyEq79II
BBpm9uTbPJu2Q16FPP4Cb6qJV7cM9Eqi/jADGyENNryleu5wnBaCugHnbYDUpaKo
IcLqnr2/r2cQXrZclxAg+7LXIcnI4JJePPRY6ttghSzZjd+PVtao33v9y2Xha3up
I18d8mRnbfO/WlysluyAbDwpHc21yJSfqcsUgKWjQOwAT+qSzI6dDCzYP6hfmYMh
SIo63cW7RVGG9d8dc+AgX7dQGhZHDifJImSamQZVIlvlEVLKi0yXaKud0oYAUKHX
02lCpZYcM0d0Qttv65IQP5TOGvONETq5sUfoMZ660L4QqHKUwfSab4XmNQAcamZ1
nfCBpawyDMWoWQ==
-----END CERTIFICATE-----
Generated at Sat May 18 02:11:53 2024 by rpki-client on console-fra.rpki-client.org