Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: /mgJw1PztSOW2qV6NrDGNX8X0yb9uem5itY5fHVp6H4=
Subject key identifier: D6:D4:6D:70:8B:0A:EA:20:A0:4C:9F:E5:18:75:85:13:A8:07:2C:91
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 018F9797B64CC697D93C111EBA6335E76B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0866
Signing time: Mon 20 May 2024 20:00:53 +0000
Manifest this update: Mon 20 May 2024 20:00:53 +0000
Manifest next update: Tue 21 May 2024 20:00:53 +0000
Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: OA1ymHEpr5hy+fl9rOV+oi3PTGkBufwbl0D17kUK5O4=)
2: wfGb-cRNLEWEI5RPtp75Jxfqy84.roa (hash: x/WzJWW3Fa3LwBmy+oMjhW9cxXLD0nASVbL6eEuTFl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:97:97:b6:4c:c6:97:d9:3c:11:1e:ba:63:35:e7:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: May 20 20:00:53 2024 GMT
Not After : May 21 20:00:53 2024 GMT
Subject: CN=d6d46d708b0aea20a04c9fe518758513a8072c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:e3:d8:a6:cb:11:9f:f9:47:9d:67:3a:aa:
f5:54:b2:21:12:4f:e1:30:db:ee:8e:d0:5f:9f:eb:
1f:36:d9:08:ee:fb:61:38:69:63:a3:36:d4:f5:bf:
fc:da:60:1f:14:70:47:ff:18:e2:af:5a:5b:0e:48:
ae:62:08:99:36:d6:21:8a:52:b4:34:2e:6c:22:75:
ee:96:3d:0b:b3:f2:a7:a1:91:35:a7:d8:98:30:0b:
fc:38:bd:39:41:6d:75:bc:80:3e:f3:36:71:d4:f0:
ea:a2:3c:01:73:11:76:bd:e9:e9:59:31:89:7f:75:
5a:eb:87:29:76:e6:b4:a9:14:6a:24:83:45:94:3f:
c7:09:e2:d8:e6:0f:fd:30:cd:de:ce:ce:a2:74:4b:
cc:41:59:26:2c:8e:58:91:35:18:a6:91:da:27:4c:
f3:59:12:08:10:68:a7:89:eb:4b:80:f1:9a:8a:42:
3b:56:70:dc:b3:49:20:ab:71:0a:aa:63:b8:28:16:
af:9b:54:0f:00:9f:f0:92:95:a6:6f:ea:94:cb:3d:
f2:dc:b5:9e:2d:84:2a:a6:03:05:67:73:c6:4e:55:
7d:26:d3:f7:ce:b6:e8:4d:07:e6:ec:65:41:67:66:
2a:23:70:b8:b3:16:3a:86:fd:5f:96:b2:b6:48:c3:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:6D:70:8B:0A:EA:20:A0:4C:9F:E5:18:75:85:13:A8:07:2C:91
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5b:c8:0f:9f:1c:93:77:d7:61:85:5c:14:67:7f:6c:a5:1c:
c2:d9:f7:09:fc:32:69:26:81:3e:db:99:88:c8:0f:1c:b4:e1:
29:c2:d8:e9:9c:4a:ac:d3:48:ca:af:49:e4:0e:09:02:ad:65:
38:bf:db:a9:20:ac:f7:d8:eb:32:3a:85:e5:80:43:3a:b6:fe:
6a:0c:d1:a9:a7:09:2f:ac:89:32:a5:73:0b:ad:a2:99:36:34:
20:82:ea:9f:71:85:a2:1b:3b:c8:82:04:9a:6f:36:5a:75:cb:
5e:d3:37:8b:1e:26:20:06:bb:15:9a:54:77:4f:15:ee:f7:dd:
d5:0d:7d:73:01:f3:5d:7e:5f:29:e4:9b:aa:62:19:a5:ca:4a:
72:75:d1:19:de:61:e6:3c:08:ae:35:6d:79:ca:c1:f4:8d:48:
fb:25:e0:b7:e0:30:24:62:ec:7b:fa:24:37:15:bf:10:9a:bb:
e4:96:e1:5d:70:eb:63:fc:08:ac:87:8d:a0:3c:3e:38:b9:2c:
61:db:62:30:7a:f5:49:1f:ac:a6:7a:1a:cf:41:9e:00:7f:50:
8c:33:62:55:32:58:09:f9:a8:d7:8d:10:87:e9:58:93:62:76:
29:47:fa:5d:e4:8b:9d:07:01:22:4d:8d:5c:6b:2b:97:12:b5:
fa:99:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:46:10 2024 by rpki-client on console-fra.rpki-client.org