Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: 8NW1MhciH6dcceU3xlL3aMSRlxBpWwj7gGk9J+xyipw=
Subject key identifier: 5B:3A:B6:12:C9:E9:43:41:2C:E4:0D:02:A0:9B:92:CC:1F:87:35:72
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 019369D8AC56263A74B772F78C833E1432BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 106C
Signing time: Tue 26 Nov 2024 19:00:27 +0000
Manifest this update: Tue 26 Nov 2024 19:00:27 +0000
Manifest next update: Wed 27 Nov 2024 19:00:27 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: zzW7t/ePNyeW6ARKJok4prbgYMjzS+pqAAYbpM9Rw6E=)
2: gzT2GPqhGcrLW1MZWP3htMBFEOU.roa (hash: FS9cg6YuYh7BVDO0CPaeAjK2/06qH/cxAb5+Z0mIdzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:ac:56:26:3a:74:b7:72:f7:8c:83:3e:14:32:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Nov 26 19:00:27 2024 GMT
Not After : Nov 27 19:00:27 2024 GMT
Subject: CN=5b3ab612c9e943412ce40d02a09b92cc1f873572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:7e:02:bf:a3:27:6d:71:0f:53:81:8a:c6:
00:ba:53:fd:52:58:b5:7f:be:2f:9f:1c:e1:92:9b:
5a:99:30:c0:32:c6:fe:84:0d:59:b7:2a:3a:70:0a:
1e:c6:d0:5f:51:3b:d4:07:ca:19:5f:d3:bb:6a:a8:
b8:79:e0:f8:50:63:6e:f6:fa:f9:7e:09:7d:55:24:
c4:40:74:dc:4b:dc:09:81:69:2b:08:ee:8d:cc:b4:
ba:da:dc:bb:4c:bb:21:c5:1d:01:40:14:30:43:6a:
dc:24:f8:38:9d:7c:dc:09:3b:18:cf:9e:88:39:f1:
85:75:03:99:33:21:bf:14:28:bc:63:05:c1:69:bb:
79:08:2d:75:a4:f9:10:ce:7a:8d:5e:fe:b4:f3:ae:
63:47:7e:6d:2d:f6:69:db:9d:79:9c:10:e2:1d:cc:
64:2f:77:58:c5:6a:7e:2a:50:e9:91:92:ba:3e:e5:
fe:ad:16:f5:c6:3c:90:6b:7a:12:a4:09:cc:c7:9a:
75:87:e0:2e:95:8d:95:ed:65:93:17:de:a3:92:6a:
56:50:cf:89:07:9a:4a:f4:0c:77:b6:83:2b:54:1b:
85:a6:24:d9:a0:6e:e5:05:90:37:a7:b4:8e:e9:88:
80:58:98:52:62:96:94:59:87:0e:2d:6d:41:32:d1:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:B6:12:C9:E9:43:41:2C:E4:0D:02:A0:9B:92:CC:1F:87:35:72
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e9:c8:77:f4:94:d3:86:c0:bd:6e:cf:4c:29:f6:d2:ec:65:
b5:84:e4:f2:5f:0c:64:e5:95:78:39:9d:7f:d5:0f:75:3d:4c:
1b:f0:4a:dd:40:20:76:15:28:c7:1e:15:14:a3:38:e4:cd:bd:
d1:fa:0c:ca:09:59:6e:ee:49:b7:02:59:33:31:7f:d0:ca:db:
30:a6:ad:a5:4d:52:52:68:15:73:8b:04:cd:88:19:ea:f4:e8:
5d:9b:9d:25:3b:cc:ea:46:4c:32:1b:5a:13:ca:17:af:76:bb:
d3:b0:a4:22:1e:2e:6e:1b:42:cf:95:2d:80:e2:56:1e:6f:3b:
02:02:cf:2a:44:4f:7d:34:67:86:b8:56:8f:20:60:22:83:8d:
77:81:75:20:aa:b3:f9:69:6f:e3:5e:da:ef:52:08:c4:23:73:
74:bb:61:88:a9:be:b0:d7:d0:31:75:df:3c:a6:d6:75:a5:f8:
41:33:14:ca:03:fb:74:d8:3c:e7:9d:92:b1:07:bb:e6:3c:7a:
55:0b:d9:e2:59:ac:c3:91:2f:36:16:c6:1f:d3:af:f5:03:74:
c0:32:fc:d3:20:d8:df:14:4d:0f:d7:f3:b4:24:98:2d:a5:44:
92:f2:ed:50:28:19:1a:5e:62:65:14:0e:75:86:df:4b:6b:03:
6c:b0:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:33 2024 by rpki-client on console-fra.rpki-client.org