Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
File: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft (raw, json)
Hash identifier: Q2gOP3V5o0henH8WNQOOc8Bgf/aZ8RNZX7X7K5wOE/o=
Subject key identifier: C3:E1:74:4E:12:91:18:91:47:95:B3:61:98:DA:12:F7:2D:81:00:E2
Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
Certificate issuer: /CN=dd5b224b6593e558038a9e40e660c77142755c1b
Certificate serial: 0194BB601A91340760FC3EEFEFE699473C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
Manifest number: 083B
Signing time: Fri 31 Jan 2025 08:00:25 +0000
Manifest this update: Fri 31 Jan 2025 08:00:25 +0000
Manifest next update: Sat 01 Feb 2025 08:00:25 +0000
Files and hashes: 1: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl (hash: AO/qAFCuFQECzvyOj5pIXBVK3S6NxjmAlo2R0o866J0=)
2: jU0yi7PHweJFHYaEaX0jg-4Q_RU.roa (hash: 8PA9xbvSb0ZvYzYhTOCmIzBIyrP4FgGrFueLXskDR54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:1a:91:34:07:60:fc:3e:ef:ef:e6:99:47:3c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b
Validity
Not Before: Jan 31 08:00:25 2025 GMT
Not After : Feb 1 08:00:25 2025 GMT
Subject: CN=c3e1744e129118914795b36198da12f72d8100e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:6f:1c:ff:f8:69:a7:91:df:fc:29:fc:84:
3e:f3:c2:3b:38:f9:29:af:5c:2e:94:60:20:23:33:
9c:95:88:2a:8f:e0:ca:18:22:73:63:98:73:7a:73:
0c:df:8b:bc:4f:ed:d3:99:1c:25:9b:28:0e:59:b6:
73:5f:be:f0:60:51:1f:e6:d1:89:d3:27:1a:a0:26:
4a:b3:cf:23:9b:80:e8:0a:ac:8b:c4:e3:50:bc:fa:
d9:0c:f6:f7:55:cc:13:67:21:4a:20:8b:37:7f:fc:
05:73:50:25:a6:14:80:d7:3a:28:ba:e3:04:b5:5b:
06:c5:6e:c4:81:18:e6:c1:3d:ee:65:ea:0d:ec:7e:
8d:3b:a5:c2:40:1f:c0:b3:0a:9b:02:89:24:9d:ed:
6c:61:fd:8d:dc:52:35:87:ff:a9:c1:3e:a1:3e:cb:
71:46:18:d9:d9:cd:b0:96:52:dc:89:47:d1:9c:ec:
bf:c1:c4:4c:ba:73:1a:ca:77:0c:c3:49:6a:da:55:
6d:64:db:ec:82:ef:0b:25:fa:f4:45:fb:ef:e3:e6:
5e:6b:0e:38:ba:7c:1f:bf:d3:97:bc:eb:25:e3:f3:
e7:8b:a5:52:b9:20:59:3e:79:e2:d9:6f:51:05:11:
75:26:a0:60:29:f1:b1:ab:15:45:07:54:85:cd:4c:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:74:4E:12:91:18:91:47:95:B3:61:98:DA:12:F7:2D:81:00:E2
X509v3 Authority Key Identifier:
keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:81:c2:35:c9:2d:93:c5:ac:a1:19:a6:15:87:f4:f6:39:7c:
65:3a:42:b1:86:ce:c2:1d:c8:f0:69:54:e8:25:a0:40:32:06:
80:54:98:c6:74:3e:ee:92:01:40:8b:bb:4e:6e:a4:76:23:ca:
1c:0c:fe:f6:ee:43:60:26:1c:1d:8a:0c:a5:75:07:7c:72:2c:
22:8f:a8:97:27:27:cb:a0:6f:51:49:f5:24:c9:a5:3c:69:06:
4e:94:47:47:a9:f7:71:d6:29:26:55:b1:50:4f:b5:d9:e7:0b:
ef:e9:11:f7:91:f2:31:11:11:b5:22:ac:7a:58:c3:fc:37:32:
2d:3a:5b:60:b8:44:80:f9:07:b8:21:ac:3e:5b:1f:70:43:69:
33:c6:89:ed:04:41:e7:00:c6:dc:e8:24:7d:d9:8d:a8:4a:91:
da:96:44:da:74:24:67:8a:51:45:7f:73:16:a0:4c:eb:da:ff:
a6:1b:1f:d1:bb:0e:7a:b1:c4:eb:76:37:57:30:d3:b1:31:f8:
9f:f6:02:16:37:73:15:0c:44:9f:61:6e:be:f3:81:23:3c:76:
dc:a3:ac:10:4b:f6:07:b3:c1:33:19:0c:65:89:72:67:a3:99:
5d:49:79:52:59:bd:2e:90:ec:59:a4:3e:15:9a:07:24:33:eb:
b6:73:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:03 2025 by rpki-client on console-fra.rpki-client.org