Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: yAOGKyNb47GNF7I8+ry7lqYwksFqyse9jVx2MQ1bu+8=
Subject key identifier: FA:DD:6C:AB:7B:E6:B6:A8:82:85:1D:9F:CC:90:B0:55:F3:8B:82:D8
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 018F242665DF66C3BE695927D06057D5E58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 10E5
Signing time: Sun 28 Apr 2024 10:00:47 +0000
Manifest this update: Sun 28 Apr 2024 10:00:47 +0000
Manifest next update: Mon 29 Apr 2024 10:00:47 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: FgBuPQKEsjksjQjH/IfJridFjtx35fFOKHwha4WXteA=)
2: hUyx86_aIfVj7wFtKRvfxwHiaSE.roa (hash: SV8obNYNofYAiycqggXoTkl1WKYfTQhsyOwyv3oXSq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:26:65:df:66:c3:be:69:59:27:d0:60:57:d5:e5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Apr 28 10:00:47 2024 GMT
Not After : Apr 29 10:00:47 2024 GMT
Subject: CN=fadd6cab7be6b6a882851d9fcc90b055f38b82d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:1f:49:22:be:66:7b:13:cc:c0:97:84:cd:
cb:6f:05:3a:97:3d:17:a8:6b:10:4a:39:78:2b:7e:
60:41:32:9d:93:c1:d5:c4:d2:11:7d:10:2a:ea:50:
5c:8e:79:c4:e4:67:ea:f2:a6:3b:1a:be:15:e9:80:
5b:9f:cb:27:3d:ff:db:57:92:72:f7:4d:a8:ed:ff:
3f:d7:de:67:57:08:4c:9f:25:a7:24:41:c0:17:ad:
9f:48:94:16:7c:64:75:32:01:68:a2:82:6c:31:51:
27:cf:f3:ca:af:39:76:c1:10:ec:b0:8f:bd:7a:f9:
57:b7:af:a7:26:02:06:be:21:aa:4c:ac:93:1c:6a:
9c:13:e9:40:e7:59:86:70:2c:9c:ce:0e:25:cf:5d:
30:5e:5e:17:74:07:31:3d:ea:c6:e9:be:de:34:c4:
d6:80:c9:16:66:62:4a:69:62:fe:5b:2c:43:c5:9d:
37:f0:29:1d:e8:b2:74:4c:10:8f:88:da:16:27:27:
cb:4c:36:2c:7f:9a:3f:d7:ed:64:20:ee:2c:c1:16:
5c:45:7d:5e:25:4c:b5:a7:1e:5c:95:1b:cd:5f:d1:
1f:a2:2c:35:67:8e:8a:b6:f5:a0:f7:c4:a9:85:15:
41:33:63:47:7f:eb:a8:e7:ce:8d:c5:64:95:f6:a9:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:6C:AB:7B:E6:B6:A8:82:85:1D:9F:CC:90:B0:55:F3:8B:82:D8
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:08:89:f7:b0:c5:13:4c:6a:af:7d:f7:4a:b5:d9:2b:e6:8d:
be:bb:5e:cb:a9:39:ba:b3:47:44:f7:61:76:be:5a:2c:12:02:
d6:24:62:80:24:38:3f:7b:94:6f:eb:59:3d:bb:f3:e1:7c:32:
58:8e:9f:05:76:a3:61:64:41:d0:37:0e:1a:0c:a9:5b:b3:11:
0b:5b:fe:df:26:e4:d4:82:ac:af:a5:3e:ef:5f:83:41:24:b0:
3e:c5:34:5d:b8:b7:b1:a2:99:93:1d:1f:9f:6f:c8:f4:47:20:
94:b7:3d:a6:c0:05:46:8b:59:a6:6b:c3:1e:d0:7c:09:46:fa:
9b:71:3e:24:bf:d1:56:c6:06:74:27:05:57:36:c1:d2:35:7f:
02:cd:40:28:d7:3a:38:e9:90:11:de:b5:92:0b:44:ca:1e:14:
37:67:9d:fa:e7:82:04:c6:b7:5b:53:51:dd:66:cb:cb:ba:44:
de:55:1e:72:5a:cb:18:da:c3:5f:6a:7a:b0:a4:2a:83:f1:66:
03:66:7d:75:f0:02:1e:09:fd:9b:dd:83:50:1a:07:bc:66:b5:
50:30:7a:72:fa:9f:56:f2:25:31:7f:89:ad:78:79:13:c1:fc:
e5:89:d8:d7:a7:27:35:f3:2e:8f:d8:3e:f2:6e:a0:6d:6f:a6:
03:aa:ae:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 12:29:22 2024 by rpki-client on console-ams.rpki-client.org