Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: i6f2O2w2l/GLCLavfZutHBc7WajJ41BeST2mAYpAQ6g=
Subject key identifier: 19:5B:2C:DD:01:F0:31:A9:1D:94:4E:2A:A8:BF:22:29:2F:70:A3:CC
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 0194BB96F02C19EE2633325C82B3F8B95EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:18 +0000
Manifest this update: Fri 31 Jan 2025 09:00:18 +0000
Manifest next update: Sat 01 Feb 2025 09:00:18 +0000
Files and hashes: 1: 3R3CMh1y4wsFDSZM0M3C1xZygbQ.roa (hash: XMT6KzECLufc9ZTbE5ZuXejsU3/rr0tksv09pEK0Cjw=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: U4bcqOV/o/j4EqKWVmyS7OvvDbpJyBu1yEjJOKbfeHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f0:2c:19:ee:26:33:32:5c:82:b3:f8:b9:5e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Jan 31 09:00:18 2025 GMT
Not After : Feb 1 09:00:18 2025 GMT
Subject: CN=195b2cdd01f031a91d944e2aa8bf22292f70a3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:f1:31:0a:50:2e:8b:60:22:8a:5a:ce:3f:
d3:ff:12:a9:07:51:d0:92:f0:bf:c8:33:8a:cd:d4:
c2:11:12:91:fa:7b:5b:06:aa:d9:71:c7:ef:13:0c:
82:1c:4f:e7:fe:3f:0f:89:96:64:06:e2:c0:4e:09:
1c:74:d7:98:dc:b9:e2:1b:15:3e:ab:af:40:41:b4:
2e:18:76:29:7d:81:25:79:3b:c6:04:c4:8b:cf:23:
8f:c5:8c:45:9f:77:ce:3b:03:be:28:7e:d0:3e:00:
3a:38:7f:55:99:f8:0f:7b:5c:81:36:44:76:2a:4a:
49:c9:f8:a9:cb:8d:23:da:85:87:00:70:9e:38:1f:
b9:65:12:aa:4b:ec:ca:83:82:8a:77:f5:dc:23:46:
53:2d:04:34:e0:67:07:55:0d:38:d3:80:0a:01:b9:
4d:68:7f:c8:44:a9:66:b7:69:0a:9f:70:5f:2f:5f:
7d:6a:83:c9:a8:f2:28:6e:14:bc:25:dc:59:9c:7c:
07:37:66:6b:85:73:17:7f:2e:91:c3:c5:fe:02:9f:
90:1b:25:f5:a0:29:45:71:05:bf:fc:e1:2e:6d:2f:
5a:36:3e:5c:f8:5c:d2:aa:97:b1:3f:fa:8f:f2:3e:
91:d5:da:45:01:6d:94:eb:4a:22:d5:70:68:c7:70:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5B:2C:DD:01:F0:31:A9:1D:94:4E:2A:A8:BF:22:29:2F:70:A3:CC
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:52:49:77:29:a7:df:02:4d:df:1b:2b:40:28:cb:ee:d6:7f:
f9:cb:ec:28:8b:60:b3:b7:cf:c9:5a:92:25:07:12:df:5c:ef:
86:b3:f9:8e:c5:63:ea:bd:31:cc:02:be:18:51:85:fb:0d:10:
43:1c:5f:21:0c:0d:45:77:45:c5:37:97:d8:2c:5a:df:ad:3e:
9d:c7:65:5d:dc:61:90:25:f3:03:d3:5d:8e:20:85:86:a5:7c:
5c:a3:1c:5f:de:eb:82:b2:c4:5c:92:b2:f1:28:ad:f7:78:9a:
28:fb:12:d1:a7:1d:47:05:6f:b8:37:9d:51:81:c0:e5:45:bb:
17:b8:07:39:29:cd:2f:f8:5c:fe:f4:f1:b6:0a:a3:3c:fa:f1:
38:12:78:55:e8:45:32:86:2f:96:42:c2:b6:34:09:db:be:68:
88:b2:fc:ec:7e:d0:1a:a3:a3:e2:b6:a7:20:5f:e1:35:4a:b5:
3c:13:f4:4a:8f:7c:dc:91:d4:72:95:41:99:18:a6:b0:e3:73:
ab:bf:f8:54:df:84:2a:38:21:15:22:b3:a5:ed:6b:40:62:64:
35:4e:6d:e9:ec:c7:43:73:37:c8:f3:52:8c:59:9f:af:80:09:
a7:67:d9:b5:3f:47:0d:d4:ba:d5:11:8a:62:07:60:52:3d:9a:
0b:cd:45:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:43 2025 by rpki-client on console-fra.rpki-client.org