Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: iGqT3TZSNquLXKHbXqa/n2DbimmWkKBC8SgERQtprmk=
Subject key identifier: 0C:D0:5B:A8:4E:D0:1C:BD:A3:94:05:05:45:F6:10:5C:E9:A9:59:EC
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 0191FB22FF34D0AF9D2261CACC4A50302121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 0155
Signing time: Mon 16 Sep 2024 14:01:00 +0000
Manifest this update: Mon 16 Sep 2024 14:01:00 +0000
Manifest next update: Tue 17 Sep 2024 14:01:00 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: RVbpa0pmxsIiT5ZLTI461C994VCQpcjqH2G07FJjg4Y=)
2: DGOE8mQqEucnyQcMiYjeM-SNgRc.roa (hash: yyjBgV1n7kVe8qeTLhROeFsY2QAzyLNUnYM8Bg3GG18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:22:ff:34:d0:af:9d:22:61:ca:cc:4a:50:30:21:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Sep 16 14:01:00 2024 GMT
Not After : Sep 17 14:01:00 2024 GMT
Subject: CN=0cd05ba84ed01cbda394050545f6105ce9a959ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:56:d8:89:89:dc:06:e8:e7:f8:e5:a2:30:
e5:ae:a1:c5:01:67:93:0d:2a:7a:7e:75:98:62:da:
ad:ba:4e:88:df:04:4a:be:7a:c2:d6:75:07:61:54:
b6:8d:0e:d5:19:83:47:08:dc:e5:0f:ed:76:be:ed:
61:ab:8a:4e:b9:f4:b2:d9:e2:17:2e:cb:54:d7:48:
a3:54:f8:da:a9:a9:96:2f:3e:ca:e0:e8:50:fd:96:
38:ae:d7:4b:8a:78:95:fd:5e:a1:25:42:49:2c:c3:
f6:b0:a4:5f:e4:01:86:a5:af:4e:78:8d:51:27:52:
19:0a:a4:55:8b:91:32:d7:cd:12:9d:73:58:5e:85:
23:c7:4e:75:dc:5d:cd:7d:50:b4:6e:e3:e2:05:3b:
8a:2a:e3:69:0e:40:52:b7:b5:5c:f1:38:70:70:4b:
80:7b:dc:b4:04:e4:1a:77:f5:04:6b:30:25:a8:2a:
c4:ef:21:63:6f:f9:2e:97:d8:97:ac:fc:37:18:ba:
59:4c:97:4b:91:0d:97:a1:b0:23:1b:0d:72:62:d6:
9d:8d:97:d3:62:2a:f1:03:91:bd:67:78:6c:2f:53:
64:cc:ae:00:89:ef:7d:f2:a7:ee:2b:bf:a2:8e:bd:
c3:f6:16:5f:67:bf:0e:d1:10:f6:50:84:79:00:a7:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:5B:A8:4E:D0:1C:BD:A3:94:05:05:45:F6:10:5C:E9:A9:59:EC
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:92:aa:47:43:c0:6c:1a:e4:4b:89:7b:e3:0f:de:b6:53:38:
de:1c:74:6d:0f:ae:31:5f:34:a3:7a:70:ea:13:48:42:d5:6e:
7c:e2:bc:26:01:2d:e4:21:db:2f:aa:ed:8f:fc:d3:54:fa:32:
1e:c6:7f:2c:a7:2f:fc:90:29:dc:dd:0c:f3:f2:bb:43:6d:06:
74:e7:69:03:d0:cc:09:d2:d2:ec:b3:5d:fe:a5:ba:d5:92:2f:
fc:cc:52:a6:ff:5d:18:4d:8b:e6:0e:12:9c:e9:46:33:3f:5f:
85:d5:c0:71:0d:4e:cf:7e:bf:37:90:08:81:0e:ae:9c:81:15:
e0:58:a8:00:21:23:cc:65:04:94:d3:c3:a6:ed:48:c1:91:de:
ec:d0:9f:31:8d:8c:e5:87:58:88:b7:5f:fe:41:6a:d3:09:02:
0c:6d:7e:83:9b:4d:a6:5a:d5:82:49:36:89:1d:c5:e1:b1:e5:
74:f3:f5:01:1d:72:ed:66:e0:3e:fb:27:b0:bc:43:a1:f8:4f:
d2:45:74:6d:1c:5e:2d:21:13:d9:73:56:fd:01:14:cf:5a:9d:
d4:f4:0b:d0:a5:f6:b2:7c:fe:fe:d3:4e:64:d9:48:59:05:41:
d0:7e:38:60:57:92:6e:b5:9d:94:10:3e:f2:52:97:37:69:0b:
e5:a4:0d:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH7Iv800K+dImHKzEpQMCEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZDI0NmUxODMwNTY3YWIxMTUyMzFkYjc3NWYyODc5ZDk5
YWYwYTAwHhcNMjQwOTE2MTQwMTAwWhcNMjQwOTE3MTQwMTAwWjAzMTEwLwYDVQQD
EygwY2QwNWJhODRlZDAxY2JkYTM5NDA1MDU0NWY2MTA1Y2U5YTk1OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8tW2ImJ3Abo5/jlojDlrqHFAWeT
DSp6fnWYYtqtuk6I3wRKvnrC1nUHYVS2jQ7VGYNHCNzlD+12vu1hq4pOufSy2eIX
LstU10ijVPjaqamWLz7K4OhQ/ZY4rtdLiniV/V6hJUJJLMP2sKRf5AGGpa9OeI1R
J1IZCqRVi5Ey180SnXNYXoUjx0513F3NfVC0buPiBTuKKuNpDkBSt7Vc8ThwcEuA
e9y0BOQad/UEazAlqCrE7yFjb/kul9iXrPw3GLpZTJdLkQ2XobAjGw1yYtadjZfT
YirxA5G9Z3hsL1NkzK4Aie998qfuK7+ijr3D9hZfZ78O0RD2UIR5AKfV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzQW6hO0By9o5QFBUX2EFzpqVnsMB8GA1UdIwQY
MBaAFNzSRuGDBWerEVIx23dfKHnZmvCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2Qt
YTQxZTYyMGJhM2ViLzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2QtYTQxZTYyMGJhM2Vi
LzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpKqR0PA
bBrkS4l74w/etlM43hx0bQ+uMV80o3pw6hNIQtVufOK8JgEt5CHbL6rtj/zTVPoy
HsZ/LKcv/JAp3N0M8/K7Q20GdOdpA9DMCdLS7LNd/qW61ZIv/MxSpv9dGE2L5g4S
nOlGMz9fhdXAcQ1Oz36/N5AIgQ6unIEV4FioACEjzGUElNPDpu1IwZHe7NCfMY2M
5YdYiLdf/kFq0wkCDG1+g5tNplrVgkk2iR3F4bHldPP1AR1y7WbgPvsnsLxDofhP
0kV0bRxeLSET2XNW/QEUz1qd1PQL0KX2snz+/tNOZNlIWQVB0H44YFeSbrWdlBA+
8lKXN2kL5aQN4A==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:20:44 2024 by rpki-client on console-ams.rpki-client.org