Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier: BsomUZL9T5AWQjJV2qtlAykR1p0K0NP+prLuijdb6n4=
Subject key identifier: E2:A3:80:05:EA:3F:0B:51:8D:14:A0:CB:6B:70:E7:A4:08:C1:EF:12
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer: /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial: 019406B3EF37BD6CEFF2528F11D801912883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number: 0B2F
Signing time: Fri 27 Dec 2024 06:00:42 +0000
Manifest this update: Fri 27 Dec 2024 06:00:42 +0000
Manifest next update: Sat 28 Dec 2024 06:00:42 +0000
Files and hashes: 1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: SjzLrRXK5eJZrFWLXlw40j5LEXpv0AAvfAsrToKUl2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:ef:37:bd:6c:ef:f2:52:8f:11:d8:01:91:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Validity
Not Before: Dec 27 06:00:42 2024 GMT
Not After : Dec 28 06:00:42 2024 GMT
Subject: CN=e2a38005ea3f0b518d14a0cb6b70e7a408c1ef12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:a1:5e:22:0a:0d:32:85:ac:dc:b6:2c:26:
d9:ba:5c:9a:89:84:25:3f:f5:c1:f5:13:9f:ce:dd:
8a:5b:b0:c2:67:fe:eb:58:52:25:7a:a3:ca:f0:f8:
03:9d:a3:e7:0b:17:ed:9e:64:43:34:4c:e7:0a:7d:
28:7e:a0:5c:e8:22:be:e9:f5:c3:05:98:ae:94:69:
f2:8e:2b:59:15:b0:88:65:da:56:aa:1d:da:2b:34:
66:b3:b1:09:37:5e:ac:6f:a2:53:26:df:b4:71:63:
c7:da:1a:38:53:6a:24:63:ad:9e:b2:c3:07:e2:01:
09:06:b8:38:c6:0b:1b:98:07:df:91:ed:fc:58:6d:
31:6a:2d:be:47:22:dc:1b:ef:01:0b:b5:bd:cc:46:
0f:2a:bb:9b:a9:c9:61:30:f9:8a:11:4c:b3:3f:e4:
ac:66:8b:f3:a5:ae:37:3f:81:5f:bc:e0:c0:85:c3:
85:0b:86:17:1c:c8:21:49:1d:99:a8:34:57:eb:b8:
9a:33:06:9e:a7:f4:dc:c5:5a:bc:85:35:a6:bd:b9:
4a:28:1b:f9:60:da:56:2a:81:d9:76:d2:ea:ec:55:
8d:1c:8f:db:f0:48:06:9f:c9:5c:5e:9f:7f:3e:7f:
c1:26:58:ac:68:ea:83:43:a2:58:ea:62:4e:25:29:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:80:05:EA:3F:0B:51:8D:14:A0:CB:6B:70:E7:A4:08:C1:EF:12
X509v3 Authority Key Identifier:
keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a0:23:89:56:a2:9c:bb:de:7b:a9:93:3f:8e:11:e9:c4:10:
65:48:dd:cb:10:ed:85:52:f9:df:d0:8c:a8:27:3e:4f:a6:ce:
32:04:c8:dc:be:60:b1:68:a6:98:12:0d:83:77:78:2f:fc:e5:
6d:16:ae:8b:ed:5c:0c:22:33:93:a5:8b:2a:d0:a9:a0:16:c0:
dd:31:cb:9b:b0:7a:9e:4c:ff:50:d8:6f:7e:a3:48:b0:d2:9d:
22:5b:0a:3a:07:e0:07:df:ed:b5:75:fa:8b:0c:45:6f:66:cb:
49:57:13:fb:35:04:ca:f8:0e:93:d5:e4:6d:24:54:89:ca:34:
d2:b0:ac:a5:3d:9d:53:ee:44:6a:3e:9e:d1:ee:04:4e:15:18:
ad:17:8f:fd:85:9b:44:66:17:16:86:5b:63:e3:f7:e0:58:a7:
c2:77:24:82:59:d1:0d:70:f1:d3:19:69:59:77:1b:4e:93:10:
ee:37:29:50:66:29:f1:1b:65:c3:ed:cc:c5:e2:62:c3:32:95:
c4:c8:61:41:16:8e:27:b8:91:ce:0d:2b:3d:b7:86:55:3f:13:
09:da:72:26:8a:9b:08:cc:25:68:65:d7:c3:fb:25:10:a9:f4:
56:26:6e:6a:52:04:fc:19:b4:ee:9d:75:ed:dd:c0:29:67:fe:
8e:1a:a2:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGs+83vWzv8lKPEdgBkSiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTFjYzZkZjEzMzY2ZmM1OTVhNmU3MmVkMDNjNTM4MDA3
OTJiNGIwHhcNMjQxMjI3MDYwMDQyWhcNMjQxMjI4MDYwMDQyWjAzMTEwLwYDVQQD
EyhlMmEzODAwNWVhM2YwYjUxOGQxNGEwY2I2YjcwZTdhNDA4YzFlZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlqhXiIKDTKFrNy2LCbZulyaiYQl
P/XB9ROfzt2KW7DCZ/7rWFIleqPK8PgDnaPnCxftnmRDNEznCn0ofqBc6CK+6fXD
BZiulGnyjitZFbCIZdpWqh3aKzRms7EJN16sb6JTJt+0cWPH2ho4U2okY62essMH
4gEJBrg4xgsbmAffke38WG0xai2+RyLcG+8BC7W9zEYPKrubqclhMPmKEUyzP+Ss
Zovzpa43P4FfvODAhcOFC4YXHMghSR2ZqDRX67iaMwaep/TcxVq8hTWmvblKKBv5
YNpWKoHZdtLq7FWNHI/b8EgGn8lcXp9/Pn/BJlisaOqDQ6JY6mJOJSm3qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKjgAXqPwtRjRSgy2tw56QIwe8SMB8GA1UdIwQY
MBaAFN4RzG3xM2b8WVpucu0DxTgAeStLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jNjQ5NGQtZmM2Ni00NTNjLWJjODMt
ZTZjNGRmNDZmMDRkLzEvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jNjQ5NGQtZmM2Ni00NTNjLWJjODMtZTZjNGRmNDZmMDRk
LzEvM2hITWJmRXpadnhaV201eTdRUEZPQUI1SzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqAjiVai
nLvee6mTP44R6cQQZUjdyxDthVL539CMqCc+T6bOMgTI3L5gsWimmBINg3d4L/zl
bRaui+1cDCIzk6WLKtCpoBbA3THLm7B6nkz/UNhvfqNIsNKdIlsKOgfgB9/ttXX6
iwxFb2bLSVcT+zUEyvgOk9XkbSRUico00rCspT2dU+5Eaj6e0e4EThUYrReP/YWb
RGYXFoZbY+P34FinwnckglnRDXDx0xlpWXcbTpMQ7jcpUGYp8Rtlw+3MxeJiwzKV
xMhhQRaOJ7iRzg0rPbeGVT8TCdpyJoqbCMwlaGXXw/slEKn0ViZualIE/Bm07p11
7d3AKWf+jhqizQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:07:59 2024 by rpki-client on console-fra.rpki-client.org