Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: +OHKk04I8jkrattt+d9iAPtUo06tez9el2ZZzG7VQyo=
Subject key identifier: 51:F7:C9:89:60:B6:DB:5A:DF:FD:C5:AB:35:D2:BF:4A:03:35:0B:94
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 018F4FECB83FAC2C2EDD606C70026791E32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 0B0F
Signing time: Mon 06 May 2024 22:01:04 +0000
Manifest this update: Mon 06 May 2024 22:01:04 +0000
Manifest next update: Tue 07 May 2024 22:01:04 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: S9KLB4fHdOPHm3kVSXGqu9TJtheZSuLEhYQFaGrSjG4=)
2: sQ4vtJK12QYfYaaEN-vkOmgxM68.roa (hash: kciJrLej8bMnkwLdFtFO5KGJC4n7+ku7qjlHeZ8rpns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:ec:b8:3f:ac:2c:2e:dd:60:6c:70:02:67:91:e3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: May 6 22:01:04 2024 GMT
Not After : May 7 22:01:04 2024 GMT
Subject: CN=51f7c98960b6db5adffdc5ab35d2bf4a03350b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:0d:dd:8b:b2:ca:75:f1:0d:a1:df:3a:68:
93:51:91:c6:49:90:d7:a8:da:16:29:be:9b:c1:27:
d9:a1:80:1d:16:35:0c:cc:54:19:15:2f:f6:c6:f9:
1c:2f:d1:a5:16:ea:7d:6b:57:f5:ca:cd:3f:05:bd:
b7:f0:39:9c:70:ed:32:fe:08:fd:8e:be:1c:c0:e7:
ab:11:40:b4:e0:8b:cc:f0:54:8f:be:c2:d7:98:f0:
90:03:5e:b6:88:16:2d:61:89:3d:db:ac:f4:af:99:
e7:11:f9:e3:99:a9:c4:c9:6a:8e:80:ec:a9:e9:c1:
09:6b:a7:7a:db:9f:1d:44:b3:86:b0:3d:e5:72:31:
27:cd:7f:91:59:4f:db:82:a2:a5:82:67:6c:f4:e4:
81:92:67:9e:ba:d3:d3:ca:3b:85:dc:b4:6a:59:7a:
0e:20:75:56:d6:7e:2d:3d:64:35:23:7d:54:45:59:
35:95:57:e3:5c:ed:f5:f1:b3:89:3d:8a:e2:ba:aa:
a4:0c:91:d5:e2:74:dc:dc:da:d8:8b:83:80:28:23:
8a:17:c9:97:ce:a7:cb:bf:3a:b2:5f:17:1e:3e:ee:
52:b2:8f:d3:51:77:34:3f:86:c8:c5:0c:83:81:f9:
d7:5c:4d:6e:0b:ef:e1:84:29:b0:66:63:cb:06:5b:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F7:C9:89:60:B6:DB:5A:DF:FD:C5:AB:35:D2:BF:4A:03:35:0B:94
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a5:ab:d4:4c:73:9f:6b:e8:63:28:62:87:cf:61:b6:a1:75:
0d:7d:1e:00:3f:de:b7:86:ac:44:61:2d:6a:e8:11:c6:43:f3:
e5:11:a3:00:23:c6:12:46:d8:8d:1d:2b:f0:c6:b4:70:d7:b2:
79:a3:1c:14:a1:7d:8e:d4:ea:26:2d:a0:ab:76:3f:af:59:1b:
4a:6b:f5:cf:60:5b:82:c7:77:f0:c4:51:57:48:fd:06:9b:0f:
3f:8b:15:fe:42:f5:7f:bf:24:ff:86:2e:7d:49:31:54:67:5a:
d3:06:12:11:c4:51:4b:3c:6b:ff:a5:a3:1f:98:2a:71:36:f1:
ba:26:73:5d:fe:7f:1c:6a:66:e7:75:c5:19:13:9f:ea:e3:98:
de:87:01:5a:32:b7:79:7d:70:5e:e7:bc:dd:c2:43:9b:10:71:
48:80:8c:2c:ff:b9:1a:52:54:3c:b0:56:98:08:ea:06:3c:74:
ab:57:ec:9d:c0:67:9c:3f:aa:7d:33:fe:28:cc:14:c0:43:c4:
02:c4:a6:96:f2:26:10:d3:75:4a:52:a2:ae:15:fb:39:ab:f4:
56:17:73:66:7a:e4:a7:92:3d:c4:17:5a:5b:00:af:29:67:bc:
0a:d3:ca:94:0a:2e:38:3d:17:46:ed:4f:b0:9e:a4:83:d8:bb:
1c:9c:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:37:25 2024 by rpki-client on console-fra.rpki-client.org