Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: LAx702qkrJ38Fo8fZtTR/5nxhC9ATDAY4pgHZOEO7xo=
Subject key identifier: 37:DE:66:86:64:B4:C0:A1:F6:FF:61:28:0D:52:A9:E9:1D:C8:FB:52
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 018F16A1579A9DAA68933D017A895D33DC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 0E2E
Signing time: Thu 25 Apr 2024 19:00:23 +0000
Manifest this update: Thu 25 Apr 2024 19:00:23 +0000
Manifest next update: Fri 26 Apr 2024 19:00:23 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: 48+raX22nqHmYWL0UtKnsj3UX6xNsALgnEf+n6wLjKE=)
2: zxFAkvTFlooty5g1QbZklXRoiMQ.roa (hash: GmW+OnLhClY7rPsE7l7p/A234dnu0yaIlx080ERkxGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:16:a1:57:9a:9d:aa:68:93:3d:01:7a:89:5d:33:dc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Apr 25 19:00:23 2024 GMT
Not After : Apr 26 19:00:23 2024 GMT
Subject: CN=37de668664b4c0a1f6ff61280d52a9e91dc8fb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:fe:37:ed:3c:e0:81:98:37:a5:a0:40:a1:
d3:0f:5f:43:aa:94:36:d4:5b:8d:ef:d4:51:a2:19:
4c:6e:da:38:da:86:15:5b:a4:35:f7:94:d8:80:e0:
8f:52:34:65:36:11:7a:d6:37:a5:1b:7e:d8:c8:3d:
f0:5f:04:87:3d:d8:91:65:8a:cc:6a:b0:cf:93:49:
7a:0b:4d:a2:2e:c4:89:57:f6:5b:96:04:2a:df:e5:
4b:ab:1d:1e:a1:45:0b:cd:8a:9a:64:06:a3:99:80:
ee:1a:e2:72:5b:43:2d:08:14:55:c0:51:e9:b6:5a:
58:e0:05:ba:98:7e:62:b9:17:bb:8b:3f:19:4f:18:
5e:53:65:af:42:93:6e:00:43:d8:ec:8b:e9:7e:25:
8a:4b:a6:39:72:0b:e2:42:16:5d:93:82:5b:03:cf:
37:92:1a:8c:ae:47:14:85:69:8e:e5:fb:1f:29:14:
63:8e:4c:a6:0d:07:f8:31:34:1b:f1:e1:42:51:d5:
79:1b:71:d8:e2:12:20:14:44:f7:a3:b5:60:bc:bf:
df:8d:8d:f0:d2:3c:3d:17:75:e7:6f:c4:d8:f6:d5:
ad:28:02:42:81:b3:41:a8:60:32:a8:7f:36:e2:bd:
20:9c:e9:55:8c:4f:f3:99:ab:a4:35:87:d1:f5:7e:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DE:66:86:64:B4:C0:A1:F6:FF:61:28:0D:52:A9:E9:1D:C8:FB:52
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:29:31:96:4d:54:ef:bb:9d:03:ba:0c:85:e0:f6:53:82:f9:
ba:e6:2c:7e:34:6a:27:bd:5c:d0:4a:5f:3e:5f:e6:37:28:af:
7c:05:3a:e3:47:68:00:f7:13:b1:b2:01:60:54:31:5f:3d:88:
e0:0d:0b:ec:84:7f:d5:c6:0c:1a:35:b1:4e:3f:cc:74:d4:42:
27:ae:7d:0f:4c:07:c3:cf:c2:17:a9:33:28:a3:b0:ec:e3:68:
41:14:3d:c1:67:2c:af:57:9e:e2:1b:9f:01:2e:e9:e7:20:55:
fa:0b:1a:8d:1b:44:5f:d8:7a:4b:7c:3a:cc:44:45:71:d5:a9:
89:f5:be:58:18:57:5b:08:16:8d:ba:5b:0d:1b:b2:66:5c:f5:
47:22:bf:8c:eb:ba:4f:9f:69:ce:7e:9d:32:5f:b3:8f:ac:d9:
f7:85:fa:47:ba:98:cf:f4:6a:09:63:92:c7:12:1b:49:bd:b3:
d6:75:f8:d5:75:b8:45:f2:2d:1c:5b:ab:2a:1e:28:39:2b:02:
35:37:68:c9:b2:70:79:44:fe:d5:4e:38:7d:fb:0d:b8:0a:a9:
93:27:b1:2a:da:f3:d3:96:1f:5a:90:47:ae:19:18:fe:be:ce:
f1:6a:e4:95:b4:36:70:3c:9b:5c:fc:31:08:88:15:a1:8a:a9:
a0:31:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:15:01 2024 by rpki-client on console-fra.rpki-client.org