Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
File: s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft (raw, json)
Hash identifier: HELNMZMe8y/+azw5m/1Koe+g4vVv8+HsR6VwqBqZHSA=
Subject key identifier: 43:F2:CA:6C:27:4F:94:A1:94:E4:F7:97:B8:9B:FB:AC:48:10:9C:05
Authority key identifier: B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
Certificate issuer: /CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Certificate serial: 019239CB56EC67A88331811D11896EBA49F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
Manifest number: 12DE
Signing time: Sat 28 Sep 2024 18:01:20 +0000
Manifest this update: Sat 28 Sep 2024 18:01:20 +0000
Manifest next update: Sun 29 Sep 2024 18:01:20 +0000
Files and hashes: 1: NY3pFhyxdDkdab1BDYRWmbkj1B0.roa (hash: UKAPeiH5GtTYqaFW8dG+ofF3KEjC2HoIijMlfPN8f34=)
2: _3TQ1sf_dK2upzvbcZsbyf-lJUU.roa (hash: wsI6qE4ODGXlR2a9W7BG1rgY9yHZ6+7VdZ3cMvz00ZI=)
3: s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl (hash: pOUkjDhNK6swHc/pmaW3yfARgGD7Z20FrjDtXi+180M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:cb:56:ec:67:a8:83:31:81:1d:11:89:6e:ba:49:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Validity
Not Before: Sep 28 18:01:20 2024 GMT
Not After : Sep 29 18:01:20 2024 GMT
Subject: CN=43f2ca6c274f94a194e4f797b89bfbac48109c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:16:0e:a9:36:6b:8f:dc:66:6e:f4:f7:1f:
7d:e5:03:1d:12:eb:f4:bd:1d:ae:11:b4:7e:8b:d2:
e1:a9:ce:be:39:51:05:1c:33:08:49:12:ed:8e:fb:
2c:35:94:8b:5d:7e:15:35:57:d6:3f:c9:fc:23:c3:
b7:91:cc:0e:c3:85:95:e1:93:6f:38:ed:8c:7f:49:
13:e7:e8:73:ac:d5:25:58:a5:d6:4f:b5:be:10:69:
b9:14:f7:6a:a6:84:66:af:9e:74:2d:b0:81:f5:95:
77:7b:4d:f2:2d:01:99:6c:e4:41:cb:3d:b0:ce:d3:
e4:b6:61:4e:21:06:31:7d:5f:41:dd:2c:0c:05:ce:
a6:31:17:bf:82:dd:0e:67:54:29:3b:c4:4c:66:43:
51:4d:8a:7d:a6:64:88:8d:d5:c3:e2:ff:47:c7:17:
6d:00:5f:23:93:ee:bc:f7:5d:3f:e9:09:50:2a:9c:
fb:1e:09:d5:64:64:0f:34:95:5e:ff:c4:6a:61:3a:
48:62:72:21:4e:a4:04:3c:d1:6f:41:73:fe:9f:77:
ca:f3:37:66:ac:93:15:7d:33:fa:78:88:ea:50:3e:
04:67:2c:23:b4:c4:87:26:72:67:0f:37:19:f2:37:
9b:72:24:44:07:b9:2d:c2:d1:c1:d0:cb:66:94:7e:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:CA:6C:27:4F:94:A1:94:E4:F7:97:B8:9B:FB:AC:48:10:9C:05
X509v3 Authority Key Identifier:
keyid:B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:15:88:af:36:0f:42:53:5a:83:f1:0f:82:e0:09:20:34:d8:
50:63:6c:45:a3:bf:0d:44:ae:93:28:f5:79:87:cc:a6:9b:c1:
8f:e6:aa:cb:24:e3:f2:86:82:b4:3a:22:0e:7c:6b:a9:13:3b:
89:6f:75:0c:9e:db:f6:8c:b1:36:17:45:91:09:5b:f6:82:70:
7f:b6:16:59:e5:5e:fa:18:66:6d:59:99:f8:21:f9:38:28:5f:
32:dc:b0:a0:b7:fe:1b:43:b5:cc:95:44:14:c1:3a:26:ba:06:
90:ce:39:7e:c4:b5:5f:31:19:6f:7a:3b:e2:07:ee:be:cc:e1:
f1:ff:a6:43:d5:3b:93:22:a3:36:de:9a:3b:27:b2:6b:2f:a7:
81:0d:42:ac:d4:f3:c2:36:6f:3d:65:48:ba:84:69:a3:78:44:
24:9e:0c:03:ec:e6:27:2c:9c:5d:99:84:a6:b8:22:cb:d2:27:
98:76:7f:97:a7:f7:a2:e3:9e:89:d8:60:96:d3:bd:4c:a1:b3:
13:86:9d:25:da:50:45:92:99:a0:d3:51:ad:5b:f3:c3:3c:ef:
0a:51:34:7b:ee:b8:7c:80:dd:f7:de:2b:44:49:fa:ad:56:28:
b7:e9:34:7c:5b:91:56:64:c9:13:54:f9:0a:19:47:07:be:7a:
0e:d1:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:59:02 2024 by rpki-client on console-ams.rpki-client.org