Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft
File: GvFqPPgRZyGvrYweWz6DopWc65k.mft (raw, json)
Hash identifier: l4f1L4o+BPXp38a2OAeVkJKV68TBRaUB80/iFm3qrL0=
Subject key identifier: 5E:2C:EB:80:40:49:3C:C8:2A:A1:23:D1:14:9E:85:00:FE:4F:46:B5
Authority key identifier: 1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99
Certificate issuer: /CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
Certificate serial: 018F4C7E16F2C3247C4491730CB831D27B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft
Manifest number: 0937
Signing time: Mon 06 May 2024 06:01:22 +0000
Manifest this update: Mon 06 May 2024 06:01:22 +0000
Manifest next update: Tue 07 May 2024 06:01:22 +0000
Files and hashes: 1: 3M8ohd4vZsoKlPACyKdzUGtkgrU.roa (hash: NriHifjaJM/ZNQ2f3LLNISQiISu1fzsqY4Jv31tLHmo=)
2: GvFqPPgRZyGvrYweWz6DopWc65k.crl (hash: JgMmizWpPLM0drOSummgK38ugrLDumBOvBtKF6GfwUA=)
3: XIayUu2C62hwdRNhnKrB9VYomZ0.roa (hash: kuV/UXmInbcFbXhlPFftVp7zRawdtjmfM+9dJArQ0jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:7e:16:f2:c3:24:7c:44:91:73:0c:b8:31:d2:7b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
Validity
Not Before: May 6 06:01:22 2024 GMT
Not After : May 7 06:01:22 2024 GMT
Subject: CN=5e2ceb8040493cc82aa123d1149e8500fe4f46b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:3e:1a:c6:c6:07:1d:7b:a2:ad:f1:f6:08:
5e:d2:db:b5:9c:d9:b6:27:b5:39:5f:32:79:0a:b0:
31:78:e8:61:db:69:28:df:49:0c:7c:73:2f:2e:c7:
1b:5d:cf:0a:de:c7:df:9d:f6:b2:7f:c6:53:19:a1:
54:e4:54:56:18:55:ae:8d:04:e4:bf:98:90:7e:fb:
cc:e6:82:ef:16:20:e6:36:65:75:c5:14:30:e4:49:
5e:8f:bc:e6:a1:4f:be:45:06:44:04:20:c8:7f:90:
6b:9b:62:53:bb:8e:74:42:51:16:2f:52:71:56:c8:
fc:ee:58:84:7b:14:ea:67:ee:59:64:08:97:8a:b0:
c8:36:37:33:26:c8:20:55:62:65:d6:4c:32:71:45:
98:38:14:e2:7a:f8:86:26:66:90:3d:45:a0:c9:95:
85:d0:a8:9f:eb:6f:37:1c:3c:38:28:d9:2d:23:ec:
00:d6:1b:30:30:f9:db:ca:7a:0d:b7:20:e1:57:2e:
a8:57:f5:ef:53:e0:38:e7:a1:44:9b:68:17:07:73:
dd:1a:41:16:12:e1:92:08:06:45:d5:5a:e3:69:11:
e9:dc:e7:f1:c4:c2:a0:7a:f7:e8:a8:b9:1e:b5:49:
16:aa:21:fc:0e:96:0b:d2:07:46:3f:28:b7:e1:d0:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:EB:80:40:49:3C:C8:2A:A1:23:D1:14:9E:85:00:FE:4F:46:B5
X509v3 Authority Key Identifier:
keyid:1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c7:55:6c:63:1d:75:96:49:c4:d2:a6:6b:de:24:93:41:bd:
be:8a:35:0b:a7:62:bc:e5:8a:11:83:31:20:02:47:b2:3d:50:
a0:9f:8a:21:5a:4b:da:b6:49:cb:c9:6e:8b:a5:de:0e:76:34:
51:44:19:e4:d5:0a:63:3a:2f:70:34:53:bf:cc:f5:d5:d1:47:
b6:5f:0d:a5:36:d9:b5:8e:af:fd:d1:19:a0:4f:b9:01:49:b4:
d0:70:fb:3b:2d:9f:ad:53:11:e9:57:ce:6c:23:58:4e:be:dd:
5b:33:6d:bb:82:31:4c:9d:bf:b1:45:4d:5b:71:33:c5:d1:ae:
7e:e8:26:39:88:b8:9b:0d:1e:e6:96:a6:91:87:9c:7e:32:4c:
82:cf:c3:32:a4:5c:67:76:40:a3:77:ba:b6:b6:eb:03:c4:6a:
3d:e5:ce:ae:79:fa:17:7d:80:7e:40:87:f7:5e:1e:3a:84:68:
55:2d:68:98:56:75:0d:ec:7f:1e:4a:08:a5:88:3d:11:14:52:
4f:92:3d:5b:25:80:63:4b:44:48:2c:b7:6c:97:60:e2:46:d7:
11:4d:e5:cc:65:64:cb:80:f9:7e:15:21:9a:fe:c8:b4:8e:7f:
b0:91:a5:8c:8d:50:17:e5:80:63:06:70:42:a6:b0:ac:6d:62:
24:0b:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:43:14 2024 by rpki-client on console-fra.rpki-client.org