Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: cAIify43d+L1BdCt8b/5W3kYQ/r+rTn/rBfdleyCVsw=
Subject key identifier: 46:C6:02:F6:4A:BA:19:1C:26:F6:B4:64:E2:03:1D:8F:FA:11:95:C2
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 0193688F79DA10426FA80CE8DEDE89B66D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 0C90
Signing time: Tue 26 Nov 2024 13:00:53 +0000
Manifest this update: Tue 26 Nov 2024 13:00:53 +0000
Manifest next update: Wed 27 Nov 2024 13:00:53 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: vPh5pMkXc1Fw1/pM2OryRt20BLfoJlIYv/lsZ8DFpAM=)
2: Qbbgrcs6_70vAos7Kn2XjgmhhW0.roa (hash: u/xC4ZNNbPkeNaw/PwUsFeeYYHizJLUZS9CvRGT96uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:8f:79:da:10:42:6f:a8:0c:e8:de:de:89:b6:6d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Nov 26 13:00:53 2024 GMT
Not After : Nov 27 13:00:53 2024 GMT
Subject: CN=46c602f64aba191c26f6b464e2031d8ffa1195c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:81:f3:67:ee:b1:97:62:0f:48:2d:37:4f:
b0:d4:62:32:55:38:01:5c:e3:95:7c:a1:7b:03:7b:
c9:14:f8:10:46:a1:d5:92:19:01:8f:59:08:a6:be:
32:5e:52:2f:09:d3:d6:fd:f8:ec:75:f2:1f:2a:96:
ed:e7:f5:58:0c:b1:ff:af:cb:dc:8b:21:48:b5:d9:
a4:f7:a3:c2:3e:13:0c:d4:e5:70:c3:4e:6d:e6:42:
66:76:81:39:fa:2f:3b:5a:8c:52:d2:93:48:41:bc:
96:ed:d4:c6:17:85:e9:4d:68:2c:81:45:fc:f5:7e:
b3:af:8c:57:bf:15:69:92:ce:30:4b:95:6c:93:0e:
c1:c4:c0:96:36:41:ea:9f:12:ad:dc:e3:43:cf:ef:
b8:8e:32:4b:e5:28:ed:d1:a9:6f:e5:ed:13:51:56:
97:1d:30:3a:f7:85:c9:31:74:b3:9b:b8:ac:96:ad:
f8:21:53:68:51:e2:34:3a:8d:61:1c:3d:08:0e:70:
a5:22:b6:71:05:65:54:73:84:ff:48:3f:e6:09:fb:
87:06:86:88:2f:be:41:38:48:e6:84:47:9a:4a:c4:
68:5e:42:14:97:d5:2a:b6:33:c7:14:e4:6b:97:17:
8d:9b:5f:3e:08:51:9b:4e:df:0d:27:b3:52:68:9f:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C6:02:F6:4A:BA:19:1C:26:F6:B4:64:E2:03:1D:8F:FA:11:95:C2
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3a:95:0a:9a:e1:48:6e:53:a2:c4:8a:36:2f:e7:6b:ce:56:
89:37:fc:49:f8:1a:a1:a9:2b:05:5b:1e:4b:ba:62:68:56:3d:
0e:93:9f:c0:3f:d6:df:fd:5d:4c:70:2a:3f:ae:49:e7:46:ed:
10:7f:bf:08:98:00:7c:91:1c:16:44:65:e2:90:a8:84:00:36:
5a:ec:64:5b:ea:44:22:33:83:69:d2:95:11:5b:b3:1a:c6:f3:
13:65:e3:fb:79:8c:61:40:ac:27:20:f7:14:a4:fc:63:c3:83:
4f:49:67:29:23:b6:fe:f0:38:d9:7d:f5:69:d5:12:41:18:ea:
96:94:d9:15:2d:30:b5:dd:33:a3:6f:08:b2:8a:20:e5:4e:d3:
42:c8:f1:df:09:a9:2a:74:d0:f5:6a:f2:1d:1f:92:9f:ae:8a:
ba:e6:58:06:a8:b1:f1:01:5f:15:f2:31:ec:55:c5:63:75:e9:
26:25:c0:6a:8b:9a:20:56:6d:52:d0:92:a9:06:9c:90:15:a6:
2b:e9:7a:d6:bd:43:18:61:cd:66:e1:95:3c:4e:3f:7e:bd:2e:
73:fd:8b:93:3b:b8:3e:66:12:5b:7c:57:61:1a:3a:c4:b2:c7:
d2:84:69:8b:9d:72:7d:46:67:c4:06:d6:b4:43:23:f8:b2:2d:
4d:1f:25:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:13:31 2024 by rpki-client on console-ams.rpki-client.org