Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: P5HFHPqoAFlK65arzKUptzG0qh4AgWtFaD+P7TLEEz4=
Subject key identifier: 5B:2C:45:E9:27:7E:6D:60:7D:42:6F:1B:09:50:AE:86:D1:E1:97:19
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 019369DA8B6689B576F8B7A2D8E99C34C895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 137F
Signing time: Tue 26 Nov 2024 19:02:30 +0000
Manifest this update: Tue 26 Nov 2024 19:02:30 +0000
Manifest next update: Wed 27 Nov 2024 19:02:30 +0000
Files and hashes: 1: 3L-V_GFGtL0UX4BYXDi1kwK8aGU.roa (hash: IuPWV2FaEm/5M1sZ/jWcTTLMWlgnCZ/prDohPoCcjcQ=)
2: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: n11o7IBT4qUnWY9B2Vv+3aVnzCGcTPJ5PJGzt70q7jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:8b:66:89:b5:76:f8:b7:a2:d8:e9:9c:34:c8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Nov 26 19:02:30 2024 GMT
Not After : Nov 27 19:02:30 2024 GMT
Subject: CN=5b2c45e9277e6d607d426f1b0950ae86d1e19719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:13:db:da:c1:f8:5f:3c:a9:a3:cc:5c:58:
ee:26:ed:ef:52:26:ab:69:b1:ba:26:ae:8d:e2:a7:
c5:67:31:4a:6b:75:01:a9:b1:01:43:35:db:08:38:
d3:9b:5e:15:c6:87:65:a4:1d:f1:bb:4a:3a:12:31:
76:57:76:ef:a9:75:02:80:a4:f5:56:90:c8:17:c0:
b9:87:ed:dc:10:2e:32:2b:52:1b:99:7b:cc:b7:8a:
4b:02:b4:d9:b8:f5:5a:c6:eb:fb:fc:16:88:64:16:
5f:7b:e3:df:0d:58:3d:82:4f:45:b6:42:1e:16:14:
64:ff:de:37:77:19:bf:8d:82:bf:f8:a9:26:4c:8e:
45:c8:1e:50:bb:f1:2a:66:f0:83:16:34:b2:60:5f:
f3:2c:35:d3:db:94:57:87:b2:69:4c:fb:cf:3b:46:
e1:d8:1c:54:6e:44:2a:71:51:4a:6d:ed:c1:d3:3a:
a4:c3:0d:fd:78:70:df:c1:5c:09:0a:6f:59:73:7e:
c5:cd:4a:23:86:42:69:df:66:b7:a0:9f:fd:64:c1:
98:81:3f:5c:11:e5:77:52:d8:c7:b6:c4:b8:1d:96:
d0:89:00:00:78:36:fe:31:39:b8:f9:dd:01:cb:a4:
4f:22:01:91:d7:ac:fd:c7:bf:0d:66:e2:ad:07:26:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:45:E9:27:7E:6D:60:7D:42:6F:1B:09:50:AE:86:D1:E1:97:19
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:17:01:28:cd:a8:f0:84:e4:ed:9d:bf:3f:ac:65:b0:dc:43:
55:2a:72:6f:4c:b9:39:59:2b:cf:28:11:d5:ad:90:f7:8e:60:
6c:bb:f6:7c:b3:17:72:0f:88:80:62:9f:ee:0c:9e:e5:75:cd:
e9:8c:4c:07:8b:fa:8e:5e:43:af:e4:63:65:2b:63:cc:0d:d7:
a3:ee:8c:5b:c8:73:cb:f1:c9:e1:5f:4f:f4:1c:9e:41:5f:d4:
dc:73:f1:d3:09:d4:d7:58:67:d8:1a:20:c8:c2:e9:cd:ce:b1:
e0:69:8b:c3:bb:04:29:8f:e2:04:78:3d:db:aa:00:db:b1:13:
55:df:55:b7:02:da:97:98:dc:f8:bb:0e:12:39:52:f2:c7:0e:
f0:6c:18:d0:b7:a3:cb:fb:d4:59:e7:49:07:3a:d5:d9:01:12:
c6:11:f3:17:21:02:9a:48:06:34:ea:8c:c6:98:50:ef:2c:cc:
92:84:ca:37:a9:1d:a0:09:ec:62:a7:3f:f5:d2:71:94:86:d8:
08:39:59:65:85:d1:e5:85:44:c8:f0:c8:69:f3:32:fe:5e:eb:
d5:79:a0:17:a5:5e:71:f2:5b:0b:ab:68:57:69:0e:e1:d3:67:
55:81:15:1d:17:1c:1c:7d:73:1e:47:34:df:1d:ba:71:f5:f0:
11:91:84:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2otmibV2+Lei2OmcNMiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz
ODQ1MWYwHhcNMjQxMTI2MTkwMjMwWhcNMjQxMTI3MTkwMjMwWjAzMTEwLwYDVQQD
Eyg1YjJjNDVlOTI3N2U2ZDYwN2Q0MjZmMWIwOTUwYWU4NmQxZTE5NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xkT29rB+F88qaPMXFjuJu3vUiar
abG6Jq6N4qfFZzFKa3UBqbEBQzXbCDjTm14VxodlpB3xu0o6EjF2V3bvqXUCgKT1
VpDIF8C5h+3cEC4yK1IbmXvMt4pLArTZuPVaxuv7/BaIZBZfe+PfDVg9gk9FtkIe
FhRk/943dxm/jYK/+KkmTI5FyB5Qu/EqZvCDFjSyYF/zLDXT25RXh7JpTPvPO0bh
2BxUbkQqcVFKbe3B0zqkww39eHDfwVwJCm9Zc37FzUojhkJp32a3oJ/9ZMGYgT9c
EeV3UtjHtsS4HZbQiQAAeDb+MTm4+d0By6RPIgGR16z9x78NZuKtByYRqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFssReknfm1gfUJvGwlQrobR4ZcZMB8GA1UdIwQY
MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt
MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3
LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphcBKM2o
8ITk7Z2/P6xlsNxDVSpyb0y5OVkrzygR1a2Q945gbLv2fLMXcg+IgGKf7gye5XXN
6YxMB4v6jl5Dr+RjZStjzA3Xo+6MW8hzy/HJ4V9P9ByeQV/U3HPx0wnU11hn2Bog
yMLpzc6x4GmLw7sEKY/iBHg926oA27ETVd9VtwLal5jc+LsOEjlS8scO8GwY0Lej
y/vUWedJBzrV2QESxhHzFyECmkgGNOqMxphQ7yzMkoTKN6kdoAnsYqc/9dJxlIbY
CDlZZYXR5YVEyPDIafMy/l7r1XmgF6VecfJbC6toV2kO4dNnVYEVHRccHH1zHkc0
3x26cfXwEZGEMQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:37 2024 by rpki-client on console-ams.rpki-client.org