Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File: G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier: vaN8uAckQdG+nN+qVsYiPk1yRtVyMMDNcelbZoYuwNc=
Subject key identifier: 03:4C:32:16:36:E2:B7:4D:C0:05:D1:E6:F1:B1:A7:57:49:BA:F3:67
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer: /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial: 018F43B1A658826F524CAAB528F2D465C852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number: 1151
Signing time: Sat 04 May 2024 13:01:06 +0000
Manifest this update: Sat 04 May 2024 13:01:06 +0000
Manifest next update: Sun 05 May 2024 13:01:06 +0000
Files and hashes: 1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: S5hKyQZiWMXI+TPwWzPoalhBGPVrk+v6KZENubFoae4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:b1:a6:58:82:6f:52:4c:aa:b5:28:f2:d4:65:c8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
Validity
Not Before: May 4 13:01:06 2024 GMT
Not After : May 5 13:01:06 2024 GMT
Subject: CN=034c321636e2b74dc005d1e6f1b1a75749baf367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:ac:d6:f9:70:6e:3a:97:c2:57:03:57:65:
44:16:f3:2f:04:3a:f5:b8:da:f5:b7:97:ab:42:77:
c9:82:bf:34:11:16:c6:71:18:2f:8e:5d:de:3f:9e:
50:3b:7c:2e:99:32:bc:e2:ed:3e:59:09:6a:90:44:
a5:37:0c:bd:49:07:c6:a2:15:f7:ca:8b:07:41:85:
02:56:6a:13:e1:47:c7:79:ff:75:04:08:a0:6b:5e:
cb:82:42:79:ba:b4:f9:4f:7e:e3:22:bc:3f:12:9d:
41:63:37:3a:1c:63:65:d4:34:4c:6b:e0:33:b0:1c:
90:a2:4a:f2:0c:31:cb:57:d0:d0:7a:ef:66:65:ca:
f1:20:63:37:25:54:b1:36:3b:84:a9:b0:9a:35:86:
a0:bf:0e:0c:ec:f3:af:aa:8f:9d:e2:02:4e:39:cc:
89:c5:4e:41:0c:aa:08:f4:b5:c1:17:68:a2:1e:7a:
9e:4b:b4:55:8c:2d:9b:29:1e:08:fd:c0:f7:82:c8:
30:5b:09:ff:97:1e:f2:d6:de:fa:3a:eb:a7:08:cb:
1c:73:39:07:67:49:6c:59:44:fa:66:d6:42:a3:f8:
e3:75:c7:cc:4f:22:e3:fa:c4:f4:46:4b:6f:c8:b5:
43:13:7e:f5:0d:8a:57:51:4d:0c:73:b4:95:26:d7:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4C:32:16:36:E2:B7:4D:C0:05:D1:E6:F1:B1:A7:57:49:BA:F3:67
X509v3 Authority Key Identifier:
keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c4:2e:8c:74:97:e9:cd:f1:dd:17:38:d4:b3:6d:b2:30:78:
45:e6:b2:25:cf:dd:a2:f7:9f:c7:7c:bd:b6:68:a0:88:0b:b1:
d8:3f:10:2b:a9:cb:17:a4:53:66:23:03:eb:2e:4a:7d:63:0d:
22:e2:9c:b4:79:60:7e:c2:3f:f6:4b:46:ea:75:07:a8:b2:63:
ed:15:e4:a2:14:3e:a6:60:e4:40:f1:6a:7b:68:65:14:f5:fd:
2d:54:7f:46:01:dd:9b:6f:aa:66:7d:ca:82:03:4f:7d:c8:24:
e6:71:50:fb:70:d3:48:0f:14:97:9b:ce:3e:52:20:f4:c5:b5:
f0:f8:e3:ed:0a:9d:31:be:c1:12:9e:d0:1b:e7:a7:39:41:d8:
af:33:1f:97:00:06:b5:1d:8f:7d:15:93:05:2f:0a:9b:be:97:
2d:3d:f3:7e:16:fc:2b:2f:fd:a4:25:6a:5f:a0:26:9f:e0:f2:
6f:ad:e8:52:c5:8e:52:a7:5f:9d:a7:81:f8:19:18:71:5d:87:
ed:e4:6e:89:56:e2:8f:2b:7b:f9:07:db:7a:52:ad:11:d8:fd:
33:de:ff:b2:a7:25:ff:d4:a2:7c:5d:5e:c7:5d:0b:b9:0d:70:
b4:86:10:e1:b6:ab:2b:a4:90:d2:33:d0:cb:ef:89:f7:bc:65:
81:01:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:54:40 2024 by rpki-client on console-ams.rpki-client.org