Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: 2JXmwhBm71vOormAQBPzTlt+vpRB0ovZoU4SLb/8K1c=
Subject key identifier: 34:3E:36:04:0F:6F:C7:A5:55:FA:58:CE:E3:5F:8F:3F:C5:8B:47:FA
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 0193512B585563A129CAAEB419B678F73836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 0E08
Signing time: Fri 22 Nov 2024 00:00:15 +0000
Manifest this update: Fri 22 Nov 2024 00:00:15 +0000
Manifest next update: Sat 23 Nov 2024 00:00:15 +0000
Files and hashes: 1: 27o56I1AjfKywmAjawdPKgYq12Q.roa (hash: i77V7+mY2l6joUJwlb9lmK24i++B4+Z6vfoCTPqaQgA=)
2: 3FPAYWXx1x-m_qKQJyb1I1OxV2A.roa (hash: bJbnsUbFRgJxDXmo7l12k8k1D+ks0bDIFTzJ2GzmqPI=)
3: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: vKaCZqhHvG+pRRfpnOwGLGp0r3wDm86uYnWhl6eUQlQ=)
4: A88Ne_CpJQYTUr5QITlEtAL0D7I.roa (hash: JD1q3LQyqBBdr5HJo8nenV2rTP8RustPJRGbkA3qqDo=)
5: Rg2Lq-JI-C2Am1Eh4MbrxNISatk.roa (hash: UpvTV8QmBM8ZkpjEDMWB4C9Sum48hWhx/l80v4sTp0o=)
6: TS1plHbkMHXkR3TBGdCFY0Zr1JE.roa (hash: 4Sjc5/CJdr7+gb9rw8zPPE9K8Qe6AAuo9nTvaiZ+KZE=)
7: _TUNxgdnH12PYmgIvUcY7X7i7PY.roa (hash: Aqq9ohIBAAPhlWxNC7l3iTZBALhOFtbkJlIEF/lxubs=)
8: j30UoMDciFVRU4gyw3GZ8mVK27U.roa (hash: /6P33uwqZ5HWHJSsGgal3RXON+J2HbHy86jgRo4mKqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:58:55:63:a1:29:ca:ae:b4:19:b6:78:f7:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Nov 22 00:00:15 2024 GMT
Not After : Nov 23 00:00:15 2024 GMT
Subject: CN=343e36040f6fc7a555fa58cee35f8f3fc58b47fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:41:80:6a:f7:94:1c:c0:90:e5:a9:f4:a3:
c8:62:36:dc:95:d9:87:23:86:ac:3b:69:16:4a:20:
2d:f8:52:96:47:ef:2e:c3:57:3e:54:c0:80:43:28:
ad:1f:59:5b:5b:7f:1e:3c:fc:f5:09:e0:41:f5:11:
d9:39:3c:dd:fa:6e:8b:f8:47:e4:d0:6e:94:bc:3e:
cf:d2:04:65:03:0f:11:35:90:38:83:a2:4d:6d:e7:
31:e5:e9:3e:2d:12:63:92:c3:98:13:ea:57:8f:35:
d3:69:5c:7c:bf:53:e8:0e:15:7b:b2:f7:c3:2e:b8:
3f:15:60:35:e1:f4:d8:31:39:1f:67:14:7e:2e:fd:
d4:af:cb:2e:3a:a7:46:e1:ec:58:7e:d7:a4:85:08:
89:e2:83:48:f3:e9:42:cd:47:42:0c:67:c6:76:84:
3b:ef:8c:dd:4b:17:9a:9f:ea:7f:fc:bd:e1:bd:5e:
cf:2c:1a:d5:65:83:36:e8:8b:7e:c6:c3:53:76:10:
a4:20:a6:49:ff:54:93:c7:32:0e:3d:a6:db:de:24:
51:9b:e9:82:fc:97:69:2b:35:3f:be:38:ff:2c:51:
d3:71:e6:57:41:04:ba:9a:53:49:2c:50:6d:05:0c:
