Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: nhNicJR1k4ZQUziB9DaaA7L/WqTi624T2DeAzjGWxNA=
Subject key identifier: 68:F7:BB:4F:3A:91:E3:13:F8:FE:04:14:71:0E:44:70:E2:4D:9E:2B
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 019405A188BFC31F58B8EC35A182067C607B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 0BAC
Signing time: Fri 27 Dec 2024 01:00:59 +0000
Manifest this update: Fri 27 Dec 2024 01:00:59 +0000
Manifest next update: Sat 28 Dec 2024 01:00:59 +0000
Files and hashes: 1: 1F50zpOCWz9X76KA_7-SQFgbOP4.roa (hash: /sqQsN3K8TrhK/2WoEK2NC5tIDMFdQjN37Q1JMJKF40=)
2: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: pELTf10CWzeCthMWzkZuPjNepNkO5Ila/hKxobkv+cI=)
3: 84_xRs3tcY_TKuf4Z9MFqWqMnRE.roa (hash: 1+ofwM/2g/qfEEy0B++HQXax3JExhZTbc56xGRRVcVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:a1:88:bf:c3:1f:58:b8:ec:35:a1:82:06:7c:60:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Dec 27 01:00:59 2024 GMT
Not After : Dec 28 01:00:59 2024 GMT
Subject: CN=68f7bb4f3a91e313f8fe0414710e4470e24d9e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:ed:bb:11:39:6d:d6:d3:8a:8d:51:db:d8:
b2:9d:d8:00:19:1c:c0:c4:f6:de:e9:dd:b7:d9:0b:
35:95:b5:fd:09:1f:78:cd:2e:8c:c5:76:4e:43:76:
93:75:7b:c7:b8:51:53:b4:07:3e:8a:fe:84:5f:f6:
d2:d7:a1:a4:52:76:02:a2:81:28:3d:2d:81:4b:8a:
6d:ab:7a:24:9c:75:f4:2e:a0:67:7a:d6:04:96:07:
d3:2b:9c:73:62:3a:2c:08:4d:e9:84:7a:11:a0:ea:
e4:79:89:34:ed:15:c0:59:2e:c8:03:70:92:c6:77:
77:c1:9d:c5:89:43:79:0f:35:6f:47:79:0b:60:c6:
1f:61:16:cf:9e:c4:29:eb:f5:bb:cb:2f:99:20:78:
16:c2:d0:5f:c7:68:62:6f:be:e7:71:9e:23:43:d5:
6b:5b:04:bd:ae:7e:41:11:8d:fa:8d:d8:ed:b5:b0:
1b:41:e3:a5:a5:ea:a1:3b:f9:4f:0d:e8:0f:29:3a:
be:27:f8:ad:95:2f:08:7f:2e:c1:61:8d:13:83:09:
44:36:63:d5:bf:ec:73:45:40:30:08:2a:ef:5f:82:
db:c6:fa:1c:fd:72:66:44:2c:9b:10:4b:f0:eb:71:
b2:a1:13:dc:2b:00:2d:8f:6a:83:4a:ca:07:b2:42:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:BB:4F:3A:91:E3:13:F8:FE:04:14:71:0E:44:70:E2:4D:9E:2B
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:61:2a:a1:f8:cc:4f:72:22:86:b5:56:7e:88:ce:18:4f:9d:
64:98:4b:00:e8:9c:36:40:46:26:d7:6c:42:ae:a2:63:ef:03:
b4:23:8d:e5:b0:9e:2a:be:c9:75:e9:a3:d7:a9:f2:22:8a:cc:
32:0a:98:91:f8:71:81:e2:25:fc:3b:ba:b6:e9:f4:98:09:4a:
97:15:1b:bb:ca:30:44:ae:53:3f:eb:53:68:1b:c8:05:5c:1b:
ad:56:77:af:ce:63:d2:61:05:b3:0f:c9:f8:e2:ac:14:5c:b2:
85:67:ec:d2:45:9e:9a:c6:dc:8d:f1:51:c9:0e:2b:9d:b3:2c:
88:45:82:45:e0:e8:dc:1a:1b:d4:44:be:c7:3f:e4:a5:c8:4d:
10:90:41:b0:1b:e0:dc:b5:59:0c:06:a8:08:77:d8:db:12:a9:
a8:48:22:ce:46:08:de:ae:c5:1e:6b:89:ad:ea:30:2c:e1:40:
04:30:56:ab:df:a5:ca:01:3d:80:3b:1d:5b:f8:89:75:64:9c:
de:db:65:66:e1:44:2d:76:18:53:96:1d:75:da:8a:83:3a:df:
9e:d5:89:0f:6b:f1:7c:ea:72:76:79:d2:46:3e:00:b3:21:90:
5b:ec:d1:89:85:10:46:62:3d:f5:db:29:6c:c1:04:4c:9d:a4:
a5:a3:c1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:47:06 2024 by rpki-client on console-ams.rpki-client.org