Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: glaYYONY/324xj9yMvLbgZG8Fnr1xbqSjlniEBPultI=
Subject key identifier: 63:4A:51:97:53:B7:B3:01:58:60:ED:99:EC:15:0C:49:67:49:AF:5A
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 01940645E886D115171708DB66A5536C6C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 13CB
Signing time: Fri 27 Dec 2024 04:00:32 +0000
Manifest this update: Fri 27 Dec 2024 04:00:32 +0000
Manifest next update: Sat 28 Dec 2024 04:00:32 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: DHjTzEkfiTDZNHUJLBXCbDX87/kVQXnBvCl4sx9sBgA=)
2: A6I2zW816YFefNMSOw_bHGwIbks.roa (hash: 4XZRkLz+Eyzm/SB6nVPbuJ3edvxFStWQoqogA90sv2g=)
3: LW1_XJId_IeE3ynRKIztZErRSOw.roa (hash: u+fi42iSRUfUhYYN0upPbPgTHH9si2NqoS2cbXwe62E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:45:e8:86:d1:15:17:17:08:db:66:a5:53:6c:6c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Dec 27 04:00:32 2024 GMT
Not After : Dec 28 04:00:32 2024 GMT
Subject: CN=634a519753b7b3015860ed99ec150c496749af5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:b2:fb:24:78:fd:8f:cd:c2:21:b6:8c:66:
07:33:8e:4a:5c:3b:71:9c:7d:ad:e3:ab:a6:3c:a8:
d9:e4:57:1f:1f:68:2e:e8:78:f9:c2:bf:ad:86:a2:
69:68:77:40:08:bf:35:79:44:d3:2f:18:66:32:cf:
4a:24:a8:65:4c:62:15:9e:ad:81:ac:11:49:1f:56:
94:d7:f9:0b:be:bc:16:9f:d5:aa:87:13:06:b8:52:
7d:cc:95:91:22:7e:cc:16:5e:1d:f4:fc:c3:ed:6b:
1f:be:96:47:21:69:3b:d2:30:92:96:21:70:ae:cc:
69:e7:aa:24:cd:df:e6:d6:cf:ca:be:30:5f:b5:6c:
a3:e2:5b:85:af:a1:ee:83:33:46:fd:04:f2:a8:0b:
71:e6:a6:18:48:8b:c6:79:ca:3b:ed:d7:a3:07:18:
46:cd:8f:a7:38:50:63:9b:a5:24:28:1e:7b:db:1c:
89:1c:7c:b8:e7:5a:39:f9:bf:a1:f2:cb:7f:07:9a:
fe:52:c4:4b:ad:f2:18:78:31:75:c8:80:ef:22:2c:
bb:f6:81:9c:74:f1:f8:ba:f4:48:8b:18:6d:40:41:
b7:12:fb:f7:de:56:dd:17:19:7d:bc:74:eb:60:e3:
74:38:17:a5:5c:4e:1d:89:45:ad:e3:fd:8d:83:c3:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:51:97:53:B7:B3:01:58:60:ED:99:EC:15:0C:49:67:49:AF:5A
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2f:95:97:2f:f4:8f:bd:04:25:94:62:e3:e9:af:30:82:ea:
ac:7c:ad:18:66:87:ab:61:05:9c:d2:2d:ae:44:bd:90:ba:8f:
ba:59:6e:02:60:df:ff:1d:94:43:f4:3f:e2:a3:9d:64:37:41:
23:32:8d:33:b7:05:b0:71:01:49:ab:10:92:34:e9:2c:98:77:
6c:75:4e:28:62:f1:93:7f:05:4d:52:3a:df:87:6b:5f:0d:8b:
b1:0d:80:a8:fa:ae:6b:54:69:ff:af:7f:de:35:00:3f:5d:2c:
e6:4a:aa:a4:6d:70:74:74:71:17:12:f9:4a:3a:f9:a3:90:c3:
b4:67:d5:ad:c5:91:97:1b:93:fe:d9:17:ba:9f:be:24:63:57:
d5:38:4e:98:39:82:9a:f1:7d:8d:7c:d8:d6:33:f7:29:70:94:
68:34:05:4c:95:2c:82:a3:ca:0d:06:78:2e:60:65:c5:8b:fb:
7e:07:a7:8b:77:79:7c:dc:12:ce:90:dd:ed:53:bb:51:97:c2:
d9:18:a3:e9:a5:46:1f:7f:a2:49:bf:7a:6a:ed:3f:6e:94:96:
92:28:3e:8c:5b:b9:d6:27:b0:d3:0a:6e:35:41:4e:af:c4:65:
52:9d:1e:05:d7:fa:32:b3:42:f8:8d:76:14:2b:85:ef:3b:a1:
b5:e6:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:40:21 2024 by rpki-client on console-ams.rpki-client.org