Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
File: s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft (raw, json)
Hash identifier: 5CVzwi26+z26lctBHIr4biOSASlKf0BHVX8f1ZCpIuI=
Subject key identifier: 73:B5:44:DA:86:32:61:85:34:57:F5:8D:F0:21:2B:FB:32:1F:81:77
Authority key identifier: B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
Certificate issuer: /CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Certificate serial: 0193633206F07E4AC40ED0F6CA8442C3DB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
Manifest number: 1378
Signing time: Mon 25 Nov 2024 12:00:42 +0000
Manifest this update: Mon 25 Nov 2024 12:00:42 +0000
Manifest next update: Tue 26 Nov 2024 12:00:42 +0000
Files and hashes: 1: NY3pFhyxdDkdab1BDYRWmbkj1B0.roa (hash: UKAPeiH5GtTYqaFW8dG+ofF3KEjC2HoIijMlfPN8f34=)
2: _3TQ1sf_dK2upzvbcZsbyf-lJUU.roa (hash: wsI6qE4ODGXlR2a9W7BG1rgY9yHZ6+7VdZ3cMvz00ZI=)
3: s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl (hash: gC46YEKfBW9v/aAexNLYVHSA/Sa9pcuWgw8+BOlfMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:32:06:f0:7e:4a:c4:0e:d0:f6:ca:84:42:c3:db:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fddf701dd74ba99ac1f47b6767ef44f1a81077
Validity
Not Before: Nov 25 12:00:42 2024 GMT
Not After : Nov 26 12:00:42 2024 GMT
Subject: CN=73b544da863261853457f58df0212bfb321f8177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:b3:dc:a1:b9:ec:79:47:ce:26:d3:f4:cd:
0e:55:18:59:7a:ed:40:03:d9:d2:e2:64:13:3c:5a:
78:e1:92:e4:7f:f4:02:26:62:a7:91:a7:cf:51:19:
07:c1:1e:a1:94:3e:f8:f8:1b:c8:a3:c1:b1:88:5f:
56:f1:35:86:39:3c:4d:58:22:80:d4:b0:75:85:f6:
d7:81:fe:3b:e2:c2:ef:a0:cc:37:d8:3f:e8:1c:61:
93:fb:b5:3b:c5:3a:de:2c:23:f1:05:28:22:a4:23:
25:ad:dd:37:b3:76:ff:47:60:61:dd:cb:6d:c6:42:
2c:70:7c:2a:dd:76:2c:07:b2:f4:10:8f:12:3d:9c:
6c:dc:08:aa:07:a5:7a:a5:d9:a6:0c:69:4c:21:05:
8e:c5:cb:2e:08:24:08:e9:6d:5e:f6:49:34:5b:41:
35:04:57:8e:11:59:a2:41:5a:ad:5a:64:f1:11:54:
3d:b6:3e:44:fd:0d:87:58:9c:38:de:50:d9:99:00:
9b:97:c8:3b:c8:fb:b2:00:db:76:dd:cd:79:d5:1e:
ec:af:c8:14:75:e5:7a:63:77:d3:9a:1a:07:59:58:
75:22:b8:5d:c2:f7:e2:12:07:54:ee:6d:aa:9e:b0:
f6:1d:a5:19:aa:30:1e:74:7f:99:7d:ce:ae:65:09:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:44:DA:86:32:61:85:34:57:F5:8D:F0:21:2B:FB:32:1F:81:77
X509v3 Authority Key Identifier:
keyid:B3:FD:DF:70:1D:D7:4B:A9:9A:C1:F4:7B:67:67:EF:44:F1:A8:10:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_3fcB3XS6mawfR7Z2fvRPGoEHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/734f48-6755-4fee-bd46-3764beeaa1b2/1/s_3fcB3XS6mawfR7Z2fvRPGoEHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c8:21:12:6d:94:b5:a7:60:29:69:c5:36:06:99:02:e6:45:
