Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: sM/kqOJr93Tylk1oc69IyGklei5QVa8Ln79ea1xrnOM=
Subject key identifier: 8D:0A:DB:68:F3:CD:AF:66:47:BC:98:10:0F:18:BE:CE:1F:00:CF:0F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01935199E00183C1A54290922D5B5625DA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 0F37
Signing time: Fri 22 Nov 2024 02:00:59 +0000
Manifest this update: Fri 22 Nov 2024 02:00:59 +0000
Manifest next update: Sat 23 Nov 2024 02:00:59 +0000
Files and hashes: 1: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Hqlif3QdX/iyf8RT/f5LujzTCMA/db0HdKCMEzFuh1w=)
2: AEC3PE3CXR7unuU6F3-ErDBM7B0.roa (hash: x26U958YPJa94acmbuz+0UtcETiijPM7ZmClTqtuaHc=)
3: EJEBVm0-sOs69eH4qDrvfHjjvk8.roa (hash: A8mrYzSxZMj4P+OpDfEP8dGiHqExKWX01Tpz7aAzpA8=)
4: LJsV-4QlL56d4POSXrVXJXSk_ao.roa (hash: BS6HuBR0+f2Odi3AlFHUXIiMsk5/HpHkfeOMKprmxmY=)
5: M6-7-i-NIoEs0ICl5g8pYJCyo8k.roa (hash: lIp+LRUk28yuZ3YLsQ2SIs73xwfU06/pKi3c2Ra/3co=)
6: ciaSYc0LcRpdH6T6j5I5ioMz7x8.roa (hash: e++whl1SevgeQuBpZTtbPTbGs5n2jRfXW9MiVGGiihY=)
7: pdlg1ulWTpFSh8iV325ahxkQvQE.roa (hash: XuRAh1JadCZOeEo3asEtFdr+bc5xnfRAVP+9Dqqdw38=)
8: rIJf35B2nQs5l3Rg7XQpSiFlB8k.roa (hash: 1dhDE92rGSfJ3ppakpxVc1t4WlD1d+516A2f6aS8FiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:e0:01:83:c1:a5:42:90:92:2d:5b:56:25:da:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Nov 22 02:00:59 2024 GMT
Not After : Nov 23 02:00:59 2024 GMT
Subject: CN=8d0adb68f3cdaf6647bc98100f18bece1f00cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:2d:ca:fc:60:12:ed:43:5f:b3:83:9e:45:
f9:26:ac:a7:1b:22:a8:e7:e1:79:be:29:6e:29:36:
a5:52:34:fe:8f:12:97:bc:62:e2:cf:3d:11:57:30:
68:a8:96:0d:93:9a:4c:63:06:60:53:db:ba:86:52:
23:09:70:1c:a7:b1:94:84:11:c3:ca:4b:c0:e0:dd:
13:42:4c:bc:a8:a7:39:4b:fe:c2:d8:ad:de:b9:a2:
bc:3f:51:fe:64:e3:89:cd:36:1e:aa:0c:44:99:88:
ea:ff:57:77:40:78:1b:8f:58:f4:93:90:ab:1e:ad:
98:bd:43:4b:ca:2c:cd:c5:d6:0e:84:11:98:d1:23:
d2:9d:6b:d3:80:3b:7f:4c:36:ae:48:85:78:02:f8:
13:16:77:f2:8f:b9:10:19:a1:38:13:01:c2:a6:c3:
a4:80:46:f9:39:38:0a:47:fb:51:d9:85:1d:2e:11:
c5:05:59:24:d2:8e:bc:37:7b:eb:67:53:3d:5a:ed:
61:82:dc:3a:e2:61:7c:25:7b:9b:91:bc:d5:c7:3e:
c6:82:96:6e:05:3b:c5:ed:41:4b:73:a0:39:12:61:
74:3f:71:eb:64:12:01:b5:03:bd:3c:f7:86:c7:3a:
49:5c:34:7c:ef:61:e1:5d:bf:42:7f:d4:13:09:ba:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:DB:68:F3:CD:AF:66:47:BC:98:10:0F:18:BE:CE:1F:00:CF:0F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c0:5b:88:3a:ff:8b:af:c2:91:e3:4e:f0:53:ad:67:b7:73:
d9:87:c2:9c:83:3d:6d:3a:27:61:19:45:0a:76:96:36:3c:7a:
71:41:6e:f7:fd:75:72:de:a7:ea:ef:f1:b3:32:a9:f8:d3:81:
03:42:ae:ca:0f:fe:59:54:ee:8d:33:c0:1f:f5:62:1a:cf:10:
4a:4b:ef:04:dc:29:bd:d5:56:2b:40:d4:df:df:bb:b1:7d:1b:
c6:24:96:38:6f:22:ea:34:ed:fa:82:9a:a0:f4:40:81:75:6a:
1d:cc:41:41:bd:45:da:1c:9f:5e:b9:64:e4:f7:34:d0:3a:21:
db:ba:69:6a:32:52:23:0b:8d:6d:78:5b:44:aa:c6:5f:87:3d:
e9:81:0b:90:a4:d5:32:57:be:49:33:0c:d6:5b:5f:10:c5:ee:
6f:f5:92:5d:b3:6c:54:0a:29:12:49:90:ac:f0:f8:ed:03:9a:
f8:c3:7d:7e:e3:53:a3:55:6f:2a:1f:50:2a:94:5d:f7:56:0c:
b7:18:a0:d6:e2:0e:02:ba:84:05:c1:81:0d:0f:69:b3:56:2c:
e9:f3:b9:00:a0:32:81:18:16:e0:d0:7e:32:7d:95:00:e3:d1:
9b:dc:6b:9f:ba:8d:ee:55:18:ad:1c:1e:e0:44:a0:97:e1:70:
de:5f:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:55 2024 by rpki-client on console-fra.rpki-client.org