Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: HmPreHehmVBIwdxOUXv12H6fmx5x06SxZGzmSNaC0IU=
Subject key identifier: D5:C4:90:49:12:3F:51:84:17:7D:8F:4F:88:B4:A3:59:BA:F6:08:BA
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 0194BB28E77CFD41BE8B9E64A313D3A8D28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0AC1
Signing time: Fri 31 Jan 2025 07:00:07 +0000
Manifest this update: Fri 31 Jan 2025 07:00:07 +0000
Manifest next update: Sat 01 Feb 2025 07:00:07 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: qzz4J92wHdUiaiqo6c2cgdzyTYttBhfNP8E6z9J1Qp0=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:e7:7c:fd:41:be:8b:9e:64:a3:13:d3:a8:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Jan 31 07:00:07 2025 GMT
Not After : Feb 1 07:00:07 2025 GMT
Subject: CN=d5c49049123f5184177d8f4f88b4a359baf608ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:51:8f:fc:76:6a:bc:6d:5f:9c:42:b7:6b:
8a:ba:41:22:e0:f4:de:a6:ce:20:a4:04:06:b9:13:
4f:57:04:83:6d:f8:2c:92:8b:96:5d:03:b2:73:72:
f5:1d:39:f9:8e:d7:c7:2f:80:71:c5:02:cc:60:dc:
c5:f5:77:76:fe:a6:74:35:ba:00:88:f0:09:73:a4:
8e:66:0e:7c:91:35:fa:a8:9c:a4:ca:a2:7c:81:b4:
4b:20:da:c4:f2:3b:d8:2d:15:ed:63:3c:6e:ee:b2:
2a:0d:32:6a:02:f6:89:e3:e2:4b:ed:51:e6:1f:f3:
62:d9:8b:97:40:14:d2:82:8b:ad:93:21:4f:ed:f7:
1f:54:06:47:09:56:df:97:1c:3f:1f:b7:08:9f:1b:
24:a8:61:f7:28:ae:0b:de:84:f0:19:04:87:56:fd:
cf:3a:d6:8a:2f:ec:4d:9e:c3:fe:df:64:8c:a3:be:
2b:30:ae:bf:04:fa:78:07:8f:7e:a1:3b:7f:15:c4:
32:e2:df:57:9d:e9:e3:95:6f:b3:41:bd:54:67:0a:
54:c6:38:ba:59:35:25:34:7d:4d:72:aa:89:7b:de:
9b:a3:cd:4c:e2:3d:86:c5:a0:87:32:2c:f6:90:62:
68:64:0c:e3:e6:06:c9:1f:8b:df:8c:06:da:3d:bb:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C4:90:49:12:3F:51:84:17:7D:8F:4F:88:B4:A3:59:BA:F6:08:BA
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:62:e8:a3:f4:22:a3:d8:77:38:63:09:59:f2:f4:a7:91:56:
9e:d8:9f:2d:67:94:1d:12:32:9a:d0:34:42:72:1c:6f:28:9b:
b9:ee:1e:7e:a5:5b:72:c8:ee:30:fe:c5:7b:23:72:25:92:aa:
b6:21:62:1e:41:2f:47:76:81:43:16:5e:d3:ab:20:37:2b:08:
0d:71:b2:29:01:12:ef:99:0a:7b:37:13:c1:b3:54:f9:6c:b3:
e1:77:26:f8:b7:2d:48:c1:94:62:0b:f7:e1:88:21:d7:8d:6e:
9b:98:5a:a2:13:5c:d4:9d:0d:19:ef:ee:9c:4f:6f:2b:62:66:
a6:c7:48:97:e3:c1:fe:07:18:bd:77:20:ba:1d:a8:bf:91:a0:
59:6a:0b:7b:a2:34:49:e8:98:e0:59:91:8f:e3:5f:c0:ff:fe:
ca:44:ca:1f:a3:d2:5d:58:0f:42:be:4b:8f:5d:d9:1a:fc:74:
2a:e2:64:5f:1b:90:a9:05:f6:fa:0b:9f:f0:1f:7d:cd:e1:6e:
15:ad:e3:fd:04:da:ce:f7:66:4a:b5:3a:3f:52:6f:2c:18:23:
2a:b1:a5:65:ee:9d:6d:85:9f:bf:e5:85:8a:f6:ae:b2:bb:1d:
b1:28:dc:59:58:88:b5:a5:df:70:ec:2d:52:6d:0b:99:27:c0:
12:e8:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:44 2025 by rpki-client on console-fra.rpki-client.org