Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: +AkhwbIJ+DThJBR/19xgFAqX0APZ8avw66+STgMX8m0=
Subject key identifier: 37:D1:D3:91:DE:AF:0A:98:96:74:BE:EC:BB:2D:2D:89:EC:50:4A:38
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0194060ED4E48B4698A00E57F35AB0B46673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 13C8
Signing time: Fri 27 Dec 2024 03:00:22 +0000
Manifest this update: Fri 27 Dec 2024 03:00:22 +0000
Manifest next update: Sat 28 Dec 2024 03:00:22 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: 2/HC28Hh4ngBsLU/mLMfuMoFdTMYTLHIepKXOyb6Xpo=)
2: 5ejonrCg5-INYpw0WHzgc1Resdw.roa (hash: OfIo/KdfOHPv0dRD9njTr67dHkTOaskai4VYr1My25s=)
3: bnPaCU2zVcRL4N0nJ1LvgwJyFtY.roa (hash: 9cMqXRTgbNPSf6I/G9ZXlS6ySO5CFvOcb1iQtY0rxs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:0e:d4:e4:8b:46:98:a0:0e:57:f3:5a:b0:b4:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Dec 27 03:00:22 2024 GMT
Not After : Dec 28 03:00:22 2024 GMT
Subject: CN=37d1d391deaf0a989674beecbb2d2d89ec504a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:26:5d:e7:5a:9f:81:90:02:2b:9e:e2:81:
8a:d7:81:4a:43:5e:1c:ff:1f:4e:7f:fa:22:1c:de:
68:bf:ce:86:91:0c:ef:1f:21:0d:a5:13:e1:1b:41:
44:45:16:05:2c:64:da:d3:89:ee:08:6f:1b:60:b3:
65:ad:5d:c1:bb:8b:55:d0:63:f7:76:2d:ad:29:00:
01:e5:e2:15:e0:51:6e:ca:56:8e:9f:2f:22:01:0f:
cc:f9:c4:f5:ca:77:42:56:81:ca:b2:f3:af:d4:89:
f7:5b:b5:aa:ca:3e:8a:dc:c3:88:64:a4:be:e3:90:
67:56:0f:55:42:b2:45:4f:b5:bc:f8:63:22:e4:ed:
e2:65:d1:cf:b6:9e:42:b9:89:42:b1:f7:5a:1f:4b:
5c:ee:f3:ed:8d:4d:7c:4f:a4:11:8d:7c:52:e2:a7:
8d:31:7d:16:95:12:39:5f:3c:e6:b1:c9:1c:09:da:
7e:28:10:35:54:ae:d0:73:fc:03:8f:51:3a:5f:df:
65:2a:7d:72:58:68:25:2d:d6:c5:c6:7e:7a:ab:40:
8a:fc:d6:82:df:a7:ff:2b:a3:13:ce:f0:55:92:ed:
66:83:8f:be:98:78:b3:29:81:13:05:82:c7:12:97:
fc:69:2b:fb:1a:99:8b:8a:78:6a:2e:b4:2b:51:df:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:D3:91:DE:AF:0A:98:96:74:BE:EC:BB:2D:2D:89:EC:50:4A:38
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4f:1d:fd:d5:78:8a:4d:8c:8c:82:33:d1:47:2a:ed:a2:fe:
14:f3:a4:e4:ff:45:a8:d9:8e:84:2f:cc:a9:44:3a:89:8e:ba:
db:96:e7:c3:17:4d:67:76:46:41:af:79:e5:9e:fd:4d:d6:04:
6d:f2:0b:95:fa:76:f1:19:20:68:f3:4b:3f:8d:60:62:3a:d6:
4f:4d:0a:73:3c:0f:02:20:20:13:8c:fc:1c:9d:b4:a1:de:cf:
38:d7:f1:fa:9c:85:dc:e4:dd:f7:34:71:0f:72:c1:31:f0:57:
68:b6:a5:7f:fa:3e:d4:68:27:32:26:b6:be:b8:82:65:a9:d5:
ee:e5:f3:f3:0b:f2:56:ad:1d:7e:8a:2e:07:e6:b8:ba:8b:9f:
60:ec:a5:3c:69:85:2b:0a:85:e4:db:6b:22:40:40:c6:6a:79:
15:96:67:2b:1d:4d:3c:90:af:35:71:a2:b2:a4:6f:60:f9:4f:
78:4f:e0:18:a3:82:6e:5c:a4:4b:dc:b1:76:15:f4:25:23:df:
e7:d2:42:63:e9:94:c5:e3:91:1a:90:10:b8:7c:6b:26:94:44:
81:9e:c8:48:84:e6:8c:e5:c9:a7:d4:95:e5:e1:3b:49:3c:89:
35:db:1b:59:99:72:c0:ae:a8:f5:fe:54:ea:a4:c7:ec:07:5d:
fa:6a:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:21:07 2024 by rpki-client on console-ams.rpki-client.org