Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: CD1swmYNwyXDvciFTOtjK3GgtMcasCrIFiJ1hOIaJpU=
Subject key identifier: 90:9C:E5:EC:4B:41:0E:A9:33:BB:9A:04:C9:F1:C7:05:2C:E7:92:1A
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 018F885B34453E9F8D4D43045444259406F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 0123
Signing time: Fri 17 May 2024 21:00:29 +0000
Manifest this update: Fri 17 May 2024 21:00:29 +0000
Manifest next update: Sat 18 May 2024 21:00:29 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: ZtkPTFeQ2xcTn1sh8rOJhU1LwJ14OxmQmH9VE4cEaII=)
2: r4oivauDHyhp3b5JRX56Qw6FR5k.roa (hash: tzb+g0KTKYZzOBz20G9iJCJV9MqpOWcULAa0LBfriKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5b:34:45:3e:9f:8d:4d:43:04:54:44:25:94:06:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: May 17 21:00:29 2024 GMT
Not After : May 18 21:00:29 2024 GMT
Subject: CN=909ce5ec4b410ea933bb9a04c9f1c7052ce7921a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:c7:a5:d1:91:a9:86:5b:a7:64:4a:5f:6f:
41:66:48:01:c9:9c:09:8a:ac:f6:db:ce:37:c5:66:
f5:0e:6f:e0:66:5a:fd:db:62:96:a0:99:6b:a4:f8:
d8:a1:c6:d7:9f:c8:3c:9e:c1:0c:0f:89:8a:3e:7a:
89:6a:1d:69:4c:a6:61:49:ed:47:f0:49:b5:a4:ac:
bc:c1:da:47:ed:33:1d:25:5e:1b:57:e1:58:66:e3:
3a:fa:68:b5:45:dc:a0:22:99:91:13:cb:3a:0c:2e:
be:5a:38:95:26:6d:62:e3:1c:5f:9b:a9:75:44:c9:
cd:66:fb:81:95:80:38:5c:dc:b1:02:0f:81:a6:a8:
e3:25:c2:ec:e2:8c:9a:ee:89:ff:1e:ab:71:09:d7:
06:09:c6:fe:fd:6d:60:a4:70:28:35:79:cd:b9:84:
0e:7e:c2:9f:a4:84:37:a1:2a:56:f5:d7:0f:33:8f:
8d:04:8a:cb:7f:9d:55:e1:5a:57:6f:b9:f2:3d:e6:
43:f0:a0:64:db:0c:b2:35:5b:d4:a3:f5:4a:33:73:
ae:cd:ce:40:06:5b:4c:a8:ea:0a:62:52:47:6a:dc:
2c:17:bb:42:62:18:1e:22:76:c2:3b:f2:4c:5a:a7:
dd:ae:a5:cc:e1:fc:da:1f:5e:aa:70:74:01:6b:c5:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:E5:EC:4B:41:0E:A9:33:BB:9A:04:C9:F1:C7:05:2C:E7:92:1A
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:d9:65:82:7e:a8:c8:ff:49:a4:35:31:b8:84:55:d1:ea:
c0:eb:46:18:5b:01:dc:06:ee:c3:fd:c2:4e:b2:74:48:bc:41:
1e:c4:ed:d5:ec:9d:61:88:ba:0e:e9:f2:85:20:cb:67:99:84:
4a:24:b0:73:6a:5b:2d:b4:f1:97:1e:da:bb:32:d1:a4:9f:a8:
d0:fa:30:1d:0b:55:c1:46:df:21:9e:10:64:58:87:98:71:64:
6c:27:ae:a2:66:33:13:7b:b5:8b:3f:c6:dc:2a:a5:b7:45:65:
a9:e8:a9:9b:a3:68:d5:60:c1:ef:99:2c:61:9e:15:73:36:a2:
a9:97:1b:47:c5:2d:b7:dc:1b:ed:af:65:e1:b2:29:aa:29:dd:
cd:65:98:7d:63:e2:3f:32:8b:f2:c0:f6:f7:d0:45:bf:21:fb:
34:2d:92:3d:06:6b:36:4a:ca:68:d7:43:fb:b4:62:aa:3f:32:
1c:b3:e6:0d:29:f4:3b:cd:27:55:5b:b0:57:80:dd:94:04:f6:
27:fe:02:7d:78:29:16:5d:13:84:e4:5a:c7:41:f1:ce:0c:a3:
d8:9d:e2:3a:8c:2b:ad:eb:00:ee:75:9e:5d:0a:93:93:ac:8f:
fd:58:3c:7d:8c:d5:5f:0d:08:88:fb:90:b6:ae:64:15:0e:96:
24:f3:e7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:06:16 2024 by rpki-client on console-ams.rpki-client.org