Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: wvY2CHOIwL9EDGAsmuvs/YNSoteXPCxg5PlbEnkgd4E=
Subject key identifier: 32:78:FE:AB:5B:1B:EC:35:D3:52:76:19:C2:91:2B:27:6D:B0:B0:8E
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 0194BA84B566B5A04542EB5DEE43780FA4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 0FF3
Signing time: Fri 31 Jan 2025 04:00:46 +0000
Manifest this update: Fri 31 Jan 2025 04:00:46 +0000
Manifest next update: Sat 01 Feb 2025 04:00:46 +0000
Files and hashes: 1: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: zTEU0omzzFWcxza6SOGlusYu0HxFWu+fdFBGlI5v1wI=)
2: I5wQnrgvMCaYn9C8yDvoLQWI0Fs.roa (hash: LLp7jSaPRxKkmfQPCgmC3oWPlWcodXukIf+OL2Y6Xy4=)
3: h62oWk5e6sS8zDCwC47t23u4hGk.roa (hash: KIOG5EX7T8Dsm3c4MU4hyZU5pek+PylPfC7rdsiyJoY=)
4: jGoTTL_48yWV-ohs_hgmOjEwT4E.roa (hash: Q0KSsruo9YLV5d/ARziN3CSGqP5OR6gQhOox+XP9FnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:b5:66:b5:a0:45:42:eb:5d:ee:43:78:0f:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jan 31 04:00:46 2025 GMT
Not After : Feb 1 04:00:46 2025 GMT
Subject: CN=3278feab5b1bec35d3527619c2912b276db0b08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:f6:0f:fc:ee:73:73:d8:e9:92:cd:0f:70:
91:68:e3:cb:9b:80:61:0d:5b:92:12:65:e5:83:3c:
6f:c2:f2:57:2a:13:e9:fd:18:32:47:81:f2:1d:cf:
77:51:db:43:73:e2:58:ea:c9:d3:2e:42:b6:9b:4f:
07:07:2e:21:61:d8:bc:71:a3:2c:4f:b9:1d:7f:5d:
96:62:63:02:eb:9d:08:89:86:4e:0a:b1:f2:be:6b:
34:c5:5f:62:e1:4a:38:9a:21:78:11:90:72:eb:04:
33:17:90:3c:c9:ce:9c:55:22:24:78:02:99:92:16:
80:7a:16:f6:78:39:2c:68:db:e3:3c:61:a7:59:a2:
ca:16:6b:d0:ae:e8:d2:9e:dc:3f:90:b1:99:53:79:
8f:b8:9a:60:24:1d:1f:7a:9f:1b:c9:82:81:f0:e2:
82:30:d6:38:5a:0b:ad:75:d0:f0:3f:07:82:42:89:
60:cf:ea:de:6a:a0:77:d4:f5:91:61:fd:ba:d1:a9:
8a:2a:bb:c6:12:a0:46:ce:4f:6c:c2:5e:2e:07:8f:
eb:ed:24:21:89:3c:86:25:9d:0b:cb:ba:c7:54:a9:
3c:b1:b4:2b:1e:42:5e:8c:3f:e9:a1:23:ba:31:69:
0b:74:ea:e6:7a:e9:db:d1:26:4d:85:b5:88:64:da:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:78:FE:AB:5B:1B:EC:35:D3:52:76:19:C2:91:2B:27:6D:B0:B0:8E
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:72:78:31:af:e7:a3:37:4f:81:55:ea:70:f4:24:e7:1b:d1:
31:a6:be:07:36:d9:dd:9c:0d:76:f7:cc:d6:2b:cc:f4:bd:76:
79:fa:e3:3b:da:37:0b:8b:b3:8b:c8:cb:48:9f:99:de:7f:00:
bc:4f:21:bd:d4:55:b2:45:4b:ca:02:90:e2:b5:46:56:38:60:
af:5a:c1:b0:62:69:4c:e7:71:e8:a7:0b:81:98:b9:81:10:18:
1d:c2:63:bd:21:62:de:3e:87:36:ae:36:d5:73:71:44:32:02:
5f:fc:26:4d:97:79:f7:d5:61:4c:d4:95:97:a5:19:89:15:fa:
1c:42:28:76:23:9f:75:f8:38:7d:09:99:31:49:b5:18:2c:db:
66:23:f7:49:19:4f:93:18:94:77:36:ed:86:6b:47:69:47:4e:
97:5e:5b:c0:1c:94:85:13:bc:9f:c7:c2:34:9d:e1:5d:d6:c0:
18:82:ba:cc:46:40:63:d1:1c:62:13:1d:77:f4:47:26:fa:7f:
17:b5:8d:cd:61:63:d4:26:43:8e:a1:64:99:90:6a:cc:f6:60:
03:8f:85:8b:69:33:a7:a7:6c:e5:70:23:f1:31:70:0c:83:57:
c9:8a:c8:13:6c:16:fe:9f:54:70:6c:9e:56:bc:df:c7:9f:58:
e8:68:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:03 2025 by rpki-client on console-fra.rpki-client.org