Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: zwDBACH8Iw7xdry8WqPgKl4+KNlGigvpWDLET+2mb8I=
Subject key identifier: 8F:27:F5:25:E2:A3:21:A1:D7:F4:F6:0F:98:B2:E7:3F:D2:AA:81:09
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 01923AA7FEED645433F3C127691D2EA4898E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 12DE
Signing time: Sat 28 Sep 2024 22:02:21 +0000
Manifest this update: Sat 28 Sep 2024 22:02:21 +0000
Manifest next update: Sun 29 Sep 2024 22:02:21 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: zM1xT9gRUTua7jiVR7iub82DWFUx6c4jxZ0FOb6thRk=)
2: Fd5yb-ufWxeroiPtnx2T_LrhWM4.roa (hash: OBz9lyfReM7k8kcmC8a2ljwvObp39OS0PMgebI8cihc=)
3: W7pUbXgtSNveuxn1b9tTbpsDTjM.roa (hash: 1GTcVoKBMCK62vzD34siR9t/U5gleTwOcsPDbS2008Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:a7:fe:ed:64:54:33:f3:c1:27:69:1d:2e:a4:89:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Sep 28 22:02:21 2024 GMT
Not After : Sep 29 22:02:21 2024 GMT
Subject: CN=8f27f525e2a321a1d7f4f60f98b2e73fd2aa8109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:07:62:f1:ec:62:6b:aa:8c:17:32:c2:08:
22:12:4f:81:33:aa:b9:da:d3:3f:8d:fb:2f:1b:d3:
84:89:3e:dc:3d:25:18:b7:93:13:d8:5c:82:33:be:
42:76:ea:da:a5:bf:b9:e9:1c:61:e0:a3:69:6d:df:
fc:00:60:3e:d8:7b:30:e9:37:76:07:e3:fe:b9:3c:
67:28:33:74:c4:b2:8c:b6:3e:75:32:26:2d:fe:a4:
6e:80:8e:46:8c:b0:9d:b8:c2:89:f2:67:74:f3:5a:
4a:5d:ee:44:2f:54:f8:7c:fc:4d:07:a8:4e:43:c7:
89:91:d7:12:7f:9e:55:7b:fb:79:09:5e:10:12:fa:
dc:ff:de:99:bf:d5:e0:61:54:78:93:71:59:07:3d:
9f:67:c2:52:ae:1d:ad:c7:93:c2:41:42:61:24:db:
98:1c:dd:26:06:69:7e:15:6d:a7:70:5f:3c:89:a6:
49:aa:72:e5:35:d4:96:1a:53:f4:fa:bb:8a:66:7a:
4e:04:4c:24:11:0f:ac:64:a9:69:6f:d6:1b:73:55:
63:13:f9:64:5c:a9:7b:1f:69:bd:7d:f2:7c:be:68:
fc:ef:6b:cb:78:3a:f9:4f:34:f6:2b:8c:1e:b2:9a:
84:bd:a6:8a:f1:b1:e5:3a:a4:fb:8a:6c:a6:43:28:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:27:F5:25:E2:A3:21:A1:D7:F4:F6:0F:98:B2:E7:3F:D2:AA:81:09
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:b2:d3:5e:8c:b7:8f:8f:11:6b:03:d6:0d:bd:96:56:f1:
09:74:c9:30:be:e3:56:c8:f9:ad:5e:26:e8:70:8c:2d:c9:53:
da:6c:17:27:85:fa:57:d7:87:38:40:2b:f4:5b:06:9c:06:dc:
82:2c:97:72:0f:1e:43:89:ac:5a:6b:ee:3c:93:07:e0:b3:fe:
df:c5:b5:b7:22:5f:ea:bd:1a:b1:6c:d9:ba:bb:49:67:d9:64:
c5:93:41:bd:f3:6d:44:c1:e8:20:95:f6:ef:69:88:6a:af:39:
2d:3f:f7:57:30:be:cb:54:af:8b:5a:f2:96:6b:2f:e1:3d:6d:
32:58:a1:f2:2b:17:f0:6f:fc:a1:71:63:20:bd:8e:3a:b4:00:
b5:d9:bb:20:6f:ef:6a:f8:f5:7e:ad:a5:9c:aa:7e:5a:a5:de:
c9:f5:85:72:75:f0:ae:1f:1f:ae:17:0a:62:94:f3:8a:b6:96:
b0:d4:1c:b8:d8:6f:a5:30:8c:c7:42:17:fa:bb:a2:c3:80:fe:
88:a9:56:4c:57:65:39:2e:b0:7d:f3:12:8f:36:d8:29:30:0b:
2e:ae:7b:0f:a7:6c:95:14:7e:c6:70:fe:23:26:cb:39:f1:a6:
8d:62:cd:11:4f:ca:13:08:7d:a9:07:9d:19:3f:ac:64:ea:77:
24:8f:ac:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6p/7tZFQz88EnaR0upImOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm
YWM3NDEwHhcNMjQwOTI4MjIwMjIxWhcNMjQwOTI5MjIwMjIxWjAzMTEwLwYDVQQD
Eyg4ZjI3ZjUyNWUyYTMyMWExZDdmNGY2MGY5OGIyZTczZmQyYWE4MTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1QHYvHsYmuqjBcywggiEk+BM6q5
2tM/jfsvG9OEiT7cPSUYt5MT2FyCM75Cdurapb+56Rxh4KNpbd/8AGA+2Hsw6Td2
B+P+uTxnKDN0xLKMtj51MiYt/qRugI5GjLCduMKJ8md081pKXe5EL1T4fPxNB6hO
Q8eJkdcSf55Ve/t5CV4QEvrc/96Zv9XgYVR4k3FZBz2fZ8JSrh2tx5PCQUJhJNuY
HN0mBml+FW2ncF88iaZJqnLlNdSWGlP0+ruKZnpOBEwkEQ+sZKlpb9Ybc1VjE/lk
XKl7H2m9ffJ8vmj872vLeDr5TzT2K4wespqEvaaK8bHlOqT7imymQyhIsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8n9SXioyGh1/T2D5iy5z/SqoEJMB8GA1UdIwQY
MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt
MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk
LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmCy016M
t4+PEWsD1g29llbxCXTJML7jVsj5rV4m6HCMLclT2mwXJ4X6V9eHOEAr9FsGnAbc
giyXcg8eQ4msWmvuPJMH4LP+38W1tyJf6r0asWzZurtJZ9lkxZNBvfNtRMHoIJX2
72mIaq85LT/3VzC+y1Svi1rylmsv4T1tMlih8isX8G/8oXFjIL2OOrQAtdm7IG/v
avj1fq2lnKp+WqXeyfWFcnXwrh8frhcKYpTziraWsNQcuNhvpTCMx0IX+ruiw4D+
iKlWTFdlOS6wffMSjzbYKTALLq57D6dslRR+xnD+IybLOfGmjWLNEU/KEwh9qQed
GT+sZOp3JI+sHw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 23:32:57 2024 by rpki-client on console-ams.rpki-client.org