Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: 56BvPagviokn9ymOZFRnDU0BzKe6PiIA2wsV4swjIIk=
Subject key identifier: F3:FA:27:F2:33:D0:52:C9:AD:29:01:37:45:AE:23:78:7F:67:84:C9
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 01935877D0E008685C79D2E7E3FB4B4382BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0936
Signing time: Sat 23 Nov 2024 10:01:07 +0000
Manifest this update: Sat 23 Nov 2024 10:01:07 +0000
Manifest next update: Sun 24 Nov 2024 10:01:07 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: O5y0PUSblx/pK58IcChEzCUj/KnZ6VhRwT3TbAH5V8s=)
2: q-XPVtlEE1fDh9tPBIsuCKJ7kms.roa (hash: srgYHjKFFM2GxfptZDqIY+Uj7WO/DvPRlCIfLg8PblU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:d0:e0:08:68:5c:79:d2:e7:e3:fb:4b:43:82:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Nov 23 10:01:07 2024 GMT
Not After : Nov 24 10:01:07 2024 GMT
Subject: CN=f3fa27f233d052c9ad29013745ae23787f6784c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:96:38:ad:47:1e:37:35:c3:e9:95:10:c0:
1f:3d:25:f9:c9:73:c3:e7:31:f9:fe:d2:53:9c:af:
3e:38:ee:ae:ea:76:08:72:61:75:64:29:ea:5e:12:
70:dd:dc:75:5a:f2:58:2c:a2:cf:61:09:b7:91:bc:
34:23:e0:5b:bb:40:c5:08:51:83:0e:69:82:63:5d:
92:0c:20:fb:66:4f:60:58:00:e3:e3:a5:0e:36:18:
98:f9:47:e6:cb:53:ce:66:88:15:00:ab:a4:44:98:
87:17:a4:2f:b8:12:52:e8:45:04:74:43:dd:4f:9a:
f4:59:fd:db:53:13:61:a3:ee:27:aa:ba:b1:9c:8f:
10:bf:0d:ad:d2:a3:91:6f:1e:65:5a:1d:9e:77:fb:
5a:48:fb:07:0a:81:bf:40:e7:6f:2c:27:73:3e:da:
7f:6e:0f:73:c9:14:a6:80:c8:95:30:11:e5:b3:47:
cc:e5:4e:78:e2:82:c8:a3:ee:f6:ea:14:da:50:e0:
1f:63:44:f4:33:f1:97:db:39:8a:d7:f9:bf:a4:21:
13:3c:7a:c2:ba:3d:77:c5:e0:c8:7b:74:6f:d9:4f:
59:41:71:db:70:74:65:21:57:29:88:bf:b8:f3:67:
12:d0:dd:7c:f9:2b:4b:64:21:58:52:c4:e5:d5:85:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:27:F2:33:D0:52:C9:AD:29:01:37:45:AE:23:78:7F:67:84:C9
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9f:d4:c3:86:ba:01:77:44:71:b9:92:52:ef:4f:0b:d4:55:
d9:7e:4f:77:3b:52:93:f4:cb:61:4a:30:cd:7f:0e:2e:8c:a1:
6b:e6:4e:00:56:29:59:fa:0d:61:10:af:ae:d6:86:57:62:dd:
31:58:46:6a:34:ad:69:66:a9:c6:94:1d:0e:89:3f:c8:a0:65:
a9:f1:4c:e4:ef:a7:20:c9:50:44:6d:df:68:d3:18:85:0c:cc:
13:69:6a:d0:cd:5b:13:f6:8f:71:06:62:ef:37:83:0b:ca:6c:
59:a6:bd:91:e2:1e:a9:aa:64:ef:4f:74:1c:8b:ea:f9:d0:3b:
11:22:6f:75:fa:28:b4:58:ba:5f:bd:5c:95:91:ba:e4:07:77:
0b:b6:9a:47:9d:b7:21:4b:28:dd:77:b7:da:e3:7b:1e:97:6b:
67:93:24:e1:e3:0c:dd:5b:12:b6:47:d3:8d:e8:0e:9f:c1:55:
18:cb:6e:d1:db:24:ca:c2:25:d4:06:fe:4f:a0:66:7e:1f:0b:
3d:4c:ec:1f:c8:9a:61:65:47:4d:17:ac:60:1f:6c:24:5c:4e:
48:de:3c:f7:31:19:7e:78:53:0d:50:16:27:4b:4e:ce:0d:a3:
78:ac:1a:b5:88:d3:fb:55:c9:87:fc:b2:e1:38:ec:0e:aa:1f:
31:20:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:08:41 2024 by rpki-client on console-ams.rpki-client.org