Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json)
Hash identifier: KePqJZ+0vFKeNzGkCfb8JnQxO53QGdA5v25v8g2g1xY=
Subject key identifier: BD:D7:8B:B8:AD:4A:EB:33:71:D7:6A:7F:A4:E8:D5:BA:CE:5F:EC:B9
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 01935274F91890802D481DEFACC3EC990013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
Manifest number: 035A
Signing time: Fri 22 Nov 2024 06:00:17 +0000
Manifest this update: Fri 22 Nov 2024 06:00:17 +0000
Manifest next update: Sat 23 Nov 2024 06:00:17 +0000
Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: tkNNqnNv70t3H0vnTvOgu0Vsj+72eXWDoeLe8DNNTmU=)
2: o7thzKeJAxWHYZAinC9wxakwS1s.roa (hash: gElzjkkchvSUuEnbKRJQvxIY3CkejeSDqbCa102hMTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:f9:18:90:80:2d:48:1d:ef:ac:c3:ec:99:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Nov 22 06:00:17 2024 GMT
Not After : Nov 23 06:00:17 2024 GMT
Subject: CN=bdd78bb8ad4aeb3371d76a7fa4e8d5bace5fecb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:3e:6a:38:91:85:c4:8f:92:a9:27:b0:78:
14:68:7f:a5:e5:33:3b:6b:a1:e2:d2:b6:cf:9b:8c:
b5:e2:b3:2a:9d:e1:be:87:0a:a5:bd:77:57:12:cb:
fe:2e:8d:51:c6:db:56:48:fb:07:4f:1e:8d:af:a1:
63:4a:7b:2f:ea:b8:c9:28:ff:34:9b:e6:23:c3:a0:
d8:77:42:80:66:ca:bc:b2:4f:79:31:34:1d:53:2c:
3a:6d:1e:fe:e9:ab:ca:91:61:bf:f5:20:36:36:95:
84:6b:42:21:1c:78:41:6c:69:59:16:7a:4e:0c:0d:
1b:44:91:b1:69:c6:e9:55:c0:b0:34:31:77:c6:f9:
65:ce:a5:8f:74:e6:b0:7d:8f:8c:09:e3:63:aa:78:
10:70:e7:e9:58:74:c2:8c:12:7f:f6:31:45:56:0d:
c9:11:c8:4a:fb:05:c5:fb:f0:c3:c6:49:ee:75:37:
a1:8a:39:fc:97:d2:27:fb:6e:d3:9c:02:ca:2e:f3:
2a:7a:2f:52:02:1a:65:f5:b8:8e:37:25:cf:76:fd:
20:a1:67:22:1a:46:ac:81:22:e8:ab:e1:76:11:bc:
f2:ac:97:f9:e3:6c:9d:9b:01:03:e4:cc:5f:0d:72:
2f:e5:d2:28:a6:fc:96:08:c6:4e:e9:f6:bc:50:4e:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D7:8B:B8:AD:4A:EB:33:71:D7:6A:7F:A4:E8:D5:BA:CE:5F:EC:B9
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a8:0a:10:d0:a9:94:4a:0b:06:a4:bf:73:d6:0d:72:9d:d8:
c4:02:7b:57:47:3c:30:1e:86:2c:6d:05:69:43:00:00:b5:70:
53:c8:98:93:6b:5e:df:74:8b:a4:da:ef:6d:cc:24:ef:6c:5c:
ad:30:99:90:ae:06:09:e7:b7:b4:53:26:ba:2f:c8:f7:73:e4:
c2:d3:5a:47:40:c0:71:5b:0b:d5:f4:45:1a:57:64:a1:ba:40:
38:8d:de:e1:18:5c:5e:f9:cd:1b:2e:f1:6c:83:29:ac:b9:a3:
00:56:0f:fc:0b:d4:c9:7c:11:b7:63:e9:98:7f:3f:fd:fc:23:
92:17:82:64:77:19:93:10:0e:d8:76:02:f4:00:ab:f4:ae:4b:
10:99:4f:08:88:31:4d:19:58:e5:e6:4a:9e:bf:af:b8:f0:b6:
65:fc:4f:9f:46:49:b2:8f:e9:d6:7c:40:10:cc:46:a2:a1:22:
f7:74:0e:42:04:5e:ba:48:c2:15:34:86:8b:26:60:16:c6:eb:
d5:a4:8f:a3:52:cf:23:0e:5e:1a:e3:e8:51:57:09:6a:9a:3b:
3b:ba:2c:41:c5:09:87:9d:54:4a:e5:df:b0:1c:10:f0:b8:cb:
4b:14:ad:fe:d5:00:44:ed:13:f6:ca:20:95:82:76:87:6a:3a:
f0:33:02:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSdPkYkIAtSB3vrMPsmQATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh
MzM2YTYwHhcNMjQxMTIyMDYwMDE3WhcNMjQxMTIzMDYwMDE3WjAzMTEwLwYDVQQD
EyhiZGQ3OGJiOGFkNGFlYjMzNzFkNzZhN2ZhNGU4ZDViYWNlNWZlY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6s+ajiRhcSPkqknsHgUaH+l5TM7
a6Hi0rbPm4y14rMqneG+hwqlvXdXEsv+Lo1RxttWSPsHTx6Nr6FjSnsv6rjJKP80
m+Yjw6DYd0KAZsq8sk95MTQdUyw6bR7+6avKkWG/9SA2NpWEa0IhHHhBbGlZFnpO
DA0bRJGxacbpVcCwNDF3xvllzqWPdOawfY+MCeNjqngQcOfpWHTCjBJ/9jFFVg3J
EchK+wXF+/DDxknudTehijn8l9In+27TnALKLvMqei9SAhpl9biONyXPdv0goWci
GkasgSLoq+F2EbzyrJf542ydmwED5MxfDXIv5dIopvyWCMZO6fa8UE5ddQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3Xi7itSuszcddqf6To1brOX+y5MB8GA1UdIwQY
MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt
NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4
LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKgKENCp
lEoLBqS/c9YNcp3YxAJ7V0c8MB6GLG0FaUMAALVwU8iYk2te33SLpNrvbcwk72xc
rTCZkK4GCee3tFMmui/I93PkwtNaR0DAcVsL1fRFGldkobpAOI3e4RhcXvnNGy7x
bIMprLmjAFYP/AvUyXwRt2PpmH8//fwjkheCZHcZkxAO2HYC9ACr9K5LEJlPCIgx
TRlY5eZKnr+vuPC2ZfxPn0ZJso/p1nxAEMxGoqEi93QOQgReukjCFTSGiyZgFsbr
1aSPo1LPIw5eGuPoUVcJapo7O7osQcUJh51USuXfsBwQ8LjLSxSt/tUARO0T9sog
lYJ2h2o68DMCBg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:51 2024 by rpki-client on console-fra.rpki-client.org