Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/428ebc-0a95-4251-ad00-7993b60c8470/1/GHD7YYredkTpXYKIIvXCVQcnA8U.mft
File: GHD7YYredkTpXYKIIvXCVQcnA8U.mft (raw, json)
Hash identifier: u0lwrfZt3TG6D/EgRB0geJibPgHDE5NH66C9cblcu/4=
Subject key identifier: 9E:63:23:A4:3F:C4:CC:27:2B:12:35:72:27:46:77:51:1E:EA:0B:57
Authority key identifier: 18:70:FB:61:8A:DE:76:44:E9:5D:82:88:22:F5:C2:55:07:27:03:C5
Certificate issuer: /CN=1870fb618ade7644e95d828822f5c255072703c5
Certificate serial: 018F5327034B56C04695F4DBD3E642FCD5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHD7YYredkTpXYKIIvXCVQcnA8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/428ebc-0a95-4251-ad00-7993b60c8470/1/GHD7YYredkTpXYKIIvXCVQcnA8U.mft
Manifest number: 101D
Signing time: Tue 07 May 2024 13:03:36 +0000
Manifest this update: Tue 07 May 2024 13:03:36 +0000
Manifest next update: Wed 08 May 2024 13:03:36 +0000
Files and hashes: 1: GHD7YYredkTpXYKIIvXCVQcnA8U.crl (hash: sVmIPM8WF298E6GQNFpDUjgAb5FoLvPnCH8MND9iEAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/428ebc-0a95-4251-ad00-7993b60c8470/1/GHD7YYredkTpXYKIIvXCVQcnA8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/428ebc-0a95-4251-ad00-7993b60c8470/1/GHD7YYredkTpXYKIIvXCVQcnA8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHD7YYredkTpXYKIIvXCVQcnA8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:27:03:4b:56:c0:46:95:f4:db:d3:e6:42:fc:d5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1870fb618ade7644e95d828822f5c255072703c5
Validity
Not Before: May 7 13:03:36 2024 GMT
Not After : May 8 13:03:36 2024 GMT
Subject: CN=9e6323a43fc4cc272b123572274677511eea0b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:dd:65:c1:6a:89:22:b4:c7:1c:fd:5e:fe:
b4:8f:a8:09:30:c7:dc:0e:a8:78:45:ba:17:76:6a:
40:dc:35:dc:e2:43:5f:11:95:22:a9:41:d6:60:32:
db:f6:cb:3a:55:bb:52:29:2b:92:d4:a2:b1:4e:9a:
f9:57:0d:9c:d5:9d:b5:00:77:52:c0:29:ea:14:a6:
c3:f6:1e:e9:70:43:dd:a6:fe:1d:00:b7:4a:d3:a6:
73:e0:03:45:66:c7:26:86:ef:74:ce:bf:b4:26:69:
c1:58:87:59:0a:98:e4:ea:3b:af:45:29:a5:d7:bb:
1a:2b:94:48:1f:b5:aa:14:65:e4:cd:22:83:ed:7a:
13:06:8f:e6:2c:01:01:e5:8b:c4:fe:ac:18:a6:b9:
cc:11:bd:5f:3e:fe:42:d1:a2:9c:27:d6:d4:72:06:
a6:76:30:3e:8b:8b:89:2e:b7:e3:b2:8a:69:de:ec:
96:3a:69:62:a9:f0:4b:f6:0d:a9:24:74:93:0b:5a:
f3:b3:30:d9:3d:79:2a:ef:35:51:47:93:d2:39:35:
1a:37:ef:fd:ca:7d:be:64:d4:25:f7:95:09:e6:48:
5d:61:8a:92:75:aa:44:bd:ba:35:eb:87:f6:be:c0:
1e:39:98:e2:79:1e:67:0f:3a:3f:a8:da:ef:1c:3f:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:63:23:A4:3F:C4:CC:27:2B:12:35:72:27:46:77:51:1E:EA:0B:57
X509v3 Authority Key Identifier:
keyid:18:70:FB:61:8A:DE:76:44:E9:5D:82:88:22:F5:C2:55:07:27:03:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHD7YYredkTpXYKIIvXCVQcnA8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/428ebc-0a95-4251-ad00-7993b60c8470/1/GHD7YYredkTpXYKIIvXCVQcnA8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/428ebc-0a95-4251-ad00-7993b60c8470/1/GHD7YYredkTpXYKIIvXCVQcnA8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5f:49:3b:bc:b8:0e:a6:1f:6f:f4:ec:78:b3:e8:d4:fb:0d:
39:04:bf:c4:79:7e:69:70:1d:e0:0e:32:3a:ad:d4:c6:1d:7a:
06:5b:38:0c:05:93:7e:dd:76:9c:39:dd:31:0c:98:8f:95:d1:
cc:6a:20:53:26:ee:74:d6:4e:cc:ce:73:d5:ec:92:0b:a3:02:
69:e3:7a:aa:e2:ba:0d:51:48:c4:2e:41:dc:50:b6:5a:44:9d:
e7:5c:66:64:c1:0d:6a:7b:e0:3e:b3:b2:08:9a:a8:1e:03:e7:
82:8f:3d:0a:be:d8:00:72:d9:9d:4e:c5:86:60:49:11:10:ec:
49:2a:49:c8:59:5a:89:cb:cf:a8:40:b7:c0:0a:4c:5d:28:16:
00:fa:0a:6e:fb:5a:a7:57:a9:09:f7:79:9f:36:06:b9:8c:4c:
6c:5e:c5:00:e1:53:cd:02:c9:ec:9d:85:d1:68:b5:52:7b:d5:
2d:ef:f5:01:0a:b6:c0:02:85:65:23:63:d4:3d:3a:84:50:9a:
bb:f7:40:d2:1b:64:70:d9:12:f3:f8:74:d6:88:cb:56:f0:ae:
e3:90:a2:df:40:7e:fe:aa:1e:a8:17:81:3c:7b:a5:4c:87:a5:
c2:b2:6a:34:0a:48:d4:ac:e4:87:34:db:5f:23:8e:ea:7f:b6:
46:d0:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:00:15 2024 by rpki-client on console-ams.rpki-client.org