37:7d:43:d1:a9:e3:e6:f8:46:6a:eb:33:74:5d:dc:cb:b9:6d:
e8:60:85:81:05:0e:73:57:a6:4f:28:da:2b:25:8d:b1:63:4a:
61:d3:34:dc:ea:2f:2e:e1:13:21:70:78:e6:70:f7:95:c8:ce:
af:cf:b5:3f:e2:cb:ba:b4:6d:28:59:78:c4:19:d3:43:67:70:
47:53:c1:76:db:f0:4b:c2:bf:40:25:ba:08:79:94:ee:65:ca:
89:79:a1:77:be:eb:7b:cf:4f:ef:26:fd:2f:d1:21:93:de:3d:
8c:14:f1:05:5a:ff:0e:a6:58:d9:7f:c1:9e:cf:7e:4b:04:3e:
c3:45:58:d5:9f:26:87:ad:2e:ef:20:3f:58:12:56:a9:69:c6:
b1:72:ea:9e:6c:fe:ef:70:75:41:15:dd:56:5c:95:0c:11:9d:
fe:20:f5:59:1f:3e:c3:15:64:3a:0e:7d:98:df:4d:d6:25:bd:
8c:fc:01:98:01:bb:9d:58:7b:51:3a:24:1f:a7:cb:3d:fa:1e:
9d:57:5c:69:ff:f9:85:fe:eb:55:43:2d:b2:f6:76:84:10:c1:
36:c5:bb:ef:fd:3e:b9:00:de:df:3f:e3:fe:f8:75:44:59:4a:
ba:d8:e8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNjMgbwfkrEDtD2yoRCw9s5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZmRkZjcwMWRkNzRiYTk5YWMxZjQ3YjY3NjdlZjQ0ZjFh
ODEwNzcwHhcNMjQxMTI1MTIwMDQyWhcNMjQxMTI2MTIwMDQyWjAzMTEwLwYDVQQD
Eyg3M2I1NDRkYTg2MzI2MTg1MzQ1N2Y1OGRmMDIxMmJmYjMyMWY4MTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn6z3KG57HlHzibT9M0OVRhZeu1A
A9nS4mQTPFp44ZLkf/QCJmKnkafPURkHwR6hlD74+BvIo8GxiF9W8TWGOTxNWCKA
1LB1hfbXgf474sLvoMw32D/oHGGT+7U7xTreLCPxBSgipCMlrd03s3b/R2Bh3ctt
xkIscHwq3XYsB7L0EI8SPZxs3AiqB6V6pdmmDGlMIQWOxcsuCCQI6W1e9kk0W0E1
BFeOEVmiQVqtWmTxEVQ9tj5E/Q2HWJw43lDZmQCbl8g7yPuyANt23c151R7sr8gU
deV6Y3fTmhoHWVh1IrhdwvfiEgdU7m2qnrD2HaUZqjAedH+Zfc6uZQmIgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO1RNqGMmGFNFf1jfAhK/syH4F3MB8GA1UdIwQY
MBaAFLP933Ad10upmsH0e2dn70TxqBB3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc18zZmNCM1hTNm1hd2ZSN1oyZnZSUEdvRUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83MzRmNDgtNjc1NS00ZmVlLWJkNDYt
Mzc2NGJlZWFhMWIyLzEvc18zZmNCM1hTNm1hd2ZSN1oyZnZSUEdvRUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83MzRmNDgtNjc1NS00ZmVlLWJkNDYtMzc2NGJlZWFhMWIy
LzEvc18zZmNCM1hTNm1hd2ZSN1oyZnZSUEdvRUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMghEm2U
tadgKWnFNgaZAuZFN31D0anj5vhGauszdF3cy7lt6GCFgQUOc1emTyjaKyWNsWNK
YdM03OovLuETIXB45nD3lcjOr8+1P+LLurRtKFl4xBnTQ2dwR1PBdtvwS8K/QCW6
CHmU7mXKiXmhd77re89P7yb9L9Ehk949jBTxBVr/DqZY2X/Bns9+SwQ+w0VY1Z8m
h60u7yA/WBJWqWnGsXLqnmz+73B1QRXdVlyVDBGd/iD1WR8+wxVkOg59mN9N1iW9
jPwBmAG7nVh7UTokH6fLPfoenVdcaf/5hf7rVUMtsvZ2hBDBNsW77/0+uQDe3z/j
/vh1RFlKutjokA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:27:51 2024 by rpki-client on console-fra.rpki-client.org