Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: 29TLOXN/3RgDvb+6iPUNwqvQKYkovqbyW65vJEV86Es=
Subject key identifier: 3B:D4:90:6C:36:61:BC:AE:F3:F9:0B:20:CB:27:8A:47:29:2C:E3:8E
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 59A0EC5E7388EA7A589F966B508D96919F7F5AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: D0
Signing time: Mon 25 Nov 2024 17:06:57 +0000
Manifest this update: Mon 25 Nov 2024 17:01:57 +0000
Manifest next update: Tue 26 Nov 2024 19:18:57 +0000
Files and hashes: 1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: l3+IXQRGLN5M7VU3qx5UQfAUC144pzvy62bJi8cUEW0=)
2: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a0:ec:5e:73:88:ea:7a:58:9f:96:6b:50:8d:96:91:9f:7f:5a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Nov 25 17:01:57 2024 GMT
Not After : Nov 26 19:18:57 2024 GMT
Subject: CN=3BD4906C3661BCAEF3F90B20CB278A47292CE38E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:19:a8:40:f8:75:3f:e2:3f:58:04:3a:fc:
0f:9c:e2:d5:ab:be:75:db:6c:04:76:5a:4f:c3:54:
a0:1d:a0:9e:c9:a2:7d:10:c4:97:b9:ef:36:83:9c:
20:91:85:35:65:d7:6a:d6:89:5c:67:54:30:b2:77:
5f:2d:69:35:b4:4a:b3:3a:a0:38:30:bd:d9:e2:65:
ca:be:06:1d:80:81:ca:9c:72:f9:27:9d:0e:b1:57:
1b:01:27:75:ad:68:c2:47:60:6a:76:6e:ce:77:eb:
98:5d:69:11:73:a2:79:74:b6:8f:d9:1e:4f:75:3c:
83:3d:40:b1:2c:d2:67:70:88:48:37:1b:c6:c8:6e:
94:9b:24:05:88:25:a8:0e:9f:e4:5c:c8:9a:52:cb:
cb:26:0c:39:63:d5:bc:7a:3d:e6:14:0d:23:15:34:
d7:4f:61:a0:14:97:78:25:76:c5:3a:68:83:f2:b0:
56:2c:cd:16:92:24:8e:fb:92:16:72:aa:a3:9b:8f:
6d:34:19:0c:9d:11:3e:3b:be:9b:cd:5a:7a:a3:0a:
e4:be:0c:97:14:6f:eb:e7:9f:a4:85:33:2d:78:b1:
17:4d:73:3b:46:3f:b4:81:f7:ab:13:06:8d:2f:23:
9f:86:b6:a5:c5:cd:ef:66:94:ac:a5:52:78:d5:19:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:90:6C:36:61:BC:AE:F3:F9:0B:20:CB:27:8A:47:29:2C:E3:8E
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ba:7c:f1:5c:a6:58:fd:c3:3e:f3:a7:59:fd:8e:7c:97:9a:
a4:49:af:19:03:99:52:17:52:99:aa:4e:c6:a9:66:50:82:6c:
17:36:cc:4c:f3:58:b7:29:a5:4d:da:45:09:b6:e7:d5:71:ac:
8e:af:61:9c:e5:bb:b3:1c:25:81:4f:cc:cd:13:d9:56:80:d8:
be:44:5d:94:76:c3:8b:54:2d:8c:c6:13:54:58:89:af:a2:b8:
2c:56:cc:fc:9c:c2:e1:b3:ab:a6:a7:e0:00:91:88:19:d3:ad:
b7:ad:e8:ff:6f:74:8d:1f:ca:c8:3b:a4:60:5a:1a:2e:70:8a:
62:bd:5b:18:fa:b0:6a:9d:6f:d4:fb:96:40:60:7f:8a:00:f2:
e9:2b:fa:f2:bf:33:38:47:39:78:59:1c:4a:28:79:b8:b7:e9:
f5:72:71:a8:db:86:51:d3:b1:ba:76:b3:22:cf:f0:54:11:5e:
c5:28:1f:03:85:62:5a:c0:9e:52:f1:15:94:b8:7d:c5:b4:50:
51:51:b6:d2:8d:cb:55:cf:e8:d5:dd:12:2a:3c:92:b2:49:c0:
4b:81:e6:47:b0:83:d4:fe:14:4a:f2:d5:c5:e2:b2:2a:1d:dc:
01:df:4c:d1:4c:e4:df:39:28:33:35:5a:2b:3b:2e:4f:2c:f0:
d6:ea:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:59:03 2024 by rpki-client on console-ams.rpki-client.org