Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: PYteBUUXIOiANSDqe1yYVAB3AZhdaLxBgp7iNBVettg=
Subject key identifier: 6C:F9:09:97:D7:DB:74:66:E8:F4:19:5D:65:36:8E:C9:F3:08:66:59
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 0194BABBC4CCED504E757EB55523244054AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 02C2
Signing time: Fri 31 Jan 2025 05:00:55 +0000
Manifest this update: Fri 31 Jan 2025 05:00:55 +0000
Manifest next update: Sat 01 Feb 2025 05:00:55 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: q88z0cOQV2keQYsY2QovW+3C0AFYw77qfh79sQhRxNI=)
2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c4:cc:ed:50:4e:75:7e:b5:55:23:24:40:54:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Jan 31 05:00:55 2025 GMT
Not After : Feb 1 05:00:55 2025 GMT
Subject: CN=6cf90997d7db7466e8f4195d65368ec9f3086659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:c2:50:19:31:f9:06:f5:b5:f1:1d:99:01:
4f:40:95:0f:24:b9:24:96:a0:fc:b3:f6:3e:03:3c:
fd:7e:c8:65:be:b5:c0:cd:a4:29:d8:39:78:90:0f:
ec:49:04:0e:27:03:3d:45:99:c1:53:a8:00:65:80:
63:ef:cd:87:61:6e:33:5e:2d:45:19:ca:63:59:b4:
1b:78:63:c7:89:09:ce:70:62:87:91:29:10:35:08:
cb:53:bc:f9:c7:ee:c3:5f:9a:96:02:f4:c1:4a:65:
4d:a1:12:16:9d:41:9c:14:4f:55:ea:b2:94:66:74:
92:a2:90:fa:13:5f:65:fd:8a:c5:0a:11:b0:90:61:
be:ca:55:50:9b:4b:5d:91:6c:ee:d4:16:6c:49:7f:
64:51:ab:69:d8:20:0b:25:69:93:f8:4d:f1:ec:da:
0b:4a:0b:fb:16:74:22:4e:d9:5a:d0:a6:35:7e:2a:
29:c7:3b:a7:02:39:d8:6c:ce:ee:de:f6:51:34:ba:
8d:f1:ae:f1:e3:30:92:08:82:d9:59:1f:ad:ea:62:
f5:42:50:70:7d:9f:c0:a8:1c:79:70:95:bd:4f:8c:
74:6c:dd:1f:cf:50:54:f0:69:46:b1:e9:55:22:6c:
7c:5a:0d:96:84:bc:13:04:b4:fc:82:fd:e2:b5:b3:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F9:09:97:D7:DB:74:66:E8:F4:19:5D:65:36:8E:C9:F3:08:66:59
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1d:f2:f2:ce:a0:d4:aa:3a:43:ea:31:02:5e:9c:a7:74:d3:
d4:36:95:cb:00:08:3b:62:c8:c3:b3:20:14:a0:4e:4f:e1:54:
b4:06:67:5f:46:db:8e:1d:07:9b:db:81:f1:f4:56:e0:33:51:
f0:aa:e7:0f:7a:5e:c5:e5:b3:83:4d:79:40:15:f6:53:87:6b:
b9:68:14:15:8e:65:17:b1:f3:d0:e2:cf:5a:fd:78:54:cd:32:
b1:10:ae:30:7f:02:26:c5:0e:a1:85:92:b9:ba:85:0e:96:a0:
52:fb:7e:cb:55:80:d6:fb:eb:9d:b4:a5:6c:3e:32:93:ff:16:
68:7b:41:a5:94:59:77:27:8b:e2:95:cc:e4:93:83:48:6b:17:
08:fa:04:7d:4a:cc:76:82:83:9b:e5:65:08:65:ed:ce:c6:fa:
a5:b7:af:63:13:4f:70:67:16:65:29:fb:e6:4b:37:0f:be:35:
b3:bb:e8:1f:55:11:33:58:ce:73:aa:ca:44:2e:4d:1f:9f:91:
0f:66:b6:37:98:0b:f4:d5:c1:3b:8f:61:d1:65:1b:68:ef:17:
03:80:5c:4b:e6:bf:6d:82:30:a1:2c:ff:ad:00:00:ae:65:e8:
2e:0d:70:59:80:3e:ad:b4:ea:82:4a:a0:d9:07:b2:ff:c9:3a:
cf:f0:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:31 2025 by rpki-client on console-fra.rpki-client.org