Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
File: GCDxMTkWE4Tq8ToffbYOLGikOVY.mft (raw, json)
Hash identifier: DmzEUDPUxV189WkFUbP8tj798Ty30FgMGcnYPqHA+fs=
Subject key identifier: 3E:81:06:E9:1B:FF:4C:C3:4B:F8:39:93:7F:D1:0F:45:78:E3:C5:05
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Certificate issuer: /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial: 018F45A33BD3B85C97BC3C9D3BC409989A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
Manifest number: 1159
Signing time: Sat 04 May 2024 22:04:36 +0000
Manifest this update: Sat 04 May 2024 22:04:36 +0000
Manifest next update: Sun 05 May 2024 22:04:36 +0000
Files and hashes: 1: A9zYDm6opAp8-8C97xv7LWC0AFQ.roa (hash: IdI2CF0mEK2+hRV98P4pKsVshltXrrD6OsEb/lON2D8=)
2: GCDxMTkWE4Tq8ToffbYOLGikOVY.crl (hash: 0bjr+0h0vnBaBioEvX0aqATleSeGlbjwxEu/tOlHy34=)
3: cL5rqWTJuXbqojs7a-H_wPc0hVQ.roa (hash: vHBMA2C5dkk4W8b9ylrnUt8i90Tao9lgfWOH2Ch7jB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:45:a3:3b:d3:b8:5c:97:bc:3c:9d:3b:c4:09:98:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
Validity
Not Before: May 4 22:04:36 2024 GMT
Not After : May 5 22:04:36 2024 GMT
Subject: CN=3e8106e91bff4cc34bf839937fd10f4578e3c505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:af:a8:68:ba:15:d5:2f:59:4c:03:b8:e4:
4d:ba:b0:cb:db:07:58:f9:bd:08:e8:de:db:40:86:
9a:f0:92:c4:e6:a7:c6:96:06:1e:fb:62:1b:24:2b:
79:07:60:85:c1:45:61:b3:08:79:21:09:30:cd:73:
87:e2:83:8e:71:13:91:78:d2:09:8b:91:31:f0:21:
09:2f:94:ba:3b:46:59:57:6a:62:95:80:6a:92:46:
67:19:56:1a:57:25:25:f8:5a:4c:51:20:00:21:6f:
b7:1c:55:95:0f:77:52:11:75:c2:a6:d7:c7:20:be:
01:99:bd:45:25:88:cf:66:ec:7f:39:9f:b0:85:b7:
a6:ac:a8:d9:35:44:42:10:9c:13:b7:5a:75:88:c8:
9a:a7:82:39:91:93:92:77:39:90:94:a6:39:f7:84:
88:14:49:27:9e:2a:04:ed:80:b6:61:fc:20:e4:36:
65:c9:cb:2b:51:20:8f:87:08:e4:9c:85:17:06:a4:
dc:ee:30:13:16:25:4f:67:4e:92:2b:81:bd:a1:eb:
3b:59:b2:8b:ac:71:e6:73:7d:16:98:ad:d5:87:23:
2f:53:69:1e:6b:93:a4:8c:02:18:c2:79:41:f5:c4:
a8:c6:07:ae:14:e8:64:e9:45:b5:f0:50:f5:e6:4b:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:81:06:E9:1B:FF:4C:C3:4B:F8:39:93:7F:D1:0F:45:78:E3:C5:05
X509v3 Authority Key Identifier:
keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4d:07:8f:16:b1:c2:2d:15:59:7b:c8:93:c4:6b:b8:34:38:
69:54:94:17:c3:0a:85:a8:f4:22:df:80:96:37:21:40:7a:e1:
9c:55:39:eb:c1:fa:f8:46:d8:71:5a:c7:92:24:54:79:27:7d:
10:8a:e6:55:10:0c:6a:3f:59:dd:e8:d5:5e:56:69:75:8c:e0:
5e:ef:67:52:96:6d:37:73:87:a3:6f:9c:6e:d7:36:e5:d6:2e:
2d:01:4f:f5:05:3f:ed:ad:f1:b1:f2:c5:e1:16:7d:c0:dc:0f:
c2:38:38:83:df:3b:9a:bf:ef:7d:b1:85:24:df:5e:21:f8:d2:
a0:43:b1:44:e3:f4:05:1e:c5:01:bb:3c:84:e8:7f:ea:17:a3:
c3:ed:7d:5e:58:c7:16:94:7e:a8:72:3a:fd:ca:cd:af:79:85:
72:b9:98:27:77:d6:5a:3f:4a:5f:a1:12:d1:0a:e1:87:3b:53:
a4:aa:6a:6b:67:2f:57:99:55:c0:6a:06:5b:6b:37:9e:cc:d5:
e1:a8:2a:c8:09:c5:c0:47:79:99:0a:06:69:ae:d6:d3:86:69:
58:e5:f2:2b:a9:d5:93:87:d5:64:a3:0c:a7:fb:65:a5:89:10:
dd:a7:5c:46:07:1b:b2:ad:25:52:5b:79:6e:aa:1c:cf:d6:88:
03:a1:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:26:56 2024 by rpki-client on console-ams.rpki-client.org