Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: d1xqmM+aVBQXxSgqJsfKnYXIL+fBePlPsC9Rpy4+qEs=
Subject key identifier: 6C:60:91:40:F4:5F:D4:DC:D0:4D:F5:A9:C9:10:88:D5:0C:DB:23:90
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 018F377707F062D708323EF10F731FB3E1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 114F
Signing time: Thu 02 May 2024 04:01:38 +0000
Manifest this update: Thu 02 May 2024 04:01:38 +0000
Manifest next update: Fri 03 May 2024 04:01:38 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: vAyZPq63LENI9fX0kuqk7VXer4z3PdBuKV+Qz7YV3u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:77:07:f0:62:d7:08:32:3e:f1:0f:73:1f:b3:e1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: May 2 04:01:38 2024 GMT
Not After : May 3 04:01:38 2024 GMT
Subject: CN=6c609140f45fd4dcd04df5a9c91088d50cdb2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:05:16:cf:a9:43:96:65:bf:ce:5e:d3:13:
4c:ae:d3:6a:b8:d8:c8:2e:0e:ef:f9:14:e0:f8:05:
33:23:be:14:52:8c:37:7a:27:26:60:76:7e:23:ff:
aa:8f:c7:82:3f:e5:1b:50:db:b8:1d:f4:04:08:2a:
ad:06:9c:2d:db:9a:88:bb:6c:cb:7f:55:7d:1e:ec:
53:44:23:91:9e:47:ac:63:97:40:12:f0:99:b7:ee:
80:77:50:c6:a3:db:ca:84:d1:59:c1:b4:f3:3b:f8:
2d:06:d0:09:b1:16:c1:d6:ff:ff:6a:e2:a4:52:81:
b1:ae:50:7e:d2:00:a6:24:48:bf:03:b2:9b:3b:14:
60:08:a5:84:a6:25:4e:8d:ad:ae:af:4c:83:35:01:
55:fd:d3:88:7a:3a:81:64:4e:80:92:71:48:e7:c2:
5a:19:75:33:c3:8f:c5:ac:fc:e1:65:24:fe:03:a2:
01:d4:c9:62:85:83:0e:76:42:be:5b:55:b2:2b:02:
bf:98:d7:f9:96:85:ef:28:cb:f4:f0:0c:4f:49:e7:
7f:2e:28:1e:20:50:f9:4a:c5:52:67:ed:e2:99:54:
af:63:19:00:78:8b:c3:ff:e6:2c:05:bf:b8:77:16:
24:45:00:5b:f0:6f:f0:74:46:a5:45:38:2b:24:cd:
76:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:91:40:F4:5F:D4:DC:D0:4D:F5:A9:C9:10:88:D5:0C:DB:23:90
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a5:92:af:05:3c:ec:77:81:1f:0d:35:70:7d:b2:03:54:4d:
52:8d:10:a2:6c:18:62:f5:04:56:46:90:aa:b6:34:fd:e8:66:
4b:f9:b7:9e:a0:6c:26:85:08:97:c5:2a:b7:7f:c8:01:a6:00:
5b:12:81:fd:4d:7c:66:9f:f8:0f:36:70:c9:58:6b:c1:d8:af:
53:47:85:98:5a:ea:57:9e:15:42:5d:4f:32:4b:59:f4:42:dc:
9c:d1:f7:c6:de:cd:94:2c:b9:67:3a:e6:46:56:71:c3:84:79:
50:69:89:3f:d6:3f:ea:7b:36:87:54:59:dc:e4:85:e7:33:20:
42:b3:0c:cc:18:95:94:43:2c:79:0c:1b:ad:6c:f7:fc:a5:ba:
a1:b5:80:f3:be:ae:46:ec:b0:93:5f:de:e9:5f:0d:ff:53:c9:
49:ea:f5:df:45:d6:73:d7:e3:a3:e1:68:8e:be:cb:05:0f:6f:
80:6f:a3:7e:bf:bd:cc:e0:0f:22:dc:10:f2:5c:be:59:29:f1:
d1:f3:2a:3e:c2:43:d2:a3:6d:cf:31:ee:5a:71:fe:a9:f1:41:
a2:c8:82:3a:06:2b:32:bc:66:8a:bc:b6:df:a4:84:95:e0:21:
3a:67:00:95:78:1d:87:43:71:ab:8e:25:71:63:62:fe:86:d4:
3d:d1:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:12:54 2024 by rpki-client on console-ams.rpki-client.org