Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: V9y3cmiYr7uWA82L9p2zZ3fOROhdsbRBjmZuU7HQDDo=
Subject key identifier: 6E:36:F5:F8:8C:E4:68:B1:FB:E2:86:67:08:17:2D:CB:DD:6F:FE:0A
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 019352AC3A6602869BDB71C55BA54221FCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0A06
Signing time: Fri 22 Nov 2024 07:00:38 +0000
Manifest this update: Fri 22 Nov 2024 07:00:38 +0000
Manifest next update: Sat 23 Nov 2024 07:00:38 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: E+QDnnxIijzHvVGT1Vxz5248RowQm71r/IeqrRK7wOw=)
2: Bjh9SPST2edzJ4kgFSKv3CDmyaI.roa (hash: rQr4vkEITPVPabJCrwu8xh1OpDjVQhnU3hAc1X69Tlo=)
3: iF7w3vACaPCBsB91DnnaQPoRIhw.roa (hash: XQ0hTOPZw7QJppxwNS+4AkyRCJ5sU51TugdCQp1lO0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:3a:66:02:86:9b:db:71:c5:5b:a5:42:21:fc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Nov 22 07:00:38 2024 GMT
Not After : Nov 23 07:00:38 2024 GMT
Subject: CN=6e36f5f88ce468b1fbe2866708172dcbdd6ffe0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:20:cc:57:83:12:14:d7:8d:13:72:d7:f5:
58:c8:62:fb:de:31:52:09:a0:28:0f:a8:9c:ad:5c:
35:36:a5:3d:42:ec:62:fc:2e:7a:d6:46:84:ac:d9:
04:44:18:69:ad:1f:3e:55:4d:8c:70:d9:59:17:c6:
1d:60:66:3a:f3:f9:96:3a:f9:a4:6b:11:f9:c1:6d:
a3:02:f0:fc:68:53:df:e5:de:cc:12:74:17:70:d5:
2d:41:b2:fc:67:10:e1:49:5c:97:92:3d:8c:ec:e6:
58:43:05:fa:4b:de:87:0f:b5:77:fb:0e:60:0b:a8:
80:0d:be:35:7f:cf:45:f2:ce:22:e1:bc:25:e1:07:
71:4d:62:db:2a:aa:39:f2:1c:1f:e9:3a:71:cc:a2:
9e:84:25:a1:8b:a2:f2:ca:fe:40:cf:c9:b4:ea:43:
35:f7:5c:e9:50:de:2e:da:cd:cb:eb:85:d0:ac:ee:
a6:c2:c1:43:8c:d7:d9:ec:88:61:4c:87:42:32:d4:
52:52:5e:e2:ca:14:fd:3e:19:d4:0d:a2:e0:70:84:
55:99:73:51:dc:74:29:3e:07:b6:0d:92:35:85:97:
62:50:f5:47:71:10:a7:cc:77:03:d7:02:2e:63:fb:
e0:31:1b:84:8b:ca:67:85:e7:62:61:89:3a:d2:8a:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:36:F5:F8:8C:E4:68:B1:FB:E2:86:67:08:17:2D:CB:DD:6F:FE:0A
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a0:3a:a8:63:2b:2e:c4:d6:e0:a5:65:7b:69:e7:6b:8d:c5:
45:85:13:05:c3:c4:d9:a9:b6:a7:4b:86:d8:9f:66:55:fd:22:
ba:1f:58:87:d2:95:03:a5:6e:dd:d2:54:9a:f2:7c:8d:c5:7d:
2d:24:c6:71:ca:27:6a:56:71:53:c1:43:72:ba:64:9a:6a:71:
9e:1d:52:b5:26:f1:35:e9:10:04:0d:f5:f6:db:36:4c:f2:e4:
f6:7a:2d:07:db:7e:02:b6:32:c9:58:a8:17:8a:b5:39:44:99:
3d:c1:7c:c8:fb:d8:b0:e3:b5:76:51:ee:2f:93:ab:9e:72:63:
ee:ba:27:33:d8:7c:94:da:f5:f3:b0:37:d8:8d:c2:08:2c:9c:
46:5f:d2:6c:2b:91:80:b6:fe:7d:7d:cb:f8:94:45:64:c7:0f:
4c:00:25:f1:ed:86:c5:07:8c:63:cb:2d:aa:73:98:49:ec:83:
0b:de:bb:37:46:86:91:9e:82:f0:0c:bd:5d:f6:3f:62:6c:ee:
64:96:00:e7:b7:ec:43:ee:8a:55:2a:4e:ff:35:e5:d2:8b:87:
fd:3a:36:00:ea:ed:1e:68:ea:5e:e3:d2:41:3c:80:51:99:f1:
14:95:51:57:f5:eb:a9:eb:5c:87:ec:39:ef:a9:08:fd:47:fe:
bd:60:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:47 2024 by rpki-client on console-ams.rpki-client.org