Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: du//Og8SzqOJLXgCqlUq/2ANsLWWBysNUZ35zmEa5oo=
Subject key identifier: FD:EC:26:A6:1E:1D:0A:BD:F3:44:84:9B:58:89:6D:9E:66:78:83:CF
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 018F4F4A159ABCBC146C5351B7554B450ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 1158
Signing time: Mon 06 May 2024 19:03:26 +0000
Manifest this update: Mon 06 May 2024 19:03:26 +0000
Manifest next update: Tue 07 May 2024 19:03:26 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: QwtZ649SD5M1kaf3myhTDpZpAVUIHHhduUeJ0d8qIFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:4a:15:9a:bc:bc:14:6c:53:51:b7:55:4b:45:0a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: May 6 19:03:26 2024 GMT
Not After : May 7 19:03:26 2024 GMT
Subject: CN=fdec26a61e1d0abdf344849b58896d9e667883cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:f9:66:d1:b1:0a:09:b0:4a:a6:ef:61:bd:
74:c4:45:96:d2:38:a6:9a:09:b3:46:ce:61:a9:4c:
3d:a6:18:ae:b2:60:36:e0:c8:2d:ac:d9:f0:1b:43:
51:ea:5b:ef:b0:62:06:85:b1:fa:b7:02:43:37:ff:
76:9f:cd:f8:a3:67:df:d7:fc:25:ad:21:1e:9c:8f:
3b:20:e1:8a:a9:5c:aa:82:76:56:09:ca:b2:d4:fc:
e1:d7:95:c7:5b:dc:b2:22:d3:f0:0b:eb:e6:a9:ca:
c4:7f:0c:74:fa:b4:1d:60:20:1f:79:18:83:16:97:
a5:3e:ff:cb:d8:32:97:12:21:90:7f:8c:d6:bc:00:
68:92:8f:50:2a:4b:eb:20:22:4c:c5:2b:5f:ba:bf:
f7:c3:73:b2:b9:35:76:c1:fa:9e:8b:ad:da:eb:dd:
f3:74:1e:cf:ba:e2:e5:06:5a:42:fc:b2:a4:bc:8b:
bc:d7:ff:ea:5e:07:e7:84:29:dd:00:60:19:be:eb:
3b:10:18:7d:e9:d0:e6:7f:78:cd:33:ac:70:e3:6c:
6b:fd:4e:33:04:39:b3:67:2f:ea:44:c6:b9:f7:07:
a8:3c:8f:c9:9d:ce:2d:a7:63:e9:f0:12:f4:f2:95:
aa:56:9f:05:c7:42:79:07:c8:f4:da:78:e0:8d:42:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EC:26:A6:1E:1D:0A:BD:F3:44:84:9B:58:89:6D:9E:66:78:83:CF
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6f:18:b6:f7:d6:dc:e2:20:bc:e3:7a:9e:fd:ac:c5:fd:9b:
11:8e:bc:8f:0e:e1:32:6f:b4:8f:37:ef:ce:3b:ae:61:c5:79:
93:31:36:f6:47:bc:23:1f:64:25:03:c8:9c:91:6f:0c:2a:cb:
b5:4f:40:95:41:3d:f6:1b:7d:ba:63:73:fa:e3:92:7e:bf:27:
b4:c2:72:71:d5:0d:3f:f7:6c:e8:7d:80:20:c4:37:cc:28:dc:
d0:5e:99:ad:fe:9c:c1:8a:58:6e:31:09:5e:50:ef:40:a6:69:
15:74:08:86:c1:74:20:6f:98:f7:ce:9e:c5:2c:d8:fd:80:ff:
ef:fe:fa:50:56:b2:c1:32:4c:0b:57:74:27:6b:8f:0f:8c:d7:
b8:bd:e3:31:ec:b9:09:98:b1:67:27:1a:eb:07:58:04:59:e4:
25:ca:0b:62:86:08:83:00:9b:ee:0b:c8:c2:30:7c:24:cb:4a:
d2:1c:e1:62:d6:08:a8:50:e7:02:69:e4:b9:0a:d2:83:2f:17:
ac:e5:b1:be:c9:f7:b1:ab:18:b4:1e:0f:70:db:06:b8:92:c7:
0a:ef:bf:68:03:ce:ca:a4:db:1d:dd:f8:cc:d8:1a:a3:b0:34:
4a:1c:51:3c:36:53:8f:bb:4a:e8:dc:66:ba:71:b1:63:51:90:
73:d8:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:55:17 2024 by rpki-client on console-fra.rpki-client.org