Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: X2VxcOriFSDyivvLqc19nd7GPhI0z2D3UhG9/fPfRDQ=
Subject key identifier: 20:89:70:1D:3A:EB:A7:63:19:32:C3:F9:07:AE:69:09:EB:6F:08:83
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 019406B3F27CA76DB36B06804E2381036A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 13CB
Signing time: Fri 27 Dec 2024 06:00:43 +0000
Manifest this update: Fri 27 Dec 2024 06:00:43 +0000
Manifest next update: Sat 28 Dec 2024 06:00:43 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: WRI9fmQOv+rQ4oeGuEiiuoF4X9chJINTUOj7HfxaoWM=)
2: K_QaNOCd3y4BWCpscOH5Sp8PXrY.roa (hash: eVzzQV/1CH7yS24h91yBcbFSiCxpwKrwjOPkfQDI8WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:f2:7c:a7:6d:b3:6b:06:80:4e:23:81:03:6a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Dec 27 06:00:43 2024 GMT
Not After : Dec 28 06:00:43 2024 GMT
Subject: CN=2089701d3aeba7631932c3f907ae6909eb6f0883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:3f:bb:1f:67:68:f4:38:9a:b0:6e:e4:46:
74:a1:9d:4d:e0:3e:fc:2f:45:42:de:cc:df:0f:bb:
23:c7:63:fc:4a:24:7e:34:f9:a1:6e:b8:18:d9:96:
96:0a:4f:a3:ff:65:c9:22:da:3b:8a:7a:1d:5d:a1:
cc:6e:be:36:f2:4b:31:e8:c3:35:a2:a9:bb:dd:8a:
a6:c5:57:4a:54:a4:90:45:ea:36:e8:18:d3:10:15:
10:69:b3:23:79:ed:62:2b:f8:4a:5f:67:27:2b:f5:
60:89:40:c3:d5:97:ed:b8:de:35:40:74:a2:59:eb:
f6:3d:d4:ee:95:00:41:98:72:4e:11:ef:e6:af:d4:
e0:84:00:9a:30:ac:f9:9c:3d:9d:69:35:50:1c:d9:
b1:48:d2:76:57:70:09:ce:7c:8f:69:a8:f4:eb:d8:
9d:90:34:9d:62:2d:a6:60:40:5a:62:a9:bd:02:6d:
6a:31:5e:c2:c0:87:2b:c3:8e:f6:50:36:62:43:d2:
03:65:4d:c3:e0:ee:5b:b2:e0:e1:fa:2b:4a:f5:92:
bb:0a:61:d3:7a:44:55:59:7c:42:cf:b4:e0:d6:aa:
d9:83:fc:59:8b:51:2c:ae:56:92:70:3a:97:97:c6:
5e:bc:4f:54:73:a0:b7:ae:38:0c:b8:8c:dc:94:c5:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:89:70:1D:3A:EB:A7:63:19:32:C3:F9:07:AE:69:09:EB:6F:08:83
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3b:b8:fc:80:98:84:a4:9b:1a:1e:77:05:33:80:eb:3d:ba:
96:b4:fb:a0:e4:85:5c:21:54:b9:db:29:1c:8c:6f:34:65:45:
a0:51:2b:da:ec:69:34:5b:2f:96:b2:7c:d8:79:d7:16:a1:b3:
74:54:4e:dd:6c:b6:61:bc:7b:f6:39:94:f9:50:4e:be:ae:ce:
6f:ca:b0:93:e5:fe:ae:22:59:10:6b:e8:c4:65:09:34:5d:b4:
75:11:3d:86:57:9e:a6:41:e1:93:b9:0e:65:48:b7:ea:f3:79:
a0:2b:13:fa:aa:cc:51:19:75:b2:75:14:32:4f:9f:e7:13:d4:
27:a8:0a:49:84:98:a2:48:20:e6:9e:34:f2:82:aa:06:a6:9a:
74:d2:b5:27:23:f7:e9:b7:cb:b6:7c:21:2f:54:68:fe:c6:3c:
ff:c0:f1:01:cd:03:53:7d:e5:69:30:9b:e5:8f:fd:d4:44:d9:
1b:c9:9a:12:f4:77:8c:64:1e:1f:c3:81:1d:af:c9:2a:05:da:
c3:ee:08:49:0d:10:46:cd:72:b8:e1:09:85:96:8f:c0:67:20:
06:75:4d:03:18:3b:d0:f0:7e:7e:e9:8d:36:fe:a6:9b:c3:1e:
b7:92:ce:9d:7d:4d:b5:d4:26:5a:3f:70:2f:21:59:c1:98:fe:
91:90:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:48:19 2024 by rpki-client on console-ams.rpki-client.org