Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: DzC9x+sjxRuJijjUf72MnIkLbaiEsp8wE6kr3ssVT+c=
Subject key identifier: 14:DD:A9:42:52:F9:64:01:C0:E6:F5:A5:07:2E:04:C4:A5:E9:7A:65
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 01904189A10ECD0B776D6B43009600200AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 0BD3
Signing time: Sat 22 Jun 2024 20:00:56 +0000
Manifest this update: Sat 22 Jun 2024 20:00:56 +0000
Manifest next update: Sun 23 Jun 2024 20:00:56 +0000
Files and hashes: 1: Nznyy9xshgCweLUD1_bugCiQoXo.roa (hash: gXQcEF6exSelIBpq7F1GMZVPqcnvH6gLtsL5J/YdGqk=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: luSegZrkrG6ZDc1An850sjBGukPytTicJ8VR2D5enJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:a1:0e:cd:0b:77:6d:6b:43:00:96:00:20:0a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Jun 22 20:00:56 2024 GMT
Not After : Jun 23 20:00:56 2024 GMT
Subject: CN=14dda94252f96401c0e6f5a5072e04c4a5e97a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:97:e3:51:6e:5f:2c:0f:c9:63:6f:08:47:
75:67:e5:f9:43:7e:b1:5a:2d:f7:4d:97:ab:d0:92:
3e:50:fc:bd:83:91:f9:da:07:41:a7:78:0c:b5:8e:
89:d9:9c:f5:36:5d:41:43:1f:ed:cc:4f:ac:b4:a9:
46:6c:a4:ad:93:e7:be:33:7d:51:d4:6f:b4:0b:5b:
3f:25:3e:d5:5b:d8:c2:eb:58:53:4e:93:39:61:ce:
71:ea:9f:85:63:ae:c1:85:5f:0d:0a:d5:e3:28:c3:
8c:47:c7:3b:2e:57:77:19:8f:4c:f5:65:a5:ba:d5:
63:03:0f:b3:1a:48:3f:92:4b:91:cb:97:81:0e:b9:
c2:14:1e:00:c6:2c:ff:35:df:2f:d7:e6:8c:71:ab:
41:ce:58:bb:c2:1a:b6:4a:1a:41:85:85:61:73:02:
6b:1f:5d:18:01:93:08:47:10:e4:b9:04:15:f2:42:
ee:f8:60:71:49:ed:a2:24:40:eb:f0:a9:23:32:d5:
ca:05:fd:4e:82:56:08:a4:52:34:ea:80:54:1a:c1:
56:8a:06:e0:55:80:f2:29:1f:3c:95:b5:2f:c3:ff:
56:f0:9c:ca:91:19:b3:88:7c:51:21:f8:54:88:e4:
30:64:35:f2:ba:bc:79:6c:c9:e8:51:2b:66:9b:ee:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:A9:42:52:F9:64:01:C0:E6:F5:A5:07:2E:04:C4:A5:E9:7A:65
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:e4:21:a2:8d:07:ed:9b:4e:a5:ac:09:98:0d:61:a4:87:
8b:ae:cb:cf:ee:9c:2e:c1:6b:62:d4:3e:81:9f:c8:1f:70:6d:
51:7e:af:a8:a8:3f:f2:ee:ee:82:ee:dc:58:61:99:c0:fe:74:
f0:96:bb:30:08:3a:ef:8e:28:95:7c:dc:02:5c:fc:79:57:a9:
e4:01:18:95:f9:79:81:e8:22:f4:ad:8b:22:c6:cf:a6:b0:46:
31:4a:bd:27:eb:94:10:1e:4d:7d:0c:7a:75:00:f1:4d:98:70:
b7:88:ff:30:f7:82:3a:43:d8:8f:c4:27:28:92:34:00:ac:83:
78:3b:e9:1f:8b:19:d7:d5:60:5d:5b:50:47:bc:e1:ae:db:c8:
8e:27:34:35:43:62:fa:3f:d4:d6:3f:6b:cf:9a:74:9c:8b:5d:
6e:d9:4b:e4:4b:21:ef:15:8c:f1:c7:94:47:72:d9:c3:7f:cd:
73:4c:75:59:1d:80:8c:fd:b0:44:f6:f6:c6:af:cb:f4:46:0f:
4a:e1:5d:10:2a:c2:7f:f3:52:c0:7f:99:95:90:1d:83:5b:60:
77:e2:f8:6d:4c:c3:1c:dd:cf:76:97:46:52:3f:e0:c0:91:36:
43:4b:9d:fe:82:ce:1c:db:b3:d7:f2:c4:f3:6d:cd:cb:50:cd:
6c:00:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:51:47 2024 by rpki-client on console-ams.rpki-client.org