Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: IEmrs+BdrXnvHf0eln/IsKH4+Krc79Ky00Vaoog5pmQ=
Subject key identifier: 2A:F8:3A:B9:E3:BB:63:CF:C6:06:2B:54:46:8E:CF:B3:EE:C0:11:C7
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 0193549C7388B6FFB41DE4ADEA49710C450D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0302
Signing time: Fri 22 Nov 2024 16:02:39 +0000
Manifest this update: Fri 22 Nov 2024 16:02:39 +0000
Manifest next update: Sat 23 Nov 2024 16:02:39 +0000
Files and hashes: 1: 1ohC5SImO6uA6qXlh4fSsvjaoWw.roa (hash: Yb5e20vz0C/vVixtxyWPNd0Jz+e+uTnxB8RA6FMOT3o=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: bzCFbiQGxohpVkHHSubPrS3CieQZDp3gFkXeydJ5K24=)
3: cBKVs6q0cxYCdeIY5DzEzBhM_3s.roa (hash: DJBsYfnemPKjQutyRco9f0EsmcmnBCB/iyPUDzRITXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:73:88:b6:ff:b4:1d:e4:ad:ea:49:71:0c:45:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Nov 22 16:02:39 2024 GMT
Not After : Nov 23 16:02:39 2024 GMT
Subject: CN=2af83ab9e3bb63cfc6062b54468ecfb3eec011c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:81:77:fb:df:5b:96:81:89:cf:0f:5e:fb:
ee:c5:de:1e:26:a0:99:5f:fb:69:ad:1d:a4:68:31:
0d:e6:6e:fa:80:8f:53:ce:85:51:f8:9f:77:9e:ef:
7b:5c:a2:cb:81:d4:ac:a6:4f:35:92:33:62:b0:f2:
46:dc:ee:bb:fe:6e:46:2c:b3:de:ec:84:2a:04:a3:
50:56:8e:90:3e:d4:c1:52:df:96:69:a0:c6:af:fb:
7f:cb:f8:84:92:4e:9a:03:f2:a3:27:a3:24:d2:58:
29:ca:bc:4b:93:22:85:4e:81:75:59:81:19:32:f5:
26:cb:08:ae:2e:fc:ee:6d:6c:0b:53:73:29:f3:66:
05:20:e3:ea:bf:d7:82:ec:10:5c:39:5a:1d:99:a1:
f0:0f:c4:58:4e:35:a5:e0:e0:b7:36:4b:9d:da:8b:
4c:8a:7e:d0:4e:91:17:04:26:f9:c5:c0:a7:0c:25:
8d:33:dd:8a:08:df:15:ea:fa:3e:46:9c:9e:e5:9e:
32:05:a2:7b:ff:7c:73:51:60:af:25:96:19:74:83:
b6:9f:de:91:fe:34:78:de:fc:06:42:9f:19:85:8f:
cf:79:85:1f:4e:53:25:42:41:18:5f:76:af:29:74:
bf:d8:ac:a3:9a:fd:ec:9b:73:6a:42:57:2b:b4:cf:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:3A:B9:E3:BB:63:CF:C6:06:2B:54:46:8E:CF:B3:EE:C0:11:C7
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f3:ed:d2:e0:ee:6f:62:05:97:e7:48:8b:3a:d7:48:48:42:
25:42:37:b3:39:0a:0b:66:a5:5c:17:65:62:b8:be:c6:c0:ed:
ee:6d:24:6a:4a:0c:5c:2a:d0:d0:ab:d9:1c:3b:e4:e6:d3:a7:
6c:94:3e:82:5a:60:d5:23:b1:c6:85:da:fd:a2:96:04:8c:0a:
d4:72:14:91:f6:4f:49:93:3d:fd:96:5d:df:c7:f9:b1:bf:50:
da:d4:87:9a:0a:be:05:61:3d:ea:71:ab:ca:9e:15:91:7f:53:
27:2f:1d:cd:8d:22:87:3e:d7:70:c8:01:ab:dd:6a:f2:a0:6f:
8b:7b:90:94:26:a6:e3:35:21:17:ea:ca:3a:59:0b:ca:28:84:
5e:f9:32:f7:e9:62:9f:c5:43:be:6b:26:50:5e:01:65:c1:15:
70:d3:44:95:0f:57:ed:73:e4:9b:29:ee:c7:ae:61:e7:e8:d0:
ee:c9:46:85:e9:32:5b:91:87:56:44:11:2e:ec:77:57:06:37:
82:8d:4d:c1:a3:fe:34:7a:8f:9d:87:c5:6c:30:30:33:c5:dd:
2a:12:90:98:c4:20:b2:bc:32:81:4b:81:a0:24:ad:ab:6a:23:
3f:97:93:a2:aa:95:ce:a3:67:a7:d5:59:46:e7:51:80:e7:e8:
bb:84:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:53 2024 by rpki-client on console-fra.rpki-client.org