Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier: PjRC1UQlERCHzb39R7Z2Vmmum8hECvFYY5hUGd94As4=
Subject key identifier: D5:ED:3A:5E:C0:08:C9:E4:FE:17:FD:A3:E5:B4:7F:92:A8:11:36:52
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 018F4790D9E6F61CE8CC603ACA53D2435735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number: 0E3C
Signing time: Sun 05 May 2024 07:03:46 +0000
Manifest this update: Sun 05 May 2024 07:03:46 +0000
Manifest next update: Mon 06 May 2024 07:03:46 +0000
Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: 5hmi+CjgHEz/NofIh2lGGWTF+pYDOQoC/osp2vTqGq0=)
2: 9vJV-vUG5dQ5wRzlE49f9P8yrQU.roa (hash: vYq7D8kFcdFwH8ghRnUVyhVbOZEBPw6oCgGMnHRIKxU=)
3: a_gv73vBHvW6M1OSN4SSwBehRck.roa (hash: NSlmlB5Cr/QqLyre0OJhz5KgGrs46zJK8Bm4bMW12f4=)
4: pB_HPlW23Z69X5i2VGV2qJTSv4k.roa (hash: oNMIkjOXQQKfUvSob35+Iidj/IODsYhsYio+iSepE2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:90:d9:e6:f6:1c:e8:cc:60:3a:ca:53:d2:43:57:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: May 5 07:03:46 2024 GMT
Not After : May 6 07:03:46 2024 GMT
Subject: CN=d5ed3a5ec008c9e4fe17fda3e5b47f92a8113652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:1c:8e:16:5d:4f:2d:c6:5e:d9:78:3b:61:
cb:97:c3:3b:41:ba:23:b5:eb:4a:90:c6:3a:39:e8:
6e:9b:4e:d8:76:df:e1:9c:28:36:60:9b:12:48:f1:
af:db:4c:06:76:92:97:0a:f2:3e:72:23:3d:05:94:
4d:90:3d:70:4d:e9:37:36:9d:41:15:00:2d:1c:e5:
aa:f2:37:b7:96:a1:a5:0b:3c:e2:e1:d2:1f:ef:55:
1f:2f:6f:bc:60:fc:44:ea:81:88:db:55:ce:f8:94:
f2:c9:ae:ea:20:5e:07:68:1f:e1:98:77:44:af:41:
22:49:9e:99:5a:1b:c3:96:50:1c:34:c7:af:2c:51:
b3:f1:53:1f:e2:ce:f7:a1:3d:1e:23:df:43:91:2b:
98:19:e4:da:61:a1:4b:a3:9f:fb:50:cd:9b:fd:52:
b7:9c:87:2c:a0:1c:0a:e3:19:39:5d:fb:a1:20:4a:
44:00:95:25:e0:1d:0b:6c:b8:29:4f:81:58:95:8b:
e0:4d:04:a9:78:f8:81:03:f6:cc:6f:26:b5:86:55:
eb:d0:16:8a:f3:b5:68:a0:a9:40:7f:d2:74:6c:62:
b2:93:61:7c:32:12:7d:33:3d:be:b8:6d:57:64:fa:
6f:2c:c3:f0:64:d8:d2:e4:44:f1:ca:2e:9a:18:ba:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:3A:5E:C0:08:C9:E4:FE:17:FD:A3:E5:B4:7F:92:A8:11:36:52
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5f:3b:e1:50:e1:8b:ca:e5:57:79:c0:2f:39:3b:7b:2c:ed:
16:7c:da:d4:b0:b8:6a:ee:f5:79:5b:8c:47:e8:60:ae:ce:ce:
1f:ed:be:98:13:00:72:b8:a3:92:e2:c4:91:92:23:4c:a5:d7:
6f:47:26:c9:12:17:3c:d4:c6:26:cc:5e:1c:9c:7a:30:a7:95:
3c:3b:2d:0d:51:71:eb:d2:e8:a2:45:c7:03:01:63:f4:08:b6:
b0:04:a7:cf:20:56:5f:3b:c1:46:3a:a0:99:b0:15:bb:a8:c9:
29:ae:1c:a7:1d:fd:27:4b:a0:d4:ff:73:28:0d:e8:95:6f:41:
39:78:d5:38:b6:1f:bd:b5:78:83:4c:07:25:5c:b3:9d:63:2d:
5f:b3:d5:f4:3a:59:9a:8d:63:b9:fc:6e:65:55:a5:1d:c5:17:
71:af:2c:24:4e:b5:27:02:9a:75:e6:e2:86:e2:cf:1a:11:8f:
c6:50:83:68:bb:4d:0c:09:99:f2:e4:7b:45:10:db:b0:a5:e2:
8b:7f:5c:fe:e5:3e:c5:7f:53:89:0d:d8:fe:7f:3b:09:18:50:
39:e4:c5:db:31:f0:aa:fc:29:9a:3f:37:36:c8:d4:15:e5:da:
2a:5e:e2:65:a3:1e:b0:bc:35:f6:b6:00:d0:54:58:39:89:fb:
f1:67:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:29:33 2024 by rpki-client on console-fra.rpki-client.org