Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: W2DB1MH7oxRXCVJOxbXEqqb7dQ4RyLNyzGygPSlrJgQ=
Subject key identifier: 39:B3:34:07:65:F3:1C:D5:47:AF:2D:90:04:84:69:81:CF:6C:07:8B
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 01901EC66A0DC678C1CEDB8016C640731DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 10B4
Signing time: Sun 16 Jun 2024 02:00:38 +0000
Manifest this update: Sun 16 Jun 2024 02:00:38 +0000
Manifest next update: Mon 17 Jun 2024 02:00:38 +0000
Files and hashes: 1: 7hHEb711dhDNZguntxR-kiz7xuU.roa (hash: fseBSgqLavY7XdGhvKtA5L7P1gaHheFXqb/x0q/lGuo=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: gukUiQbIieXDIvMAxvm3+kZBSutoobodYTKLI2Qehg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:6a:0d:c6:78:c1:ce:db:80:16:c6:40:73:1d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Jun 16 02:00:38 2024 GMT
Not After : Jun 17 02:00:38 2024 GMT
Subject: CN=39b3340765f31cd547af2d9004846981cf6c078b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:b8:6b:14:a5:f7:e4:87:b3:a5:45:0d:55:
6b:06:4f:75:e4:83:23:0b:53:1d:09:8c:12:45:ac:
e6:bc:88:e6:db:a0:b2:c2:f7:ab:e6:c4:4b:bb:96:
3d:c4:00:db:f3:84:24:75:c6:ca:00:63:92:6c:a7:
9a:bb:d8:bc:35:53:79:bb:be:ee:6c:f6:4f:af:6f:
da:39:ca:14:ab:25:09:95:cf:0b:fb:88:4d:bb:68:
bf:68:91:fb:64:e7:13:b2:ac:2d:77:9c:89:ee:d8:
10:51:95:8e:f4:41:b9:82:9d:52:13:6e:f0:ea:aa:
2c:9b:93:84:e3:61:ea:96:b7:87:d8:dc:2b:e8:33:
87:89:00:61:f2:05:aa:4d:e0:6b:b2:a0:da:3d:54:
46:a9:74:21:2e:76:ba:a4:29:f0:57:8e:62:47:68:
5c:e4:f5:52:53:86:25:a2:80:da:45:f6:88:47:68:
c0:f4:99:64:b2:a9:90:6e:be:0b:f9:ca:c7:1e:fe:
f9:64:92:56:40:20:b0:98:8e:98:d9:01:62:26:1a:
55:b3:9d:62:68:34:46:44:26:51:32:23:3b:c1:b0:
f1:9d:62:73:f1:d1:a7:84:45:73:db:2f:da:50:ab:
c0:ad:d6:b7:d1:4c:08:f7:ec:15:9b:c5:9d:d7:5a:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B3:34:07:65:F3:1C:D5:47:AF:2D:90:04:84:69:81:CF:6C:07:8B
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:32:63:44:b2:06:07:07:12:8e:33:ac:0c:8f:4f:0d:8c:48:
09:8d:1d:fc:24:ea:89:8d:43:31:b2:c8:d8:9e:25:d9:cb:8d:
08:36:fc:21:c2:c1:9f:0c:23:c9:be:5a:07:3b:68:ae:52:99:
bb:42:9a:82:af:9f:a5:54:c2:a3:ea:5d:71:4e:c4:8a:5c:ca:
ff:5c:62:50:2e:48:c1:19:34:99:67:35:94:43:42:90:50:08:
54:9e:25:d6:04:af:c9:42:85:e2:e5:86:44:a4:e5:6d:c2:19:
7d:67:e4:09:60:ae:74:5a:b3:6b:73:aa:bc:e5:24:97:fb:98:
32:ed:fe:12:a1:d6:19:87:bb:76:77:85:6a:8d:4e:64:e5:3c:
9f:b4:4b:d8:8a:0c:ce:ca:76:43:16:20:f9:fc:b3:41:0b:e2:
88:b7:bf:f4:ab:de:c5:61:02:37:28:5a:4a:8e:ae:6e:94:37:
43:f5:93:b1:09:4d:0e:3c:1f:42:f4:0c:7c:cb:73:9e:db:ba:
ef:09:be:14:cf:51:61:f7:50:aa:75:d4:5b:14:27:06:1a:b3:
18:a8:50:64:3e:52:5b:3f:22:a4:3d:ac:8e:8f:b1:f3:36:aa:
58:0b:0f:e7:c4:87:3d:cd:24:18:cb:ab:2f:6c:8a:b2:9e:8c:
a4:2c:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:56 2024 by rpki-client on console-ams.rpki-client.org