Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: yUtroj0HCYGk9REZeotFqoaoDAlSq0rwuwGHvyJVvlo=
Subject key identifier: 4A:E7:20:2A:46:4C:83:AE:48:9C:E6:17:3E:6A:FE:F1:A9:43:6E:83
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 018FD86514F7C9E366B2888136A69267F828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 11A1
Signing time: Sun 02 Jun 2024 10:00:54 +0000
Manifest this update: Sun 02 Jun 2024 10:00:54 +0000
Manifest next update: Mon 03 Jun 2024 10:00:54 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: OL0F4M4ZrIuCgAo3lsROC9BjZ5Uezql1voLCxx2su5I=)
2: A6I2zW816YFefNMSOw_bHGwIbks.roa (hash: 4XZRkLz+Eyzm/SB6nVPbuJ3edvxFStWQoqogA90sv2g=)
3: LW1_XJId_IeE3ynRKIztZErRSOw.roa (hash: u+fi42iSRUfUhYYN0upPbPgTHH9si2NqoS2cbXwe62E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d8:65:14:f7:c9:e3:66:b2:88:81:36:a6:92:67:f8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jun 2 10:00:54 2024 GMT
Not After : Jun 3 10:00:54 2024 GMT
Subject: CN=4ae7202a464c83ae489ce6173e6afef1a9436e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:95:65:4c:36:bd:c5:44:8b:02:40:d3:83:
77:15:10:23:8d:88:86:99:52:59:50:b5:b5:53:33:
63:49:b1:03:7e:bb:51:cb:db:4c:ec:d5:3d:2e:95:
b5:78:7d:95:9b:ff:2b:ff:2d:ae:45:20:9c:06:d6:
5d:8b:89:69:af:92:cb:6e:8b:d6:34:7a:e6:33:5f:
ef:b5:03:93:e6:c3:51:73:e6:c9:44:ef:51:a3:91:
38:a6:1d:c5:eb:f6:3c:83:44:61:26:20:a8:2e:5d:
59:29:22:99:a4:0c:45:da:86:70:6b:9a:23:87:97:
fe:02:a9:6b:1b:2b:4e:aa:08:71:70:3c:67:43:d8:
80:e6:10:f7:bc:40:54:38:aa:17:95:f1:89:0b:21:
d9:63:25:1c:86:0b:0c:19:7e:b7:a9:e6:f9:aa:d6:
03:0d:17:81:ce:59:73:8c:86:5e:bc:90:a0:bf:86:
bf:13:e2:42:1e:51:63:7a:1c:d3:2b:2b:f1:5c:c3:
7d:87:5b:b3:b8:16:4e:39:3a:17:a6:4e:42:5a:2d:
92:1f:42:86:7a:ba:b9:fc:4c:f2:d8:1c:d1:ec:9e:
8d:ac:9a:94:69:4f:50:ba:8f:f5:0e:fb:ef:ca:cd:
62:c7:b1:c9:46:59:d9:dc:38:8a:dc:e4:60:c8:91:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E7:20:2A:46:4C:83:AE:48:9C:E6:17:3E:6A:FE:F1:A9:43:6E:83
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7e:cd:6d:86:0e:e0:53:38:3a:f8:4c:8f:2d:0f:7a:67:1b:
c2:e9:a6:c0:35:da:7b:22:62:81:ca:ce:5d:ef:4c:16:9e:05:
8e:45:17:70:44:71:c6:f0:f4:bd:d8:0a:0b:43:84:00:84:b1:
ab:90:ec:79:a8:2d:cd:21:b8:2d:4f:f3:2b:07:bd:d0:b6:aa:
66:55:89:fa:29:9b:44:80:42:84:bc:38:7a:91:c0:59:50:5b:
8a:2a:a7:56:09:36:31:16:0e:ca:9a:df:39:6e:e8:cd:c3:57:
1b:26:a5:33:e0:03:cd:17:9f:f3:6b:f6:1c:7a:5f:54:b2:f5:
78:f3:dd:b9:02:2e:79:58:84:a6:42:ac:64:c3:56:1c:44:c9:
b1:dc:d1:e6:90:7a:a8:c2:3e:80:ac:27:77:b0:99:92:64:d9:
76:0d:8a:3f:c4:bb:15:91:ad:6d:a9:6f:14:7b:e6:5f:e9:b4:
59:46:23:3d:2f:f6:85:ea:bd:57:32:0a:99:8a:b9:37:fa:a0:
ef:0a:e5:3e:84:ee:05:4d:5e:06:a3:2b:c3:6e:b4:e8:68:c3:
34:a6:5f:7d:0f:62:5b:4d:48:73:99:8c:db:4a:55:55:3f:b7:
5d:b7:1f:1d:b3:fc:25:f4:b3:e9:2d:94:f1:1a:e5:2f:87:9a:
65:3c:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:49:52 2024 by rpki-client on console-ams.rpki-client.org