Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft
File: 3-uby8pq1fjYmbOJCe77dZ46pg0.mft (raw, json)
Hash identifier: BsNqfOXlgg6QicrLROXjjpw44iBL5di5PyaBKot8GtE=
Subject key identifier: B1:41:6D:F7:CE:8B:94:11:76:6E:AF:AB:8E:20:88:10:04:71:5F:FF
Authority key identifier: DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
Certificate issuer: /CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Certificate serial: 018F47914150106BEF03D2984E96E2DB9C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft
Manifest number: 087B
Signing time: Sun 05 May 2024 07:04:12 +0000
Manifest this update: Sun 05 May 2024 07:04:12 +0000
Manifest next update: Mon 06 May 2024 07:04:12 +0000
Files and hashes: 1: 3-uby8pq1fjYmbOJCe77dZ46pg0.crl (hash: 3+c2dRDLa3lgEFhNVOTyhslMfGEfkYXqlbSvjHc1raU=)
2: PE34AAQM9jiDUgP7ydltWSTBO7Q.roa (hash: jMBDOBg1y6tmmZFLUyZZ+ZXvGwbuxp9x5WGQhnazZwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:91:41:50:10:6b:ef:03:d2:98:4e:96:e2:db:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfeb9bcbca6ad5f8d899b38909eefb759e3aa60d
Validity
Not Before: May 5 07:04:12 2024 GMT
Not After : May 6 07:04:12 2024 GMT
Subject: CN=b1416df7ce8b9411766eafab8e20881004715fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:09:97:35:62:9f:62:6d:5c:70:72:1c:c3:
71:7b:ba:ce:8f:03:fb:fd:15:ca:2f:8b:80:09:91:
97:e9:31:76:8f:cc:b1:48:a3:1e:83:36:75:66:d0:
53:6e:22:6c:9e:c9:fe:51:4f:c0:7d:c7:ac:3e:84:
fb:cf:a9:14:1b:08:c0:5f:d4:d0:d9:eb:43:17:58:
ab:14:23:11:4a:2a:66:7b:aa:44:6c:d2:1f:de:0a:
0a:7d:51:f2:c2:3d:ac:af:02:31:16:5d:b4:44:37:
ec:fe:30:3e:fa:17:96:24:52:1d:67:a1:d3:63:d5:
be:e7:5b:fa:62:c0:48:4a:9e:bf:d3:f1:5f:67:e6:
67:c7:31:37:a3:96:d0:02:2c:55:75:fe:09:8c:e0:
d2:4a:e9:72:2d:df:80:7a:be:25:c1:c8:72:25:da:
21:e7:c4:67:c7:bb:08:8e:60:b3:4b:76:24:72:ec:
fa:db:fa:86:cb:d7:0c:10:97:46:52:0b:78:98:7c:
5f:b5:d0:69:2f:9c:26:07:92:f4:49:82:b0:41:c2:
03:41:55:ba:e5:5e:97:21:5b:c1:b9:f6:f6:5a:21:
c8:88:2a:8f:a9:f6:24:64:6c:67:c7:d5:ec:07:0c:
ea:f1:1c:f8:5f:46:5b:24:93:bf:4b:82:79:47:30:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:6D:F7:CE:8B:94:11:76:6E:AF:AB:8E:20:88:10:04:71:5F:FF
X509v3 Authority Key Identifier:
keyid:DF:EB:9B:CB:CA:6A:D5:F8:D8:99:B3:89:09:EE:FB:75:9E:3A:A6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-uby8pq1fjYmbOJCe77dZ46pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f48fe4-b8e9-4555-865e-e73afd1222c6/1/3-uby8pq1fjYmbOJCe77dZ46pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:39:b7:20:24:78:17:18:b0:4c:a8:05:8e:5d:96:67:c3:
bb:97:51:80:81:2b:17:b8:17:ce:9d:dd:29:ea:bb:82:bb:ce:
d1:ea:12:84:1f:4c:13:56:af:7d:f4:aa:b6:46:da:9a:37:68:
63:da:86:e7:35:84:31:31:01:06:0b:35:10:51:94:22:02:76:
4f:82:aa:95:f2:aa:c3:f1:ae:24:24:50:f5:64:d4:5f:13:cb:
f0:1e:d0:48:f3:7a:3d:64:f4:40:ef:1d:92:93:7d:80:88:c8:
6f:72:16:7d:d2:10:e1:49:29:c0:60:25:8e:c4:4b:49:99:30:
13:69:54:5f:5c:23:4d:fc:c5:87:ac:7d:7a:26:04:f5:1c:30:
45:73:24:0f:91:23:bd:83:ce:5f:b0:d0:b2:5b:28:db:32:a8:
7e:35:c1:1e:50:01:23:f2:0b:94:6a:4d:2c:08:19:ba:5a:b4:
d5:e4:3e:bb:d9:89:64:73:5e:2b:11:97:6a:46:81:b3:1b:b8:
10:a4:0c:98:6c:7d:09:da:22:63:d4:3d:21:6d:a0:37:f0:09:
cd:a5:ff:2c:b8:7a:34:cd:31:32:5b:05:ae:65:12:f4:f8:f0:
b4:fe:9b:69:7f:88:15:54:d6:11:a9:5b:08:18:c9:68:06:4c:
e5:78:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:32:06 2024 by rpki-client on console-fra.rpki-client.org