Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: 0fOZ6Emrkwj2/kaA9rIe0rvhLA+3LVFGH0PF+J54R6E=
Subject key identifier: 64:A8:75:12:48:7C:68:0A:86:B1:D8:4E:13:41:33:49:4C:4F:F8:70
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019365208DB0C59E0C9B32AFCDA8070ED6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1354
Signing time: Mon 25 Nov 2024 21:00:52 +0000
Manifest this update: Mon 25 Nov 2024 21:00:52 +0000
Manifest next update: Tue 26 Nov 2024 21:00:52 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: pnGhmK27uLwUByNvG1h1KuMjnFipQrh/hyIItWEDORc=)
2: vWwfKg1R55qPo_WXp6QWKSxEteo.roa (hash: uPSqTyXEuzH8xOcPvPj/iEPRdc7Sj5UZM9ghFiSMgL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:20:8d:b0:c5:9e:0c:9b:32:af:cd:a8:07:0e:d6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Nov 25 21:00:52 2024 GMT
Not After : Nov 26 21:00:52 2024 GMT
Subject: CN=64a87512487c680a86b1d84e134133494c4ff870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:28:e1:7a:c9:3d:fa:18:96:77:2d:1f:9d:
3c:c3:87:40:3d:54:8f:73:27:a0:8a:0b:4a:5b:08:
2d:e2:d6:dc:1b:35:e3:99:82:c0:69:f2:ac:a0:c1:
6c:1d:cf:35:b5:a2:e4:00:40:09:3e:84:83:af:0d:
c7:0a:52:1d:2b:3b:4a:2a:b9:0a:ef:a6:67:3c:8c:
47:de:c2:07:c0:9b:a6:6c:6a:e6:7e:9a:e7:cd:26:
11:51:dd:81:0e:39:e4:dc:3c:6b:d7:6c:9e:f3:43:
56:66:11:24:f8:92:94:84:27:ab:06:41:6e:bf:fc:
8a:80:3b:f9:48:1d:c6:f3:7c:4a:26:c7:b5:7b:6b:
0f:bb:ba:d0:9b:ef:91:13:6f:d9:e4:25:46:c9:3c:
58:57:27:ee:2c:d6:b9:ea:7e:f3:10:4c:46:31:c9:
55:07:06:bc:75:5b:32:23:d1:d8:0e:1b:42:62:9a:
d1:35:77:2c:80:c7:83:f5:88:36:d5:8a:96:a0:6b:
04:ef:6e:ac:d5:82:1f:1f:ff:78:8f:7e:9f:5a:5e:
d7:5d:f2:49:e0:84:1d:85:03:34:13:03:4f:0a:2f:
ce:41:2e:1f:aa:2f:b7:00:9c:ae:ad:c0:54:b9:e2:
14:87:d5:b1:fb:5d:dd:76:94:7c:41:c6:c3:63:7e:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:75:12:48:7C:68:0A:86:B1:D8:4E:13:41:33:49:4C:4F:F8:70
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6b:94:c0:3b:ac:15:74:0d:79:9d:fe:ed:ea:c2:f7:96:e5:
44:99:63:a4:f5:b6:ea:58:23:f8:ed:62:36:ab:bc:af:fa:1d:
e7:ad:30:27:6a:81:26:68:a6:66:d0:8d:4d:d3:0f:0c:36:de:
94:e0:3e:0d:f6:90:62:f9:81:f1:e7:e1:a1:da:25:2b:2e:00:
22:cc:ed:bf:91:40:f8:88:e8:19:5e:a4:a3:5f:07:12:b4:db:
58:c1:9a:ff:0d:b0:a3:7f:a5:53:e0:01:fb:42:f3:3d:89:da:
f7:e8:6d:b2:2c:9d:bf:64:f3:b8:92:3a:db:67:34:87:52:2a:
2d:03:17:bf:23:c4:db:ce:84:f0:6d:ee:70:f1:37:5e:54:ea:
7a:90:60:8b:2d:75:ab:3e:39:f7:ac:92:3f:fe:cf:cb:f8:7f:
73:74:fc:b1:58:58:74:09:cb:fd:f4:71:66:56:bf:7f:7d:39:
36:0c:b2:83:07:19:9d:7b:53:0d:f6:54:68:ac:d5:34:3f:a3:
e7:21:cb:df:cf:5a:65:06:c1:8b:af:e2:f3:c8:ec:e0:6a:c6:
07:15:33:3f:0e:d1:32:ea:75:2a:82:5e:aa:56:87:8f:82:93:
07:4e:db:37:10:27:d1:b7:03:0a:f3:e2:93:5c:73:62:0c:9e:
f5:4f:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:23:33 2024 by rpki-client on console-ams.rpki-client.org