Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: nt5E/5A2ftYLkgyKikLiHEv5+TiPTh5ZS/PEWtOLMd8=
Subject key identifier: D4:76:48:29:35:E3:FB:0C:70:5D:93:6E:AC:F4:32:5C:A7:DB:40:E8
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 018F89392FB1F711B748FB4FDEEA166B7911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0B11
Signing time: Sat 18 May 2024 01:02:57 +0000
Manifest this update: Sat 18 May 2024 01:02:57 +0000
Manifest next update: Sun 19 May 2024 01:02:57 +0000
Files and hashes: 1: UkHvGiUCKcbdQEIeao5vbFNxNgY.roa (hash: 8kCoRMMYxnUg9T0df7b1WKpN1HXbwSgrEQ5QM9y2NRA=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: ANUdFitZHoVSB7IHhUXMSFKe5Chi1vimxyQzEjpSQI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:39:2f:b1:f7:11:b7:48:fb:4f:de:ea:16:6b:79:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: May 18 01:02:57 2024 GMT
Not After : May 19 01:02:57 2024 GMT
Subject: CN=d476482935e3fb0c705d936eacf4325ca7db40e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:9c:97:34:3d:30:b2:9d:db:27:58:71:e0:
03:c9:b1:7f:c0:05:12:ed:48:38:7b:65:76:c6:d3:
5a:c8:92:c5:d6:78:a8:b8:e8:d0:a1:cb:a6:60:20:
ea:07:52:f4:44:6a:0e:eb:68:23:16:0a:ad:60:ef:
b9:b6:b0:2f:96:32:bf:51:bc:0a:7e:32:4f:26:fc:
1c:71:5a:df:52:4d:2c:0e:f0:fd:09:e6:a4:4d:70:
72:f5:9d:c7:b9:3c:02:1a:b3:fc:42:3a:d2:2c:e5:
ff:45:15:c0:1a:08:a0:00:c6:89:94:4b:26:0d:ab:
03:9f:dc:4b:1c:2c:ac:06:3b:0a:a4:b2:f6:98:7d:
b0:eb:31:18:40:88:87:2f:c2:82:67:10:e8:db:06:
e3:1a:f4:2c:c6:f7:fa:94:7f:c0:85:27:07:73:d7:
79:3b:ce:ba:2d:46:b1:8c:59:64:2d:de:38:eb:59:
18:05:e2:ff:6d:89:6d:80:ea:fc:6a:af:ce:7c:70:
92:d8:f2:2b:d0:12:82:27:28:90:56:04:c7:c2:3c:
23:eb:ab:9d:e9:6c:98:50:ab:fa:6c:aa:c2:83:81:
71:0b:ee:4c:c7:9c:54:62:b9:92:c2:a7:be:4b:9d:
77:df:25:9c:b6:83:ec:61:fb:eb:70:4f:74:0f:22:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:48:29:35:E3:FB:0C:70:5D:93:6E:AC:F4:32:5C:A7:DB:40:E8
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:36:1d:42:c5:e8:f1:56:f4:af:b4:26:79:d5:f9:90:12:49:
d4:21:df:2b:10:31:18:09:28:a6:fb:b6:ae:d5:4f:b9:ff:94:
3f:2f:da:28:0d:f7:99:5a:87:de:a4:86:a7:89:a4:0a:f9:1c:
ef:7f:6b:52:47:fd:b1:55:c4:69:21:e3:ec:5f:e5:36:23:0c:
06:b7:6a:43:65:b6:1d:94:91:ac:22:bb:80:f1:61:85:61:0a:
2e:1e:75:19:ef:03:40:eb:60:85:40:3d:e1:b1:31:9f:bb:3c:
b9:4d:e5:f2:ce:ba:74:91:ff:8b:9a:4b:f7:0e:29:0d:9c:83:
ef:06:a1:dd:c4:d5:51:8f:61:29:1c:19:ec:66:7d:7d:df:3d:
d8:8e:74:2a:26:c3:c9:45:8f:49:d3:51:c8:08:52:b3:7e:45:
2c:d9:3c:04:8c:51:75:a8:81:25:21:2c:de:2d:cf:1b:c7:32:
f8:a4:7b:1a:f6:b0:47:97:11:23:12:69:a8:e9:ea:44:1f:6a:
35:f2:a6:25:04:23:53:9a:83:fd:03:9c:60:df:eb:c9:1d:88:
6c:42:f9:68:94:b2:da:2c:30:f2:c0:f6:63:5c:75:fd:d8:28:
d3:91:f2:93:2a:ed:4a:8b:60:69:7f:97:29:59:c0:55:36:d5:
62:b2:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:49:56 2024 by rpki-client on console-ams.rpki-client.org