Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File: 3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier: LCw6v9OZxr8qjUfWGfBbClLwWaJXvuBhqTbVgVdFjZc=
Subject key identifier: FA:EF:74:BE:18:17:5F:87:31:D0:2C:B5:7D:E4:4A:47:DE:B3:3B:51
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer: /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial: 0194BB29486CBBADF5CCDC38C8E7CA23EB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number: 03AE
Signing time: Fri 31 Jan 2025 07:00:32 +0000
Manifest this update: Fri 31 Jan 2025 07:00:32 +0000
Manifest next update: Sat 01 Feb 2025 07:00:32 +0000
Files and hashes: 1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: EpVYDKNgTMC024AL3Ew9aT3wdJCh32wdBuW+Om1c4t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:48:6c:bb:ad:f5:cc:dc:38:c8:e7:ca:23:eb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Validity
Not Before: Jan 31 07:00:32 2025 GMT
Not After : Feb 1 07:00:32 2025 GMT
Subject: CN=faef74be18175f8731d02cb57de44a47deb33b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:11:2f:98:06:79:cf:19:59:43:a7:62:bb:
1b:da:92:b8:63:72:c7:54:0e:ee:e4:5d:61:fc:b6:
77:3f:02:c8:08:7e:ef:23:d7:12:e7:b3:6a:14:1f:
ec:dd:b2:78:38:d0:ef:91:03:e7:53:7c:96:08:c1:
8c:b5:b9:e1:eb:ba:c7:01:86:f7:65:5d:78:40:c5:
f6:fe:8c:31:54:4e:c3:2b:60:a1:d5:41:40:c2:ba:
0f:f4:9f:de:79:9f:f7:98:67:b8:ac:56:55:01:7b:
37:3d:59:a2:9f:9c:af:23:f1:7e:87:5a:81:f7:24:
e0:17:88:89:15:65:8b:fd:69:18:4b:6f:e6:37:bc:
57:2c:c5:13:61:5f:03:e2:bc:0f:0e:c4:6a:50:c0:
55:c4:33:6e:24:a7:bb:c9:19:d5:bf:10:b9:00:00:
17:bb:74:23:b4:ca:5a:ca:89:fb:59:de:13:be:02:
7d:49:34:a2:cd:d9:77:38:8e:e0:1a:a6:85:d3:bb:
8c:45:db:5a:12:57:e8:b5:a2:13:b1:8f:e2:8d:c7:
65:0c:6f:64:ec:9e:23:97:6e:69:47:b3:3e:5f:72:
84:b9:a0:02:af:6b:c0:f3:f8:c9:66:7f:a5:91:ad:
fa:82:df:1c:d8:2e:15:40:38:a0:86:dd:fa:30:18:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:74:BE:18:17:5F:87:31:D0:2C:B5:7D:E4:4A:47:DE:B3:3B:51
X509v3 Authority Key Identifier:
keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:17:9f:d3:09:8c:fb:c5:2e:d2:87:d2:c8:85:a1:4e:b3:
54:e8:bb:ec:3a:e0:55:43:98:f3:db:c1:31:c1:7c:8a:0c:33:
15:9e:28:b1:8a:1c:fd:9d:1e:00:9d:46:d2:3c:56:41:b0:8b:
e5:a9:de:6e:bc:27:65:29:cb:31:6c:ea:d1:06:6b:c0:09:93:
a0:30:06:2b:38:d8:82:2c:8b:bf:84:f4:6d:6b:e7:2e:b5:e1:
c8:0a:8f:1a:33:18:63:ac:c4:9c:b5:35:b4:33:98:7a:1e:fc:
cd:85:60:9f:78:fc:8f:d4:d2:c8:ae:84:8e:51:fa:d7:d0:68:
54:bf:53:ac:f8:cb:4a:63:5d:e6:07:86:3c:a1:a5:cf:b6:96:
58:da:3d:43:e8:13:5d:ee:7d:4d:69:32:9d:82:2e:e0:94:b5:
95:8e:82:3f:4d:8a:92:13:0c:5b:c0:0b:60:57:5c:bf:bb:24:
3c:1a:e3:b7:b9:39:51:b0:d0:63:63:d3:9b:3e:5d:a0:b8:70:
aa:c9:8d:94:9b:98:37:26:db:d2:64:cb:90:71:64:27:c8:d8:
f0:d3:49:1b:0e:04:a2:91:79:8f:2c:bd:f5:4c:0f:70:a9:ac:
fe:25:db:9c:3d:f1:28:7f:1d:bb:9d:a1:af:c9:30:2b:fa:77:
7b:3f:6b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:52 2025 by rpki-client on console-fra.rpki-client.org