a4:e0:63:08:25:fa:e9:ed:2a:f9:b7:ca:3a:fb:37:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3E:36:04:0F:6F:C7:A5:55:FA:58:CE:E3:5F:8F:3F:C5:8B:47:FA
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a7:d4:55:c0:c3:b1:95:a5:71:3e:8a:4b:5b:5a:89:c5:5e:
3d:da:df:4a:ad:82:62:81:0a:6e:c8:75:77:f4:04:5d:0b:4c:
50:51:85:78:88:95:1e:28:e6:53:4d:5d:0b:50:a4:41:31:80:
70:0e:c4:42:40:ad:87:15:16:71:90:de:a6:b7:53:a3:61:97:
4c:80:eb:f8:c0:ce:7e:96:82:d2:23:93:d0:fa:91:a1:a5:bf:
e8:17:5f:63:b1:e1:5e:2c:6a:ae:66:04:ba:4d:3f:22:70:7f:
99:f4:de:7a:d9:2d:0d:99:57:6f:f2:b0:f8:5d:b2:1d:84:17:
5e:3b:ed:5f:d2:8b:ca:ba:4e:54:48:77:77:07:0d:36:c6:e0:
29:d3:ee:1c:9d:b3:93:c1:a3:a2:cd:68:9b:e0:a5:e3:87:5b:
d3:1b:dc:4e:98:8c:e9:6e:7b:c9:6f:31:9f:83:c7:ad:52:8b:
eb:db:14:13:fb:57:c5:2b:61:4d:8a:f0:c3:2a:ec:40:a0:dd:
bf:0d:95:20:84:62:41:51:77:cb:ab:41:77:bb:e0:4e:85:4c:
a2:2e:77:b8:92:9f:f6:04:bc:01:bd:63:cc:70:a9:b2:75:c8:
58:cc:b0:fe:fa:29:43:49:6d:18:48:66:49:13:a9:19:91:65:
e3:35:c7:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRK1hVY6Epyq60GbZ49zg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3
NGNjYjcwHhcNMjQxMTIyMDAwMDE1WhcNMjQxMTIzMDAwMDE1WjAzMTEwLwYDVQQD
EygzNDNlMzYwNDBmNmZjN2E1NTVmYTU4Y2VlMzVmOGYzZmM1OGI0N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTpBgGr3lBzAkOWp9KPIYjbcldmH
I4asO2kWSiAt+FKWR+8uw1c+VMCAQyitH1lbW38ePPz1CeBB9RHZOTzd+m6L+Efk
0G6UvD7P0gRlAw8RNZA4g6JNbecx5ek+LRJjksOYE+pXjzXTaVx8v1PoDhV7svfD
Lrg/FWA14fTYMTkfZxR+Lv3Ur8suOqdG4exYftekhQiJ4oNI8+lCzUdCDGfGdoQ7
74zdSxean+p//L3hvV7PLBrVZYM26It+xsNTdhCkIKZJ/1STxzIOPabb3iRRm+mC
/JdpKzU/vjj/LFHTceZXQQS6mlNJLFBtBQyk4GMIJfrp7Sr5t8o6+zd4FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ+NgQPb8elVfpYzuNfjz/Fi0f6MB8GA1UdIwQY
MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt
NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz
LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEafUVcDD
sZWlcT6KS1taicVePdrfSq2CYoEKbsh1d/QEXQtMUFGFeIiVHijmU01dC1CkQTGA
cA7EQkCthxUWcZDeprdTo2GXTIDr+MDOfpaC0iOT0PqRoaW/6BdfY7HhXixqrmYE
uk0/InB/mfTeetktDZlXb/Kw+F2yHYQXXjvtX9KLyrpOVEh3dwcNNsbgKdPuHJ2z
k8Gjos1om+Cl44db0xvcTpiM6W57yW8xn4PHrVKL69sUE/tXxSthTYrwwyrsQKDd
vw2VIIRiQVF3y6tBd7vgToVMoi53uJKf9gS8Ab1jzHCpsnXIWMyw/vopQ0ltGEhm
SROpGZFl4zXHvg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:57 2024 by rpki-client on console-fra.rpki-client.org