Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: m6pQghjwjs5IQEM4YvP+VMt8EYQUwfl0ZfUsNsbizIE=
Subject key identifier: E2:35:13:85:11:3B:36:71:28:29:8C:51:BC:31:C5:53:D8:17:DA:33
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 01935764AD10B77A7ACEAC35CABEC8BE6465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 125F
Signing time: Sat 23 Nov 2024 05:00:35 +0000
Manifest this update: Sat 23 Nov 2024 05:00:35 +0000
Manifest next update: Sun 24 Nov 2024 05:00:35 +0000
Files and hashes: 1: 7hHEb711dhDNZguntxR-kiz7xuU.roa (hash: fseBSgqLavY7XdGhvKtA5L7P1gaHheFXqb/x0q/lGuo=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: ygkJY/KpRYjlLjqVTNNSEA8IrQiCU+vpAacMAExlRBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:ad:10:b7:7a:7a:ce:ac:35:ca:be:c8:be:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Nov 23 05:00:35 2024 GMT
Not After : Nov 24 05:00:35 2024 GMT
Subject: CN=e2351385113b367128298c51bc31c553d817da33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:c5:0c:50:8f:da:52:aa:19:33:05:46:2a:
09:b1:0c:26:d8:db:96:d9:97:d9:99:63:f3:21:c2:
7d:29:0c:31:84:e4:1d:17:7a:c3:4a:ff:b3:ef:c0:
e4:74:ec:ea:4b:b8:75:c5:18:b8:95:60:af:35:b1:
a4:ae:c9:2c:73:6b:91:18:56:db:d5:72:75:f0:8b:
f2:a1:02:1e:cf:5a:9b:7d:ea:3c:b4:e2:49:2d:cc:
db:4e:58:5f:74:06:46:ad:63:bd:b8:64:b6:37:32:
8a:a6:3a:87:63:32:f6:69:31:04:a5:31:a5:e8:c4:
fd:ad:67:07:53:cc:07:8c:f6:6f:02:da:bb:c7:21:
af:5a:34:5f:c0:d2:69:c4:b7:b2:2f:08:15:ef:76:
bc:a5:7e:c9:6b:21:14:20:37:f1:fb:7e:fd:3a:ec:
7f:bb:34:36:d8:e7:d2:85:e2:c0:b3:13:bf:2b:7f:
eb:82:f4:d8:67:e1:5b:be:ae:98:95:27:72:07:35:
d5:42:6a:99:54:c5:42:d8:cf:69:13:1d:f0:e0:26:
39:b4:b3:20:2f:34:e3:c8:e3:be:cb:65:f3:0c:af:
40:8e:09:86:c4:33:f3:19:bf:a6:bb:ab:17:f4:6a:
c8:bb:c9:28:6a:53:9e:4e:c2:98:27:f2:21:fe:d9:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:13:85:11:3B:36:71:28:29:8C:51:BC:31:C5:53:D8:17:DA:33
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:a5:a0:da:1f:78:64:66:55:5d:d0:19:98:c6:6c:2f:ad:
a9:01:79:83:47:71:e6:f8:f1:c4:24:5f:8e:b2:98:62:2d:2f:
b4:03:ff:ed:d3:33:eb:05:c8:30:e5:46:13:7a:3d:34:97:d3:
43:9e:43:c1:e2:d0:c1:fa:d4:3c:9b:df:1a:23:60:44:a0:a4:
67:7a:8d:b8:a7:41:d6:44:a4:a8:13:8e:85:64:ab:0c:e8:d2:
13:2b:8b:ff:31:6b:df:09:e8:7b:1c:ae:2d:1b:4e:39:17:b0:
22:38:67:1c:62:e2:77:ba:d4:2e:71:8b:94:a7:ab:5f:73:19:
08:45:b3:51:dc:57:cf:08:7d:55:31:e4:45:f9:e4:4f:76:7e:
c2:9e:a8:d0:62:1b:c0:9b:b9:ec:f1:75:b8:b3:5a:d6:bf:61:
60:f9:50:3e:97:0c:ce:0c:da:87:0f:f8:4e:af:0d:53:b8:b9:
66:b9:4c:da:25:91:9a:d5:de:2b:8b:51:0d:46:c8:e2:2d:f9:
03:22:ba:02:55:b9:db:75:dc:ae:0b:03:7b:c7:36:a0:74:be:
b6:86:82:b3:17:70:64:a3:73:b2:41:c0:18:3b:ed:73:af:bd:
8f:d2:92:20:6c:6d:94:d7:4a:61:c1:f5:77:bf:08:4f:88:2a:
58:10:98:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZK0Qt3p6zqw1yr7IvmRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNWE4YjY4OGRlYWRiYjkxZWZiZTA3NzIzMDhiYWM5ZjMw
NGE1MzMwHhcNMjQxMTIzMDUwMDM1WhcNMjQxMTI0MDUwMDM1WjAzMTEwLwYDVQQD
EyhlMjM1MTM4NTExM2IzNjcxMjgyOThjNTFiYzMxYzU1M2Q4MTdkYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZvFDFCP2lKqGTMFRioJsQwm2NuW
2ZfZmWPzIcJ9KQwxhOQdF3rDSv+z78DkdOzqS7h1xRi4lWCvNbGkrsksc2uRGFbb
1XJ18IvyoQIez1qbfeo8tOJJLczbTlhfdAZGrWO9uGS2NzKKpjqHYzL2aTEEpTGl
6MT9rWcHU8wHjPZvAtq7xyGvWjRfwNJpxLeyLwgV73a8pX7JayEUIDfx+379Oux/
uzQ22OfSheLAsxO/K3/rgvTYZ+Fbvq6YlSdyBzXVQmqZVMVC2M9pEx3w4CY5tLMg
LzTjyOO+y2XzDK9AjgmGxDPzGb+mu6sX9GrIu8koalOeTsKYJ/Ih/tnRIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI1E4UROzZxKCmMUbwxxVPYF9ozMB8GA1UdIwQY
MBaAFDJai2iN6tu5HvvgdyMIusnzBKUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjIt
YmI0YTg2NzJjYzBjLzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjItYmI0YTg2NzJjYzBj
LzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp6loNof
eGRmVV3QGZjGbC+tqQF5g0dx5vjxxCRfjrKYYi0vtAP/7dMz6wXIMOVGE3o9NJfT
Q55DweLQwfrUPJvfGiNgRKCkZ3qNuKdB1kSkqBOOhWSrDOjSEyuL/zFr3wnoexyu
LRtOORewIjhnHGLid7rULnGLlKerX3MZCEWzUdxXzwh9VTHkRfnkT3Z+wp6o0GIb
wJu57PF1uLNa1r9hYPlQPpcMzgzahw/4Tq8NU7i5ZrlM2iWRmtXeK4tRDUbI4i35
AyK6AlW523XcrgsDe8c2oHS+toaCsxdwZKNzskHAGDvtc6+9j9KSIGxtlNdKYcH1
d78IT4gqWBCYOQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:41 2024 by rpki-client on console-ams.rpki-client.org