Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: Y/92pJkYPeh9wu+bpm1csXDmhr7x6Oo7Y+5plJLzEk4=
Subject key identifier: 1B:B1:CE:A6:E7:56:3E:5B:17:F1:71:33:7D:D7:F5:91:9A:FB:A6:7E
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 018F32BE04FC3FD71855DC3BBEEEA67D5249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 114C
Signing time: Wed 01 May 2024 06:01:04 +0000
Manifest this update: Wed 01 May 2024 06:01:04 +0000
Manifest next update: Thu 02 May 2024 06:01:04 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: bGryrk6kUl/1RJGrKCuy9IZv6jck9iKxFB9GXNbIwGQ=)
2: pss5HYZdpDN4k9rTEeDGA5BAnFk.roa (hash: /DEkHNBluODjbtav9Ip4F9AkCMhXOGxyg0XJ+vjtOdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:be:04:fc:3f:d7:18:55:dc:3b:be:ee:a6:7d:52:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: May 1 06:01:04 2024 GMT
Not After : May 2 06:01:04 2024 GMT
Subject: CN=1bb1cea6e7563e5b17f171337dd7f5919afba67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:9e:3b:62:6b:94:b4:42:66:28:e3:56:36:
35:3c:09:b8:4b:b2:29:1f:93:cc:cc:17:6b:9c:ee:
fd:6f:f4:b2:42:62:8e:1c:47:2e:84:d0:b8:c7:16:
5c:e9:3f:c5:d0:fd:00:94:ea:c7:47:0c:48:cb:3e:
c2:d4:bc:de:dd:67:c6:df:23:f8:97:6b:aa:95:7a:
87:c9:3c:15:30:2e:b9:60:30:55:0c:02:ce:e7:51:
b7:e6:a0:ed:69:d8:80:c4:e4:f9:47:e1:a3:94:85:
99:93:fc:79:db:92:5c:08:64:77:e5:54:2c:14:b2:
43:b6:2b:3e:16:6d:e0:9d:56:a4:02:e2:55:ca:2a:
2f:a1:3f:2d:cf:28:2b:7f:05:4a:8f:06:35:0e:da:
39:6b:88:91:45:78:09:50:6c:a6:ab:bf:4f:86:cf:
37:8e:e7:7d:1d:76:9f:d3:02:e1:fb:f4:f5:cb:6d:
e9:ac:9c:fd:30:39:ac:db:0f:bd:98:e2:ce:d0:35:
81:ac:59:a2:4c:55:05:5f:90:d2:87:35:d1:a7:0a:
83:9d:cd:b6:f3:21:57:ec:91:76:2e:c8:47:38:ee:
cf:ee:96:3b:5f:99:54:2c:0c:5c:b2:32:2c:6d:bc:
35:bf:c9:27:fb:90:c2:22:ca:03:cf:5b:6a:22:e6:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:CE:A6:E7:56:3E:5B:17:F1:71:33:7D:D7:F5:91:9A:FB:A6:7E
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ff:0f:d1:b0:e3:75:61:ca:ec:a0:ff:de:24:40:ed:56:b5:
fa:d9:0b:db:81:22:02:7b:89:6b:c6:dc:2e:58:51:bc:07:03:
14:3c:8c:7c:3d:33:28:83:34:7a:8e:9d:c9:1c:38:67:2a:70:
cc:ae:a4:15:17:34:bb:56:f4:72:58:c4:ac:be:31:36:91:2a:
7b:a7:26:b8:3f:b2:8a:9c:09:63:de:93:69:ee:93:08:e3:61:
89:91:13:2b:66:fa:15:c2:ec:c3:55:6b:80:8a:d3:dd:7c:a4:
3c:4f:b7:34:75:c2:3e:2c:03:97:c0:63:2a:a3:f2:d7:5a:6b:
a1:c4:b6:95:b1:6d:3b:73:50:a1:78:87:61:2b:f9:ba:3a:1c:
55:ff:4d:c8:4d:5e:73:3b:84:c1:39:6f:d1:88:95:da:9b:a2:
57:40:7f:01:e9:dd:73:f2:1e:8d:9f:81:53:6a:a9:2b:b3:19:
52:07:1f:04:84:ee:c1:4f:e1:14:1e:2a:bc:7d:c5:88:dc:f4:
4f:96:11:c2:b3:ab:bf:d4:e9:9a:b1:77:e5:a3:1d:44:57:b5:
9f:cf:96:fd:19:21:c2:2b:63:73:91:3f:b0:dd:5c:3d:7b:6d:
34:ca:7d:e6:18:58:fb:d9:d3:87:10:2e:e8:be:a6:97:24:5d:
ba:e5:26:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 11:18:50 2024 by rpki-client on console-ams.rpki-client.org