Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: w8HJ0XpL++1O25BBRtHcp5+zFUdQ+9gjC4BOAHs1v9s=
Subject key identifier: A1:AF:4B:94:BE:2B:45:CA:68:C9:29:A2:2F:A1:D8:A1:D5:63:DB:FC
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 018F362EEB4AFA01B43D10CD38E4416C3448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 1151
Signing time: Wed 01 May 2024 22:03:15 +0000
Manifest this update: Wed 01 May 2024 22:03:15 +0000
Manifest next update: Thu 02 May 2024 22:03:15 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: m38jG3wcrg64Em5uiRwXS+GqAc70SXcIGG2nhtZqAjE=)
2: IaYftj_WMwfhvYVghiz91le9lDc.roa (hash: wJd1Jkg6+DKg6ZiDecDJscVFA8IsxpMSbDKIRW9KGhs=)
3: T045RfCDzriGVETW5buIjQ3akpg.roa (hash: V5/b7H+tvSSqKMd4/Uj4a8mLJh3yfq/1w1z5eZ3Cpvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:2e:eb:4a:fa:01:b4:3d:10:cd:38:e4:41:6c:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: May 1 22:03:15 2024 GMT
Not After : May 2 22:03:15 2024 GMT
Subject: CN=a1af4b94be2b45ca68c929a22fa1d8a1d563dbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:e5:21:57:37:8b:22:bd:91:a6:e6:c9:31:
ad:56:09:ce:1f:28:00:9e:03:2e:f7:51:ae:a7:5b:
1a:6b:77:36:49:58:a1:4c:44:04:65:4d:1c:6a:ba:
62:07:18:97:b2:b4:37:6c:b3:ad:91:94:47:6a:b7:
99:0d:a0:2e:62:c1:7f:a1:b9:64:69:a6:ea:70:48:
95:94:55:d4:c9:6c:25:e7:f6:46:58:03:dd:13:52:
c9:8e:22:e3:e4:e4:ae:e3:a7:21:77:74:87:cc:9c:
ae:aa:35:29:82:91:ed:49:dd:6b:54:fa:3e:0f:e8:
18:96:25:17:04:78:1e:a2:67:6d:47:c2:11:ad:75:
15:86:b7:da:b6:17:e4:77:fd:bc:1e:27:8a:31:6b:
21:6e:aa:38:a0:4a:82:f8:b8:d2:9b:2d:ae:f9:5c:
5a:74:ab:a6:1e:04:b8:1f:1d:ae:fb:e2:ec:9d:f6:
d1:4f:20:a5:4d:6e:35:c7:f9:35:f8:9f:82:22:b4:
3c:d0:ae:f1:60:26:76:fd:c4:4e:51:03:ee:8d:50:
79:75:59:eb:c2:4f:e9:a3:d8:f9:ea:2f:5f:28:23:
aa:7a:0f:69:9f:0d:c1:f8:e0:5c:6d:1e:6c:6a:f6:
32:f4:c6:e6:2e:eb:a7:1e:60:1f:7a:10:ec:71:e8:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:4B:94:BE:2B:45:CA:68:C9:29:A2:2F:A1:D8:A1:D5:63:DB:FC
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5f:51:af:31:fe:f5:e4:16:fb:5b:c3:18:52:46:44:2a:74:
a1:19:51:0b:68:0d:6b:a1:30:90:44:52:9b:e6:f6:9c:e4:ff:
a5:2a:1c:af:5d:33:08:f0:61:1f:b1:fd:72:ac:d0:fd:4f:11:
64:4b:8a:80:5a:17:a0:76:d6:a2:82:b2:2b:dc:ed:ce:b3:e8:
f0:99:7f:76:11:0b:ee:34:fc:47:0f:0a:b0:b5:5f:d1:cd:c2:
f5:bf:db:84:d2:7a:47:2a:a3:5d:ad:85:6a:7c:5e:71:ce:07:
da:39:76:0c:da:d7:1b:7f:08:0f:62:52:97:6a:ed:63:cb:07:
e1:d3:e6:9d:7c:3f:ce:e5:b4:c3:48:cf:6c:a5:df:4e:3d:99:
4a:07:3e:dd:b6:86:e4:03:92:d5:5c:54:24:28:57:4a:85:df:
fd:c8:21:7e:00:e3:e9:28:3e:cd:8b:6d:d4:f0:38:c7:44:5d:
ff:33:55:a6:91:00:81:ee:31:58:e8:e0:7c:c0:a2:80:c3:c5:
22:be:67:6f:d9:55:6b:b7:e3:19:4d:9b:d1:ee:52:e4:69:4e:
51:3c:bc:93:15:5d:27:61:90:80:db:84:ec:05:0c:ff:d4:2b:
1c:d7:47:40:19:d6:8e:05:2e:be:20:db:e3:f2:82:91:2f:91:
03:71:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:22:39 2024 by rpki-client on console-ams.rpki-client.org