Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: ZLGN7n8FBq0L6NjN/fuCs8+nZlFhvSP7Hxz14qG2HL8=
Subject key identifier: 4F:81:74:3B:6C:B4:A4:CB:F2:A9:66:55:EB:2A:5D:5D:92:92:50:48
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 018F2E72DF1D6FE4492AE596D0D606A2363A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 114A
Signing time: Tue 30 Apr 2024 10:00:31 +0000
Manifest this update: Tue 30 Apr 2024 10:00:31 +0000
Manifest next update: Wed 01 May 2024 10:00:31 +0000
Files and hashes: 1: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: P+rNdk28pce5Btiqz05aiN2UzkzpLNt9CmRvty5qXDM=)
2: MUYlQALT3lfGNJ_7u1zYDKLRaXk.roa (hash: CLCgWmeQ1X9JVRvc/mHDW8Ys+dPYdjln36ofQTrM8hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:72:df:1d:6f:e4:49:2a:e5:96:d0:d6:06:a2:36:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Apr 30 10:00:31 2024 GMT
Not After : May 1 10:00:31 2024 GMT
Subject: CN=4f81743b6cb4a4cbf2a96655eb2a5d5d92925048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:de:9a:0e:71:66:af:0e:fe:37:d3:be:5e:
c9:61:d0:2d:8e:ac:f8:60:bd:cc:b5:e7:57:f0:f2:
db:ef:e4:79:cb:30:8a:83:b5:a5:f7:34:c1:ac:26:
0e:f9:85:13:6d:3e:0c:79:38:9f:0d:2a:e3:e1:41:
41:55:1b:e4:09:8e:ef:fb:ff:7f:0d:9c:46:58:3a:
b6:62:5d:df:af:2f:a1:bc:3a:54:01:9a:78:07:3c:
34:66:25:a0:40:ba:df:3f:0e:4e:bd:a5:46:56:c6:
8d:dc:09:9b:ff:ec:be:94:fc:2f:ca:e9:a9:33:2b:
ab:7d:42:48:eb:c2:ce:45:f2:d1:94:3f:a1:b0:c5:
33:ff:aa:03:f5:63:a7:5a:15:df:40:28:1b:53:5c:
1c:fd:3b:d8:7c:c9:11:bc:5b:b8:82:12:3b:36:73:
cd:fd:a4:a0:18:89:e6:7f:f3:fc:80:81:df:be:fd:
bb:d6:17:d4:70:b1:9e:ba:a9:4d:be:22:6f:53:36:
75:26:00:4c:95:39:dc:07:d4:79:2d:f9:5f:10:b2:
15:7d:40:17:3a:64:81:73:45:60:ae:3e:bd:78:71:
5c:81:fd:dc:a9:f8:3e:fe:5a:04:30:c8:a2:c0:e2:
2a:4a:93:6b:52:39:78:48:d5:0f:c0:ce:b6:85:a8:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:74:3B:6C:B4:A4:CB:F2:A9:66:55:EB:2A:5D:5D:92:92:50:48
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:63:a1:eb:d7:f4:4c:37:8a:e8:c9:bd:bf:0c:a9:c6:d2:c7:
9b:08:ad:53:0f:d3:0b:86:f0:07:4a:a0:8d:dc:28:64:df:e9:
9e:43:11:6d:0b:2f:d1:16:a4:43:80:dd:dd:c0:d8:ba:98:9f:
d7:3d:77:c9:21:16:3d:1c:7b:d0:31:5d:3a:5a:58:9e:bb:b4:
55:af:a4:8b:60:2d:b7:9d:ec:c9:95:8d:f0:f1:b9:f1:a5:b7:
f0:cd:b1:89:af:68:91:a0:f2:b7:d2:1c:c5:59:34:a6:88:24:
7a:b8:e5:89:e0:f2:d1:32:b4:32:01:99:77:fa:8f:63:2a:07:
b1:5e:cc:32:04:eb:5e:3d:01:dc:1c:89:57:1d:8c:d3:40:d5:
17:68:13:45:4e:6d:29:ef:b7:43:be:38:e4:be:4f:d9:bb:c2:
c1:2e:a0:1c:f6:d7:8a:57:77:61:58:f6:e0:d7:36:7f:70:5e:
ff:a0:fb:c6:08:c2:b6:54:db:68:89:a7:db:24:4a:cc:c2:f7:
bb:ad:80:01:22:a2:6a:62:00:6e:5f:07:5f:d6:ef:87:3b:d8:
27:80:b7:48:42:f9:c0:69:e4:81:55:24:ef:8a:d2:39:0c:a2:
f0:03:9c:a2:c3:dd:61:96:63:22:77:d4:49:d2:00:6b:bd:57:
46:08:6c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 13:49:07 2024 by rpki-client on console-fra.rpki-client.org