Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
File: 3IR1bcdywGSDJJqYejsbxuYF6DU.mft (raw, json)
Hash identifier: 3j8SWxbin48yefiI+cacbLPZEGn0LKDAqJYZohNRFDc=
Subject key identifier: 80:27:50:8B:C2:EE:F8:BE:B9:CC:CF:22:EA:EF:6E:6E:CD:49:09:B7
Authority key identifier: DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
Certificate issuer: /CN=dc84756dc772c06483249a987a3b1bc6e605e835
Certificate serial: 01935199815306A41AD6CB5F6B4315B1D156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 02:00:34 +0000
Manifest this update: Fri 22 Nov 2024 02:00:34 +0000
Manifest next update: Sat 23 Nov 2024 02:00:34 +0000
Files and hashes: 1: 3IR1bcdywGSDJJqYejsbxuYF6DU.crl (hash: /MskJz/sheIFGt7nU0lSpa01YJPgD1X79IqSbIn3mA0=)
2: rq39Cxcjv22zN8qaanrTd64xr4o.roa (hash: NTXCeYvqcRQumTAQPPOUf3vxEbPuLjQPCRtTzhXnJ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:81:53:06:a4:1a:d6:cb:5f:6b:43:15:b1:d1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc84756dc772c06483249a987a3b1bc6e605e835
Validity
Not Before: Nov 22 02:00:34 2024 GMT
Not After : Nov 23 02:00:34 2024 GMT
Subject: CN=8027508bc2eef8beb9cccf22eaef6e6ecd4909b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:82:be:a9:e1:c6:48:7b:a8:e6:a7:ea:d8:
f6:91:d4:65:0c:d1:ea:99:14:68:8c:b3:89:e6:62:
2b:fe:49:98:8e:33:5b:6d:5f:ea:72:b1:8a:d5:d4:
fb:dc:2f:4b:9c:12:cf:0d:97:b6:22:b4:a2:04:55:
ef:40:e5:35:81:8d:14:a4:89:ad:70:4a:b2:5e:13:
78:c9:96:f2:85:a9:c8:03:58:9b:64:35:6b:48:9b:
a0:68:87:df:a7:e2:49:e9:e6:5c:71:eb:1c:3f:36:
82:9d:a8:da:5d:16:bf:ac:d4:25:a6:ab:6c:59:ea:
d0:31:96:5e:3d:9e:be:ca:29:d4:1c:1a:a7:a2:72:
d7:68:11:07:df:2d:1a:e2:51:36:ea:6c:98:da:13:
fd:a1:2c:16:5f:4b:05:48:d3:fe:bf:ae:09:1f:32:
29:69:1d:58:ca:cd:a3:a7:4d:18:69:05:64:1c:5c:
1d:98:4b:ab:fb:44:c4:bd:0d:47:e0:37:14:5d:20:
92:97:3e:01:52:9a:70:79:41:8d:9d:e3:e3:95:02:
53:0d:a3:89:e2:b8:15:78:07:33:8d:8a:05:ff:e7:
ce:a7:13:ce:1a:ae:7d:47:e6:e7:48:67:97:5f:f7:
04:1e:b3:df:8b:96:8d:64:02:a8:18:81:b5:57:e5:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:50:8B:C2:EE:F8:BE:B9:CC:CF:22:EA:EF:6E:6E:CD:49:09:B7
X509v3 Authority Key Identifier:
keyid:DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8a:cb:35:de:be:b5:29:ba:aa:b8:b0:34:14:f8:8f:74:22:
e9:1c:7a:a4:90:ff:0c:e0:dd:e7:cb:3f:86:63:95:43:9d:af:
1a:41:d6:ac:a9:42:93:ca:f0:b2:c7:e2:3f:53:4d:03:b1:73:
d5:ee:50:b7:b2:4f:c6:9b:83:42:32:32:d9:d9:6f:f4:5d:53:
8d:a5:f2:ff:4e:d3:7e:16:96:ed:7f:e4:d3:92:2f:88:d9:ec:
05:ee:71:b2:ab:e5:f5:c9:52:1e:ee:43:54:1c:aa:85:5f:c2:
ae:6e:09:eb:70:7e:a7:b4:34:96:0b:7e:8a:36:29:53:54:8c:
6c:31:3d:46:8c:ff:6e:93:7d:9e:6e:cb:42:36:d6:63:03:0a:
f2:81:09:09:6f:18:72:cd:34:93:15:61:41:5c:46:4c:31:da:
a7:cd:ad:fc:6f:01:7f:2c:44:13:64:8c:8c:70:91:87:b4:1b:
61:15:46:60:9a:81:42:cb:ce:0b:98:78:87:f5:4f:ce:8b:c0:
1f:57:30:2e:f1:4a:cc:0b:14:06:7b:91:fe:39:d5:87:bc:44:
22:21:d4:c8:1d:f4:de:ad:69:0a:d9:9d:67:9f:22:0f:42:d6:
a4:2c:f3:10:46:4f:b8:b5:ea:92:01:59:8f:12:1d:c9:df:c1:
cb:46:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:29 2024 by rpki-client on console-fra.rpki-client.org