Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: aq6nYCvA8GkTHGHh5JHU3p+kma1vf5qzhcGqYfgYTY4=
Subject key identifier: 3F:08:69:E3:FD:60:24:75:10:7D:AD:8D:37:A0:08:56:CB:E4:43:87
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 018F87B641FE259655F6BB6B73D85DDA1381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 0DC2
Signing time: Fri 17 May 2024 18:00:19 +0000
Manifest this update: Fri 17 May 2024 18:00:19 +0000
Manifest next update: Sat 18 May 2024 18:00:19 +0000
Files and hashes: 1: BBdNUIg6UxIqtzsd7CRWLLhTGJk.roa (hash: X26au7jughnpHkt8kbK3IpDIyuj9+1XoxsUcOsDGs38=)
2: HyeDvTAVvAioLL7bNu6p9j1X4-U.roa (hash: 3BMBVCzJBojOx/meF3/jYltUSf00J+SfuK3w4a/K5xM=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: P0XCD+Amna7sx3bs24lbVjjRW/7RHi0MLwO5uDgcCjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:41:fe:25:96:55:f6:bb:6b:73:d8:5d:da:13:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: May 17 18:00:19 2024 GMT
Not After : May 18 18:00:19 2024 GMT
Subject: CN=3f0869e3fd602475107dad8d37a00856cbe44387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:d4:c9:98:ea:06:a3:3b:a8:30:08:0c:11:
f7:0e:04:d8:8f:4f:18:a6:69:82:e6:39:7b:0c:5c:
7f:7e:f7:a8:7a:d9:82:12:0e:d2:92:e7:72:55:23:
f7:d6:58:b2:f6:d3:63:00:8c:69:65:7c:1a:3e:d1:
cd:26:b0:9e:bd:1f:45:a4:4b:ae:35:56:a9:fa:96:
76:b8:d3:e4:6d:e8:08:78:fc:1a:e8:c8:8b:7c:b0:
6e:6e:d8:3a:75:d2:bd:55:5f:0a:82:a8:25:3e:05:
78:71:d5:50:03:e2:12:75:c5:7e:77:fa:d7:9f:e3:
2e:c5:10:eb:37:94:82:f3:eb:b2:33:3e:73:2d:6e:
20:6e:92:46:17:53:67:47:31:ce:72:c4:a1:c8:d5:
1b:9e:88:ca:51:13:0a:28:34:89:65:1f:da:90:1e:
22:a9:e1:8e:91:f7:2e:a5:04:22:cd:f4:fd:4a:8a:
8e:ce:d9:dc:0d:fe:db:13:39:c3:ad:36:51:44:29:
ed:04:4f:27:29:9c:92:88:b9:08:c6:ad:48:c4:4b:
80:33:a5:ac:65:39:ea:98:59:2c:08:aa:ef:1a:c1:
0f:fb:19:27:d0:e5:a7:f2:26:fc:39:cb:b4:a0:bb:
43:ff:93:7a:b6:08:db:e0:bf:07:12:77:55:1e:ba:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:69:E3:FD:60:24:75:10:7D:AD:8D:37:A0:08:56:CB:E4:43:87
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:8e:98:56:8d:aa:a8:17:ea:b1:db:17:38:a8:3a:29:7e:
b9:c3:2c:88:d1:07:60:d1:21:be:f9:97:ea:60:2f:c4:2a:54:
de:a7:0e:82:0a:07:54:1d:03:54:88:6b:e3:fc:b9:49:3a:3d:
26:97:6b:38:a8:69:0d:03:44:09:06:b3:8d:10:55:62:19:86:
99:3f:a1:b4:3e:84:98:6e:94:28:bc:c4:43:62:02:a7:56:a0:
37:fa:ee:74:b5:87:f7:bc:1a:f2:be:8a:4e:7a:76:45:33:43:
b0:80:a9:dc:a7:01:91:c1:eb:0c:b8:46:49:1c:7c:c1:a1:1c:
ad:3f:09:d3:fd:05:c0:78:77:74:76:21:a3:2a:44:1b:27:8f:
b8:b3:64:50:d1:70:8c:0f:36:1f:db:40:8e:79:11:69:56:0d:
fd:f8:6f:e0:7e:1a:01:86:b2:c9:d6:c1:c1:07:5c:d2:8c:4d:
65:d6:a8:24:5c:de:08:29:07:b3:a7:f9:c4:89:32:cf:a4:a5:
04:74:a7:96:3e:b4:dd:cb:7b:b1:ef:ee:fe:e7:57:30:f4:52:
08:30:bb:22:dd:0d:59:a9:f4:32:cf:81:5f:51:b8:a6:05:aa:
78:c8:03:eb:0c:1d:04:bc:d7:7e:1f:d4:0f:bc:e0:c1:84:ba:
58:0b:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:05 2024 by rpki-client on console-ams.rpki-client.org