Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: mClw5m6agG/Ab52iLkq7mnm7pGxCCBiFJSA13p+gAsQ=
Subject key identifier: 51:DF:01:7B:5E:AC:15:5E:F7:C8:18:22:40:35:E2:21:D7:8E:2A:FA
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019405A133527E9AE7494ECB727FD34AA071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 1326
Signing time: Fri 27 Dec 2024 01:00:37 +0000
Manifest this update: Fri 27 Dec 2024 01:00:37 +0000
Manifest next update: Sat 28 Dec 2024 01:00:37 +0000
Files and hashes: 1: 0HaJdrQTeKl1pxgKZsoK9Zs3tFY.roa (hash: w9PvyJ6Ithu6sQ5xrmeyEpGEOSP6OEv/v9DCsz7w7vo=)
2: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: i+VWY/bxQTSYlGjZco1bz3DX30ZA4pYbVyPqHqaYdGo=)
3: YnMGQLntH6ku63sABpyWE3uHKa8.roa (hash: y0+5+SEFU85wJv04ldq0GQy1g1AukUQZRC03xoKLImM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:a1:33:52:7e:9a:e7:49:4e:cb:72:7f:d3:4a:a0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Dec 27 01:00:37 2024 GMT
Not After : Dec 28 01:00:37 2024 GMT
Subject: CN=51df017b5eac155ef7c818224035e221d78e2afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:d0:be:9a:65:8e:85:10:bc:5d:60:2a:79:
10:04:aa:fb:04:9b:a1:7e:e5:5a:f2:5b:12:93:54:
33:ea:7a:5c:b9:2c:71:93:4b:34:de:d0:ca:bc:5b:
c8:22:0d:b9:a5:8b:ab:39:b1:96:7e:b8:41:c0:9a:
f6:85:cd:d2:77:f7:c0:47:25:5c:fd:e2:04:1a:4d:
cd:7d:b0:e6:54:48:11:5a:77:c4:2c:45:03:78:22:
b4:48:e3:0e:11:fe:24:50:75:02:d1:bc:2e:8f:08:
b0:bf:82:f1:98:1d:9f:f6:bd:ef:6f:03:17:d8:50:
3b:f5:0f:eb:4d:4a:d8:46:20:11:e6:de:20:e4:7b:
c8:24:be:ca:af:c0:88:86:55:f6:0e:04:e1:21:f9:
fa:28:ba:82:c3:a4:ea:ae:9e:6a:59:16:e6:1f:f7:
9a:53:44:f9:d9:23:3c:b8:05:bd:da:6b:be:3e:91:
72:53:52:58:39:02:b7:f6:3f:13:eb:ea:4c:71:ca:
98:01:24:bb:a7:90:2c:5c:bc:f8:69:5f:41:24:af:
6e:30:f6:ab:b7:54:31:67:80:aa:75:ee:23:dd:f1:
f8:a7:94:ee:15:49:45:b3:d7:86:e4:c8:44:0e:8c:
90:f2:2c:53:48:ab:bd:ba:77:e1:12:ba:70:16:1b:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:01:7B:5E:AC:15:5E:F7:C8:18:22:40:35:E2:21:D7:8E:2A:FA
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:1d:41:10:0f:5f:67:0a:88:2d:41:68:e7:6e:70:6c:ae:
76:ae:99:c0:f6:19:0f:c5:d1:f3:7e:92:95:60:e1:e9:f0:4a:
2d:8a:20:21:0a:0e:73:10:e1:ba:22:dd:3a:9d:3b:2d:43:a9:
ab:c5:ad:32:87:bf:3c:62:24:46:8d:24:cf:06:6e:fc:35:36:
b2:9a:03:d9:74:57:61:10:fe:c9:89:ce:03:7a:6f:15:21:f8:
50:21:a1:b0:79:8a:49:95:53:ed:df:92:a3:84:66:03:ce:c0:
e2:eb:11:7e:ae:dd:92:34:28:04:c7:86:6d:bd:1f:b2:a8:a1:
44:f8:3c:77:ea:b8:d1:0d:56:0e:3c:df:b0:0a:6c:ac:cf:dd:
8e:03:50:a9:9f:96:8e:92:1a:db:20:cf:3c:eb:a5:47:a1:3b:
1b:57:95:0d:3f:93:21:6a:de:81:83:81:59:38:82:9e:5f:71:
4d:10:43:a2:e1:45:ad:d9:74:d1:ed:94:3c:37:9a:1b:e9:36:
83:53:8c:59:4d:40:27:7c:38:b8:19:89:eb:c9:ef:9e:81:b6:
1b:b6:02:6a:95:b7:49:eb:1d:31:70:d9:bf:a5:66:e1:19:f3:
38:f5:3b:dd:54:9b:8f:8b:8c:48:68:c9:79:e9:c2:3e:4d:4d:
9a:21:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:11:38 2024 by rpki-client on console-fra.rpki-client.org