Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: LvJjtvePx5SqlMe0iosf8jm1apxDW202+8d7wFpybiI=
Subject key identifier: 87:61:2D:A8:8C:ED:2C:4E:ED:4B:4A:3A:32:B8:13:BE:B9:6E:9C:64
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 0190490C481A04E84EBDF57AF834700564B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0B97
Signing time: Mon 24 Jun 2024 07:00:59 +0000
Manifest this update: Mon 24 Jun 2024 07:00:59 +0000
Manifest next update: Tue 25 Jun 2024 07:00:59 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: GJ1ugMC06tylgfFyDNGm+lYnR9BXJTYA/i9OyAXeuOI=)
2: TMfbNnRbkfGsBw8lVt7p5Ze1yLM.roa (hash: u7/SPbPvJ634nr4hyl8QfuXnwTDdgZknj/xL0cBXXis=)
3: VyAV3vwo9T69GvBgwPjqd7o4RNY.roa (hash: MJTriY9rdNih3Q82LNVEkKUe1A1qAdzDNYqutEtIVL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:0c:48:1a:04:e8:4e:bd:f5:7a:f8:34:70:05:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jun 24 07:00:59 2024 GMT
Not After : Jun 25 07:00:59 2024 GMT
Subject: CN=87612da88ced2c4eed4b4a3a32b813beb96e9c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:a1:4d:74:59:2b:74:a4:ea:67:da:13:88:
15:c8:44:6f:b9:7b:c7:ea:de:05:f6:98:c4:44:00:
1d:b1:91:3f:6a:d4:0f:7b:b0:6a:a8:fa:29:13:11:
e9:22:44:fd:3d:bc:0d:6e:74:fe:8a:64:d3:3a:c8:
c4:e4:9d:b6:07:44:73:a2:86:a9:33:63:1a:53:50:
3f:89:ed:0a:db:30:22:a0:ee:08:f7:b5:40:6f:48:
31:dd:ba:1c:69:33:f2:98:22:e8:15:d9:9c:52:70:
5e:0a:5f:be:45:94:f3:12:16:c8:20:b0:fb:a7:ba:
fa:da:70:75:0e:12:87:d8:5b:3b:c0:3e:80:d2:18:
3f:2c:ea:ea:c4:49:eb:3d:b5:c7:ec:6c:28:86:74:
0d:70:bf:02:57:7e:5d:55:a7:20:05:96:96:14:45:
f5:6d:35:ea:43:ea:12:ce:55:68:d8:b3:0e:6e:db:
01:80:c9:52:cb:8d:69:f7:ea:d0:7a:02:a6:ef:47:
e2:c3:89:33:dd:67:4b:64:94:09:2d:33:d2:6c:58:
12:15:7f:ad:77:a9:ed:08:f6:4e:b0:48:54:ee:65:
65:eb:c9:e4:a1:a8:dc:13:50:20:7f:86:8a:71:b7:
df:76:a8:e7:83:db:f1:fb:cb:25:f6:ae:59:d0:99:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:2D:A8:8C:ED:2C:4E:ED:4B:4A:3A:32:B8:13:BE:B9:6E:9C:64
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dd:6a:1a:6b:99:94:9d:1f:e7:8f:3e:db:2a:87:f9:96:a9:
44:97:69:f2:0e:24:2f:ae:f2:27:2f:31:16:fa:8f:85:b6:85:
75:df:bf:34:02:5e:cc:b8:75:98:03:da:bd:2e:02:8d:26:16:
70:9c:1e:28:39:a4:52:70:d1:a5:53:d9:ca:ac:28:20:1c:06:
ba:13:07:a9:7f:34:71:ef:b4:0b:eb:3d:3f:bd:90:a8:1a:82:
7e:21:48:8a:a4:72:5f:0f:1d:65:31:01:fb:cc:29:d4:0d:50:
22:b7:45:93:d4:9e:c4:fe:ea:d3:c2:04:04:c9:38:55:6b:b1:
b3:68:3f:33:ed:c2:15:42:fb:31:29:7e:c3:2c:fd:7c:b9:bc:
7a:ab:cd:ad:01:7a:82:6e:6e:07:ff:b2:e4:5c:4e:af:15:35:
4e:04:50:4e:80:74:f6:4f:d4:12:e9:49:cf:39:01:65:1f:00:
f5:a8:77:6b:93:1a:e9:6c:ce:16:2c:e8:82:fb:54:b4:9d:0a:
a8:75:19:6d:e7:6d:76:78:c8:1b:46:d2:8a:08:de:c3:94:88:
99:d6:4d:07:66:b8:e9:e4:7c:0e:a7:32:a8:48:3c:f6:dc:a0:
19:8f:ad:73:40:79:dc:35:a5:9d:69:e0:37:a3:98:bf:20:c2:
16:ad:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:53:24 2024 by rpki-client on console-fra.rpki-client.org