Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: pcD5cjoImw4WWPgx2x6YnPvNQudWQJjiv5ao13+s0lQ=
Subject key identifier: AC:46:C2:DF:C3:57:53:90:66:0E:3B:39:2B:4E:9D:11:27:A8:0A:01
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 018F362F4EFB80F7100F1E7E5E4555763CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 114F
Signing time: Wed 01 May 2024 22:03:41 +0000
Manifest this update: Wed 01 May 2024 22:03:41 +0000
Manifest next update: Thu 02 May 2024 22:03:41 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: zS+yDtG3LU6SoxxM2KI/gE5nXND7j/5AtZH02kaDhjc=)
2: Sj4x-jx2NkpR_FvYMq2b1VJq6jI.roa (hash: iDiqIcMV9s5c00WFKSC9SznzV+UQFH0XLV/888kIVdE=)
3: meh0LuGBb0m9EsMcFFLK03GRUC8.roa (hash: El/IcNkav/Ja+ZNg49+Mw+5al/Ar6FDMcW1Yv6/ukqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:2f:4e:fb:80:f7:10:0f:1e:7e:5e:45:55:76:3c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: May 1 22:03:41 2024 GMT
Not After : May 2 22:03:41 2024 GMT
Subject: CN=ac46c2dfc3575390660e3b392b4e9d1127a80a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:b5:97:3f:79:5d:6a:e5:3c:bb:b4:27:c7:
47:03:dd:20:a2:d5:d6:bd:24:e4:9e:0f:e2:e6:7b:
62:ef:91:b8:e8:52:f4:3c:60:48:a7:b4:aa:6a:2d:
0d:31:1c:56:fa:9e:d9:92:34:20:d3:11:7a:85:30:
e5:84:d6:ac:d2:38:46:83:b7:b0:33:ae:ae:18:12:
43:f7:1d:38:89:e9:c6:02:ce:0f:88:56:26:ba:94:
86:62:0f:85:90:27:2f:ee:92:e6:ba:41:25:d3:ac:
8a:8b:8a:7c:6b:cb:32:cd:25:5e:00:66:70:8b:69:
6a:7a:55:b8:28:94:e2:db:47:65:c1:63:d8:d8:d1:
59:4c:9b:30:40:89:13:ef:3e:65:3a:fc:17:c1:d4:
c2:ce:fa:d3:7a:84:25:c3:d6:af:a9:c5:22:2f:da:
bd:0e:d7:16:02:06:d5:a2:28:a9:08:7b:09:43:13:
c6:93:38:13:32:33:70:1c:56:4d:5f:a1:29:c7:d8:
f7:1f:77:df:e5:ff:99:b5:f4:5a:11:85:9e:82:f7:
16:19:97:a3:c4:29:43:b6:d8:36:e8:17:a2:79:c4:
3b:b7:cf:97:df:fe:42:c3:9c:5c:14:0d:3f:95:95:
eb:b1:6d:48:08:65:09:77:69:1a:8c:0f:35:00:25:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:46:C2:DF:C3:57:53:90:66:0E:3B:39:2B:4E:9D:11:27:A8:0A:01
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bc:74:24:d4:9b:12:0b:75:fb:cb:f0:6c:30:6e:65:c4:c8:
c6:ff:9b:5f:b8:c8:6c:11:6e:59:86:59:70:b2:22:f9:9f:7e:
9c:1f:4d:15:79:2c:d2:ab:d8:3d:b8:db:82:71:f9:6d:66:1f:
23:0b:fb:83:33:bc:45:d7:58:8f:e1:91:97:8d:01:e3:b9:a3:
c9:70:84:b7:2d:e2:eb:b6:01:01:27:5f:36:75:53:7c:a5:cf:
40:19:52:7a:0d:78:fc:3b:12:0a:3f:b5:ab:fe:ac:ec:ad:82:
37:7c:99:5f:80:65:7a:bd:45:f1:16:e2:eb:a9:94:d2:02:8a:
74:ef:f0:ec:0f:f6:93:f6:a1:bd:ea:a7:88:20:d0:d0:f6:a2:
0f:b9:36:5e:09:9f:13:b1:a8:bf:6d:ad:c6:ea:50:5f:c4:33:
c7:43:17:01:2a:1b:3d:07:aa:f9:d0:3e:96:cc:0e:b9:54:d2:
61:af:10:65:b1:83:d0:f5:f9:eb:c5:16:47:4e:d1:13:f7:ce:
cd:fd:3c:90:45:d9:9d:3b:6b:c6:ac:f9:b0:19:4f:7c:8c:c1:
3c:da:58:36:ee:e0:37:32:de:aa:5b:fb:01:c0:b0:4e:f7:e9:
c5:f5:fc:5f:91:7e:fb:cc:48:bd:1f:7c:d2:89:3c:b2:68:8a:
61:9b:e9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:01:05 2024 by rpki-client on console-fra.rpki-client.org