Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: cjPg0gxGPZg5kyiFglR/IsKtwoVVTaUWWpDUbXJMjQQ=
Subject key identifier: AF:55:4C:46:98:5B:F6:59:A3:2E:C7:DC:55:15:42:3B:43:28:12:26
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 0194BB2951D0334BCCDB71F13665CD48E450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 0F84
Signing time: Fri 31 Jan 2025 07:00:34 +0000
Manifest this update: Fri 31 Jan 2025 07:00:34 +0000
Manifest next update: Sat 01 Feb 2025 07:00:34 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: n09U7tH6vOzgxrNmqeO/zVLHmUDQrcV4PYbtZvm0uAQ=)
2: Rsq1KtzfZb2Gv4ObbEjxGcXkZwI.roa (hash: peUxHeNiz+fH8nbCOCYsRkuwwMY+SxJRD7icSc0BEwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:51:d0:33:4b:cc:db:71:f1:36:65:cd:48:e4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Jan 31 07:00:34 2025 GMT
Not After : Feb 1 07:00:34 2025 GMT
Subject: CN=af554c46985bf659a32ec7dc5515423b43281226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:34:00:69:a4:c0:67:dd:0e:12:f9:52:d1:
4a:57:6c:14:a0:d2:cc:f7:16:6b:23:4c:88:33:03:
af:87:87:19:07:7d:71:2b:fa:2d:fe:11:f4:4f:5d:
71:d0:41:e2:e3:29:b5:48:27:94:be:92:09:1c:ab:
8f:1d:45:bc:9b:ff:aa:71:4e:b3:fc:63:2a:c3:23:
87:43:ab:68:97:60:7d:42:33:c5:76:49:eb:94:0d:
dc:80:65:5a:4e:bf:7f:95:67:44:c3:a0:c2:ad:3f:
fe:1d:a0:e3:bd:84:96:b5:9a:76:7d:3f:be:4a:56:
c0:6e:e4:11:ed:24:92:0e:29:b8:fa:cd:6b:ab:64:
cd:96:5f:5b:74:10:7b:81:64:7e:d9:ef:35:73:6f:
d9:e0:56:8d:81:bc:00:30:96:c7:a5:28:ec:73:4e:
19:09:34:d4:99:fc:99:dd:69:67:b2:1a:34:4f:4e:
81:dd:7b:a9:60:7a:10:5d:23:e8:96:7a:e0:bf:07:
87:36:60:9d:50:64:53:d2:1b:63:fc:cb:aa:42:a3:
61:68:f0:88:5f:d3:d1:00:26:68:64:9a:e0:b2:0c:
e5:2f:b3:9b:12:49:e7:91:d6:d0:30:2a:15:a3:d0:
7e:cd:d1:40:8a:64:f6:1f:b1:9d:5f:f0:b1:21:45:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:4C:46:98:5B:F6:59:A3:2E:C7:DC:55:15:42:3B:43:28:12:26
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7b:bc:65:ba:10:69:15:4a:83:87:77:50:1b:d3:56:83:6d:
5a:9d:a0:79:f5:c6:75:b7:14:5d:4d:b3:70:04:07:eb:42:22:
5c:cb:d3:9e:6b:bc:9b:10:b8:c4:a5:c4:24:01:26:4c:84:1b:
a4:2c:5e:da:b1:b9:b7:65:ed:66:d8:cc:c7:6b:e7:8a:07:a2:
28:03:8b:7a:f6:70:4e:90:30:cb:61:fe:a0:b9:9a:c5:eb:99:
2e:90:8c:3f:34:e1:e0:8a:34:3b:f2:40:e8:85:67:51:26:b0:
e1:e9:66:70:ae:11:5a:89:b8:fd:2f:b4:b9:b0:48:2d:3e:e8:
bb:81:e5:d4:c7:72:53:9f:df:0c:ad:73:6f:b3:65:90:6b:8b:
f6:66:b1:66:00:bf:46:a7:d2:46:19:c2:a8:c7:0d:9e:2f:9d:
21:cc:e9:aa:d2:11:26:77:89:91:fb:cf:a1:1d:e3:33:e0:71:
e7:29:0f:d8:34:c9:ff:58:1a:48:bf:41:11:4c:45:69:6d:67:
3e:cf:63:ab:66:1b:c6:ee:c3:7a:73:63:bb:ce:0a:b2:e1:d4:
6e:50:81:c5:93:2a:34:79:ea:07:61:8b:ae:29:78:61:e6:e8:
40:1f:6b:ed:9e:16:05:f0:e0:ae:f8:ef:50:46:c3:49:cb:90:
04:4f:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:37 2025 by rpki-client on console-fra.rpki-client.org