Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
File: 3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft (raw, json)
Hash identifier: WRhwDVd8sBrwBE+POa/YeRW+KIYMgJyPHo7yrppOm2I=
Subject key identifier: AE:8A:C5:E7:A1:3D:1A:8B:8C:A8:81:55:CA:BF:69:47:E5:3C:3A:18
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 019354635DA57AF3AC5BF8CEE3B53E883EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
Manifest number: 0AF5
Signing time: Fri 22 Nov 2024 15:00:18 +0000
Manifest this update: Fri 22 Nov 2024 15:00:18 +0000
Manifest next update: Sat 23 Nov 2024 15:00:18 +0000
Files and hashes: 1: 2AjEDDvjLI2NhFoH8wO0CUP59vo.roa (hash: GHH8w/avwQT6edGrBHpj7IWbMAf7RVfozO1Xq9lVeqY=)
2: 3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl (hash: 5dNNLlDFqV59IodTbiFC8ASt+I+ufG97jY69H9mPeOk=)
3: 5KH4yEFihyvqe8lWBqRe_9majWA.roa (hash: arc+c7jTrwTqn744fLPnOdN85JNk1CPvY1kTu+yyF2s=)
4: 9mcOMNmJn8Vd1BPjGbhoeq-eppE.roa (hash: KId9R8w2Vcq0r3uT6nQugNaPHowOLy7Lbuu5VI0i32g=)
5: LtXt8swanj1v8KpeYzaizld3WfI.roa (hash: XmB/zcGf3IhNKfApxjSHC99nMFeLAQ2ArE/iKN9hdoQ=)
6: Yc2at_93Zx-Rb9Z-z-Z-9fodHZw.roa (hash: /S+DjYbf5MT7bcrd5Hza5IKCQyB9FuGS6A8HyOz+Iwo=)
7: gh3fblMNyshrfGAmsN5Iq-02wYA.roa (hash: WotLgxYRuUIuzqYrcsflemc460BpdnEOyFA+8rWy6YA=)
8: hmPftndANiOel_mUR-MvXCtCo0g.roa (hash: JzqcQNWwUfvndAaMBZrlutiCpoYy3e7Dxtxu4tu1mxs=)
9: uSU0I16PyIOyPUlQfw2w_e8AlTA.roa (hash: +tZxCaP36dgS6+Kwpr1uU6GHnr5uXoNDYy2CTNCqnLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:63:5d:a5:7a:f3:ac:5b:f8:ce:e3:b5:3e:88:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Nov 22 15:00:18 2024 GMT
Not After : Nov 23 15:00:18 2024 GMT
Subject: CN=ae8ac5e7a13d1a8b8ca88155cabf6947e53c3a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:f0:b5:65:6e:da:35:7c:4f:fa:ef:cb:7b:
ec:bc:2a:10:e2:f8:a0:e1:7b:47:7a:e7:45:2a:c0:
fb:43:6a:eb:19:2d:cf:8a:4b:a3:08:ea:73:f2:69:
80:7a:f1:66:73:d2:ab:d9:83:ea:43:ce:da:dd:a1:
d1:37:e2:98:6b:9b:4d:2c:a1:e0:1a:43:57:d8:82:
7a:7f:8d:8b:6e:6a:42:1e:66:1c:bd:c4:37:f4:93:
d2:6c:a4:58:bd:60:e5:a0:a8:56:08:42:57:d8:48:
c7:92:e5:d1:ae:12:71:95:d3:ba:d8:02:ca:a3:a8:
c0:66:f9:f8:7e:d4:b3:fc:2c:bc:d9:d2:d2:3a:fd:
8b:91:27:49:06:85:c7:15:d1:98:e5:46:98:a2:f1:
f9:69:89:85:8f:2c:38:43:d4:c9:72:5b:ce:1a:a9:
1d:51:ba:4d:fa:89:77:45:99:07:82:f7:d0:38:31:
06:93:4a:8f:0a:32:72:89:48:e9:50:32:75:ae:90:
ff:3a:81:92:53:51:9c:33:e7:95:14:87:7d:70:77:
ef:a6:09:3b:71:3e:9b:5a:40:97:52:88:e6:5a:7a:
6b:a9:49:f1:e2:1c:81:7a:3c:9b:25:c5:f4:c7:93:
12:06:f0:6c:a7:44:f6:ff:81:49:4a:f1:2c:b9:2d:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:C5:E7:A1:3D:1A:8B:8C:A8:81:55:CA:BF:69:47:E5:3C:3A:18
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2c:d4:e3:45:be:94:8a:a5:a9:f5:27:a6:b8:ba:d0:fe:7a:
2c:ea:2e:d3:5b:16:5e:dd:49:77:f7:ce:70:40:d3:58:d6:1e:
6e:5f:8b:fd:aa:1b:3e:12:f1:f0:b1:09:cf:d6:6e:dc:e4:19:
45:d7:07:c4:85:2d:ad:85:3d:9e:e9:a3:ed:50:b7:91:3a:d0:
8c:76:5d:03:7f:76:9b:57:c1:a7:e7:38:e1:2d:2b:9a:c4:12:
97:31:7c:8d:d4:ff:d9:59:54:d8:fe:8a:ec:13:30:ae:14:17:
66:13:62:d2:2e:62:79:11:92:01:4a:52:61:e7:3d:03:7b:19:
b2:34:d1:ab:19:5a:e4:78:c5:1e:56:5c:01:3c:92:9c:7a:5e:
3c:e9:11:64:f6:87:c7:e6:c6:f2:ba:3f:42:97:97:31:08:61:
b1:5d:a5:89:c6:ec:25:f2:8c:84:a8:e0:52:63:c7:21:1e:92:
e9:c4:53:2a:db:79:74:f5:f8:91:9a:cd:c8:76:8f:25:5c:db:
28:d4:56:5e:37:d0:46:78:40:79:b8:5a:b8:5d:54:75:78:26:
e4:05:7d:bc:e1:de:73:e2:7a:cc:20:ee:34:78:7a:13:95:62:
2c:f5:fa:d8:de:6e:d9:d8:e4:fe:9c:eb:89:ea:57:46:bf:79:
a6:e0:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:14 2024 by rpki-client on console-fra.rpki-client.org