Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
File: gTPYnAaoocydvDYiAffsVZ1_3Ug.mft (raw, json)
Hash identifier: xvYTGHXzSv/cUM7C9uFMauWIaXzpLxyCUyffCV/KbuQ=
Subject key identifier: 3B:7E:06:FF:B2:6F:A1:88:23:55:6A:AD:AB:8D:18:B3:34:0F:42:53
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 018F5A7055CE635F9003E2E2E5A0440F1BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
Manifest number: 1168
Signing time: Wed 08 May 2024 23:01:02 +0000
Manifest this update: Wed 08 May 2024 23:01:02 +0000
Manifest next update: Thu 09 May 2024 23:01:02 +0000
Files and hashes: 1: 0mWpy6Heq7QjcTiLuTqq2Z0B0xo.roa (hash: zv8LrWvmdgGcggac2tX2H2fjcLB2taGUc9BGdk+2VIo=)
2: BFT3mzIFYbu0lFDdlKkjSuP_RxY.roa (hash: 1l8cCw5+OSabGpEEamt5IwLnWM3nK36VI2gHTmjR4NI=)
3: gTPYnAaoocydvDYiAffsVZ1_3Ug.crl (hash: aABmeGZJEqNTE8QiSJ820mA7rtAZEeBYsn2YVXrrh78=)
4: jg08wEsXQ225GyfhVbbL0lj2dro.roa (hash: ETn+vqNcyYMPwZSk1mN1U7+a7en6NExuJihUnB/gXv4=)
5: l4yR9EhVfUl3qdhy44u3yZbj68c.roa (hash: k7WJopjdLC01t+BWKXyo2v6QT3D/9jFt0PnBU1nhUq4=)
6: mlMF-NM6zAlOnA6zsST8_eZxjio.roa (hash: MmFcv5RWiMl6+NT97iJhN/tGRpiu8FT2fDvNZCYT+b0=)
7: uCQrcfXgrSZk21T-UnS7GtypZ-4.roa (hash: 9wcOKcYiTq08IY/wUDpdVgSDMZjgh1torwqst0AloyA=)
8: xxaH20AWVy7ndpGZgtvrasP59BY.roa (hash: Wqvg2uarzy/JuB9sjObsL0BBM3IAVRCsEKmiRzArDb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5a:70:55:ce:63:5f:90:03:e2:e2:e5:a0:44:0f:1b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: May 8 23:01:02 2024 GMT
Not After : May 9 23:01:02 2024 GMT
Subject: CN=3b7e06ffb26fa18823556aadab8d18b3340f4253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:50:91:8c:d6:a8:83:32:08:55:f3:1a:8c:
0b:2c:f7:eb:38:84:36:cb:98:f0:52:bb:a2:ea:9d:
0c:93:8b:c4:ad:db:16:c2:29:e6:5f:07:56:ff:09:
1c:cc:b2:38:a7:dc:c6:88:2b:c7:6c:f2:94:18:9e:
ba:55:42:df:2c:f3:91:03:26:1c:a4:8f:f3:f1:4f:
5e:58:cb:26:5f:52:32:44:da:12:c2:91:18:d5:af:
91:9d:be:04:e6:7c:72:1f:05:37:fd:90:7f:69:f9:
49:54:01:00:46:35:71:9a:ea:4f:77:33:42:5f:1a:
cc:86:66:7d:00:52:0f:fb:a6:fd:89:e5:66:46:d1:
63:2b:77:0d:6a:75:72:4e:69:d1:ee:04:de:f7:5b:
b7:78:77:d1:d5:84:8e:67:dd:ad:56:21:ba:2b:85:
c9:84:f6:1a:fa:94:8a:6a:81:c2:27:95:09:16:04:
01:c3:fa:47:79:a7:61:fa:06:46:eb:4c:49:f6:1c:
85:c9:6b:d4:be:03:89:3d:ac:26:51:1e:e5:00:bc:
42:b7:c6:2c:75:b7:01:8f:2d:52:a3:db:16:8c:ca:
77:4c:78:a5:56:f6:77:84:d7:86:de:4d:d1:8b:68:
5b:4e:db:7c:d7:c1:1d:17:83:ce:64:81:d0:3d:0d:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:06:FF:B2:6F:A1:88:23:55:6A:AD:AB:8D:18:B3:34:0F:42:53
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:22:46:09:ef:7c:a5:02:d3:5a:43:83:f9:a0:dc:24:4e:59:
92:f4:2c:41:57:16:12:8f:45:63:a3:37:8f:a0:a7:5a:76:92:
e3:34:ef:91:1b:42:68:32:97:d5:14:5c:cd:c3:07:dc:58:b1:
d1:79:69:8a:fb:26:4b:c5:ca:43:5e:2b:7c:0d:f7:9c:5f:0e:
cb:ba:15:8a:b5:b6:21:c6:20:92:b2:f6:25:d5:52:36:e0:5f:
cc:af:c8:46:10:a5:d7:5e:91:d7:0a:96:e7:5f:5d:b7:12:4b:
c6:55:e9:7f:9a:86:4f:92:7d:ff:e0:da:64:d7:98:d7:03:32:
9a:75:5c:c4:e8:7c:75:d1:70:33:ca:69:3c:b9:f9:88:ce:02:
78:a8:a6:a6:b0:f3:84:5d:8b:cc:43:51:f1:7b:6a:23:54:e0:
87:f2:e0:9d:24:0b:bd:6b:51:27:80:52:c3:66:73:eb:e8:ec:
03:ca:e6:81:08:07:a8:74:30:bc:7c:a7:f2:07:3e:3f:5d:b8:
6a:ff:eb:31:47:ff:81:9a:4f:ba:74:85:69:84:5d:8b:4e:bf:
10:43:a2:c7:30:f3:1a:78:d4:88:f7:df:41:9b:d6:bf:5d:5b:
48:cb:38:16:93:e7:7e:48:59:44:46:24:bb:0b:3e:d2:aa:35:
02:89:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:48:26 2024 by rpki-client on console-ams.rpki-client.org