Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: rBCJ42Yd+1mMY9s1X1HABRpRVB5XIVvL3OFFg2IB39k=
Subject key identifier: 86:B5:D1:3E:E7:F9:5D:C4:D2:9A:A1:3A:E4:18:B8:40:06:C0:EF:50
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 018F88C8BFB3E5CDC7169EBAF2EEC960DD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 1032
Signing time: Fri 17 May 2024 23:00:08 +0000
Manifest this update: Fri 17 May 2024 23:00:08 +0000
Manifest next update: Sat 18 May 2024 23:00:08 +0000
Files and hashes: 1: TL9ZqPWTTTuSwQVc63fFFWUBLSI.roa (hash: Fc9YlAyqnzBovpiBxm+TI89JjASpNpVUA9t+X+TuMkI=)
2: X7KqRAfmZwA9ZhYBLwxabn_6BrM.roa (hash: HsezpaYn7VytGuqUIYiiBt7PCZMnIhvTiLN7nCKwqqY=)
3: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: kh2GRQLd9NVkXQ8rwkdLzBTMS6ISO5DMxHlpklULXGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:c8:bf:b3:e5:cd:c7:16:9e:ba:f2:ee:c9:60:dd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: May 17 23:00:08 2024 GMT
Not After : May 18 23:00:08 2024 GMT
Subject: CN=86b5d13ee7f95dc4d29aa13ae418b84006c0ef50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:16:3b:7f:b6:29:23:d5:b9:b5:77:60:af:
34:4b:b4:74:c7:44:1b:6b:7b:f6:b5:f4:8d:65:d1:
57:6e:c5:c2:d8:97:59:fc:4e:84:42:f8:3b:8a:c9:
79:74:f0:32:d9:41:8a:1b:7b:39:91:49:c2:7a:e9:
f3:f5:4f:e5:d0:4e:a2:2d:a8:cf:08:54:24:6b:67:
e1:af:1d:cd:d9:f6:f6:a0:61:86:10:08:72:9c:89:
0b:f7:cb:86:48:46:b2:31:95:44:47:36:be:b5:5f:
5a:0f:fd:7e:65:65:fc:46:85:ae:4a:c0:98:e0:ed:
e6:57:17:82:6f:ed:49:ca:17:dd:57:c7:25:29:c7:
fa:4e:8b:d2:97:26:3f:47:e6:3e:0a:2f:a4:59:c4:
9a:52:7f:f2:e2:e7:d2:2a:f1:91:bb:19:2e:30:27:
75:32:32:18:d3:46:f5:7d:8e:6b:5b:f2:63:f2:30:
f7:2e:11:a7:b3:f2:3c:a7:f7:41:cc:ce:99:33:3e:
1c:e9:78:0e:5f:28:53:23:32:d4:b7:e8:18:0e:33:
6e:00:ad:d0:2a:ba:75:74:f6:0a:4c:0e:27:80:01:
8a:f6:47:40:9b:4e:3d:53:ae:dd:7f:80:e3:46:b8:
46:6d:fe:b8:10:7e:06:66:03:31:9f:51:73:5e:86:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B5:D1:3E:E7:F9:5D:C4:D2:9A:A1:3A:E4:18:B8:40:06:C0:EF:50
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:56:be:7b:09:82:65:02:f8:04:53:fe:71:c9:03:bb:a4:10:
56:b2:19:8c:17:b9:b7:dc:01:68:87:2d:18:03:22:65:86:2f:
23:f9:e4:56:00:5b:9f:9b:2c:a3:54:90:f8:fb:5f:f6:5b:24:
84:62:84:a7:0c:09:a1:fb:cd:4a:1e:1e:2e:ef:89:a4:15:54:
ff:55:37:d7:45:3e:20:8c:ff:3a:8d:b2:30:64:b9:42:60:ca:
ec:ed:7d:83:44:e4:f7:d9:f7:1f:ee:25:84:97:0d:58:6e:83:
dd:82:5c:a3:6a:24:95:91:c7:8a:96:72:9b:d6:13:97:07:f7:
57:81:0b:5a:59:e2:2b:b7:60:2f:a6:f0:0f:41:34:6e:6e:7f:
7a:ea:ff:67:71:6e:15:39:0b:dd:74:de:9a:45:9e:8a:19:4c:
92:7a:b5:20:94:6e:49:eb:28:40:2e:c2:14:34:03:26:79:a0:
88:4a:ee:24:8e:cd:e7:5b:15:51:34:d2:b3:c1:09:a8:c7:c2:
6a:ef:3f:91:22:0d:c4:08:53:bc:30:dc:79:5f:2d:25:7c:ab:
73:e2:98:2a:76:fe:20:43:a9:10:33:79:3c:7c:f1:52:9e:43:
ba:d8:c8:3b:88:fc:10:d9:ee:b2:30:3b:f7:f8:46:e9:9f:c6:
3d:f8:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:33:43 2024 by rpki-client on console-fra.rpki-client.org