Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: Rbi6g3hG9c6mFr2XY5Ms8UfLN7IaBoqSk44k4kETTdQ=
Subject key identifier: 13:15:60:AB:95:29:C9:3C:CD:7F:74:CB:53:25:E9:22:B1:2C:A4:65
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 018F43B37DCFC6497DB436E8402244E17899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 07EC
Signing time: Sat 04 May 2024 13:03:07 +0000
Manifest this update: Sat 04 May 2024 13:03:07 +0000
Manifest next update: Sun 05 May 2024 13:03:07 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: 4NCMHeMECdhiZrXe1dAglj/8zmiueIKdDl0+gzlhTbU=)
2: Bjh9SPST2edzJ4kgFSKv3CDmyaI.roa (hash: rQr4vkEITPVPabJCrwu8xh1OpDjVQhnU3hAc1X69Tlo=)
3: iF7w3vACaPCBsB91DnnaQPoRIhw.roa (hash: XQ0hTOPZw7QJppxwNS+4AkyRCJ5sU51TugdCQp1lO0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:b3:7d:cf:c6:49:7d:b4:36:e8:40:22:44:e1:78:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: May 4 13:03:07 2024 GMT
Not After : May 5 13:03:07 2024 GMT
Subject: CN=131560ab9529c93ccd7f74cb5325e922b12ca465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:b2:08:b7:03:2b:4b:df:e3:5f:bf:d5:ad:
35:97:1a:89:e6:c7:e5:c7:06:b9:b1:a3:a2:c3:b8:
0e:64:0a:18:11:0d:a3:e9:57:27:eb:8b:10:84:e1:
46:f7:aa:0b:bc:9d:75:df:30:f3:9a:48:51:08:01:
f0:d8:45:33:b2:dc:c5:37:0f:a7:79:d3:36:74:5a:
bf:e1:0f:98:30:0b:1b:b9:a8:21:e5:ad:85:92:52:
d3:49:6c:a9:22:e6:91:4b:00:91:41:fb:7f:04:4d:
4b:6b:86:7d:57:d8:f2:91:c7:46:49:17:d7:c8:b7:
d6:a3:ce:f5:7d:87:0d:f3:0d:34:fe:fb:a7:5d:30:
14:b1:6b:79:64:2d:f6:ec:4c:e1:4c:fc:89:fd:39:
e6:38:ea:8d:ad:b0:60:86:5f:70:4f:1f:fb:a7:dd:
35:b6:94:6c:96:12:aa:27:90:db:d4:91:cc:70:22:
a1:3f:01:d0:2a:11:54:03:9e:40:ee:fe:96:ed:00:
c8:97:99:3e:fc:d4:a2:ab:8b:1c:75:78:86:d3:ac:
7b:19:20:49:88:b1:39:bf:e9:70:fe:b8:1b:fb:70:
cb:2a:8f:f0:af:ad:1a:b1:96:0f:26:3f:c6:f5:7d:
54:f2:9f:78:95:8c:c8:83:ee:28:e9:90:5b:a9:37:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:60:AB:95:29:C9:3C:CD:7F:74:CB:53:25:E9:22:B1:2C:A4:65
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4c:a5:eb:5f:5b:8a:1d:8c:9e:b0:2d:a7:81:18:37:66:82:
ec:9b:7a:65:46:cb:09:4e:d7:1d:90:8b:4f:04:88:4b:1a:d2:
fc:6e:0d:c9:c9:5f:c8:25:07:94:55:63:1d:06:3e:ff:91:1b:
43:bf:b8:11:b1:77:9a:3c:c3:b9:94:67:7b:4d:63:6f:ad:09:
3c:bd:f0:c1:fd:81:c6:6a:fc:83:57:ae:80:11:bb:f1:d0:5e:
95:7f:74:f9:a8:73:d0:83:38:28:be:5c:e1:f1:6c:6c:5f:2c:
95:e9:16:4c:1c:bc:b9:87:7a:53:77:32:16:a6:78:62:da:7f:
5e:5e:ef:69:0c:85:58:75:f4:8b:46:d6:41:91:8d:e8:8e:06:
c6:33:e8:e6:fe:71:58:eb:1b:ff:35:a5:b1:65:0a:ce:59:3b:
ea:90:a6:5c:49:55:ad:ce:83:2a:77:9d:83:08:f7:f3:de:60:
79:ce:34:01:bd:4b:25:c3:d3:82:a6:1c:41:0c:96:5e:4b:c0:
c6:3a:a3:d2:60:b1:02:5f:98:3c:92:8f:8c:98:b3:b1:e0:22:
af:0a:9e:85:cb:77:cd:15:a9:5e:a4:7c:db:82:e1:39:2b:ec:
23:ef:3d:50:75:82:7e:f3:da:7d:38:45:61:20:ac:e2:ed:5a:
ed:af:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:16:52 2024 by rpki-client on console-ams.rpki-client.org