Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: rt/sL77MxxELF4r3lNpPrOyJDBCJrXrGEQdgnJZHgMQ=
Subject key identifier: 4E:A0:BE:10:C5:E5:EA:30:82:CF:38:EC:F1:69:04:99:42:85:8F:AC
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 0194BA8455CC4CBA477DD480C867CAE8EE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 04:00:22 +0000
Manifest this update: Fri 31 Jan 2025 04:00:22 +0000
Manifest next update: Sat 01 Feb 2025 04:00:22 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: xoT7t6PymVbMM6Q7/0ixStIDNZJlwPy2sQPiZsnVFYQ=)
2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:55:cc:4c:ba:47:7d:d4:80:c8:67:ca:e8:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Jan 31 04:00:22 2025 GMT
Not After : Feb 1 04:00:22 2025 GMT
Subject: CN=4ea0be10c5e5ea3082cf38ecf169049942858fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:65:5e:fb:9f:d6:e9:39:d4:89:42:1a:66:
3f:05:21:9f:f1:f2:93:67:28:5e:30:63:97:a5:2b:
14:a3:70:1c:1d:94:6d:52:15:f0:8d:a7:23:03:34:
1f:b0:0d:05:85:f4:54:a8:9f:2f:e5:b0:9d:46:50:
94:f7:24:91:68:9d:29:87:b3:83:47:7d:7a:21:7a:
13:21:f1:bd:38:02:de:e2:39:ea:6e:79:33:c6:1a:
b2:5b:bd:11:5e:53:7d:39:2e:ce:c3:1d:16:52:06:
c1:5b:82:fe:a5:88:b9:6b:6b:d0:43:f9:a8:15:d0:
12:4d:77:2b:b9:25:e8:f4:24:8c:fc:f5:ba:54:a5:
f6:93:eb:58:03:4e:3c:d6:6e:c5:ea:2e:ff:a5:c6:
a4:55:f0:8f:79:6b:44:2f:2a:3e:15:cc:42:47:22:
44:ed:02:6a:39:1b:26:2f:93:9b:77:6c:3c:06:09:
94:fd:5a:7d:53:5f:20:aa:08:45:96:0b:a5:aa:fe:
46:d9:d2:3b:e6:6c:7a:d8:08:c8:9d:5b:b6:ec:3e:
28:5f:dc:8c:8b:cd:51:a6:03:98:52:23:1f:62:75:
b4:ee:40:d5:03:6d:e1:c1:6c:fd:2e:01:c9:14:cb:
fb:b1:a8:ae:e3:47:89:74:7f:14:7a:bb:94:0b:d6:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:BE:10:C5:E5:EA:30:82:CF:38:EC:F1:69:04:99:42:85:8F:AC
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c7:34:60:0b:d6:24:42:57:6d:a0:40:b7:9d:d9:5b:8a:92:
cf:a7:e2:02:88:f6:aa:8b:62:1c:ce:6f:64:a9:c4:23:b3:8e:
65:9a:6c:26:1e:c9:7c:b8:3b:d8:cc:71:0f:05:c8:8e:35:7f:
95:ff:9a:a9:74:78:8f:88:47:38:7b:c4:92:12:c5:34:1f:47:
e4:b1:93:e2:36:a1:6e:6f:67:ca:5b:3c:2d:d8:e8:1f:52:a5:
c6:a4:c5:f1:9f:79:75:d2:d1:04:81:be:41:53:b6:f1:49:1b:
8c:2d:51:5a:c9:af:c5:1a:a3:f9:40:11:fe:b2:06:e6:67:23:
de:be:98:3b:15:1a:4e:86:03:bc:8e:4c:bb:2a:66:85:d6:7d:
5f:6b:25:88:50:77:83:8a:8c:4f:22:df:e2:85:9f:90:98:ae:
67:43:52:e6:42:63:83:71:bf:60:21:98:24:cc:87:02:12:30:
29:c3:15:6d:03:e0:f4:d7:cd:14:1f:b7:88:fb:14:0f:94:2c:
e9:91:5b:56:2a:0c:4c:24:bd:3c:6f:1c:93:cf:ec:75:a4:46:
0f:2a:ac:6d:28:f5:46:26:ad:03:ee:5c:1c:be:d2:67:9a:fc:
b6:6e:3e:1a:3f:18:92:ac:51:76:fe:96:6d:fd:f6:3f:b2:7b:
77:42:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:55 2025 by rpki-client on console-fra.rpki-client.org