Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: 8SX0ulYGXjpOHYfXJNCiopUOJM1/K6jgapC5edEzz1s=
Subject key identifier: 9F:CC:71:B9:87:98:70:83:9C:88:F5:DC:27:43:CD:D1:64:3A:C5:51
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019355AD4E800DCC60B830C57F6FF89D54C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 21:00:41 +0000
Manifest this update: Fri 22 Nov 2024 21:00:41 +0000
Manifest next update: Sat 23 Nov 2024 21:00:41 +0000
Files and hashes: 1: 2QYxoJz7u4Bi5hNtXBbimov_sRI.roa (hash: JxeXD8h1CNqZnRlvsWfdrx4HOd3LDn/MDcy5iUW1u18=)
2: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: lPg8mEPq9rJdNXNJCc7BF0iqDaUcdHkWmJZ17EA6/iA=)
3: xWCW2TR7t7YrZbyMwjahB7EY_Yo.roa (hash: 2iihj7H1MLPp5SVR9Q77tZW7Zxl0Li0uc95zjV56x2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:4e:80:0d:cc:60:b8:30:c5:7f:6f:f8:9d:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Nov 22 21:00:41 2024 GMT
Not After : Nov 23 21:00:41 2024 GMT
Subject: CN=9fcc71b9879870839c88f5dc2743cdd1643ac551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:70:e6:39:04:c2:99:c2:d2:3f:a2:1f:3b:
ed:24:5d:e5:f8:41:aa:ae:b8:d3:4c:c5:59:77:a2:
94:95:c6:d5:17:16:2a:39:4e:13:4c:1d:c5:40:a0:
db:bf:48:92:ab:a7:5d:f5:83:c9:72:c2:84:90:97:
e2:92:52:d7:86:7b:26:a0:37:17:a2:04:11:6f:8c:
2c:1f:15:70:3b:e9:99:b4:59:0b:aa:cb:30:61:da:
88:be:47:bd:37:91:30:22:92:c2:a3:db:e4:8c:0d:
11:a6:7b:cc:d0:3b:f8:c5:1e:b1:25:2e:f8:d4:70:
e5:88:6b:7c:04:f2:2d:80:d7:aa:ba:ba:e0:e6:7f:
2e:bd:cb:c3:12:e7:a3:1e:1f:0c:c7:09:b4:10:54:
8e:2d:b6:52:73:a6:10:6f:9c:d0:7e:02:f8:1c:fe:
96:19:8f:98:4e:dd:95:b3:44:4c:f6:d7:ef:88:75:
41:b3:e2:f7:46:03:0b:a0:52:f6:f2:29:41:21:37:
b9:ea:07:b1:bf:59:36:56:87:62:cf:5f:98:2e:6d:
3c:25:7d:0f:a8:43:1e:4e:30:40:1d:f0:16:0f:13:
e3:1f:09:b0:17:39:f4:65:40:3a:a8:63:6f:74:7d:
cd:42:64:95:74:5d:21:d3:43:cd:b8:78:da:1e:88:
fc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:71:B9:87:98:70:83:9C:88:F5:DC:27:43:CD:D1:64:3A:C5:51
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5e:a6:70:f8:bb:11:d3:4e:25:80:c8:f1:6c:f8:95:d3:69:
b3:81:fe:50:fd:f8:c4:b3:6b:7e:bf:b8:db:d6:a9:ab:a3:44:
45:71:72:a0:31:2c:e9:37:6c:c7:96:11:f2:f4:7e:f5:3e:b4:
99:8f:69:e6:ca:37:1a:c2:a5:ac:2d:0e:b9:62:80:b5:6c:7d:
f4:09:fa:90:7c:7e:32:b8:c2:54:03:56:7c:d5:ec:08:a9:a7:
95:c4:64:67:2e:4f:af:0f:2b:f7:71:c8:53:20:81:5c:80:13:
68:26:3b:6c:c5:70:98:d2:35:7d:3b:38:21:34:0f:f9:d2:40:
d5:aa:29:06:34:e7:3c:ce:14:2a:0e:98:6b:bb:90:50:12:ca:
7d:66:94:8a:87:04:67:95:df:12:18:7c:60:05:66:01:04:6a:
d3:99:78:dc:e9:52:9e:b2:76:54:0b:0a:f8:64:e8:e0:95:92:
0c:1c:68:66:c1:25:4b:88:d1:2e:e2:6d:f7:ad:b3:78:7f:08:
b5:71:e3:cd:85:35:47:2f:cc:07:c8:41:7e:f4:46:60:e8:c0:
17:e9:5f:ae:c7:b8:88:b4:d5:de:20:07:10:b6:18:4e:a3:a0:
31:a9:7a:f7:35:ea:7a:3f:72:d8:61:28:8e:93:bd:72:e4:8e:
96:34:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:23 2024 by rpki-client on console-ams.rpki-client.org