Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: eXnYGems2fxvvGv57pNq0BY0lU4l3RtYerfEW6lpBYY=
Subject key identifier: B8:FA:C1:40:66:25:4B:3E:2E:11:04:DD:81:D5:1B:8C:3A:EC:10:8C
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 019357D268DE7368D017E8DBD697EC202D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 09EA
Signing time: Sat 23 Nov 2024 07:00:27 +0000
Manifest this update: Sat 23 Nov 2024 07:00:27 +0000
Manifest next update: Sun 24 Nov 2024 07:00:27 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: LrQnuPlgQ/NWtrXwRgRTo4/FHx849XYrs0A1sngP478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:68:de:73:68:d0:17:e8:db:d6:97:ec:20:2d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Nov 23 07:00:27 2024 GMT
Not After : Nov 24 07:00:27 2024 GMT
Subject: CN=b8fac14066254b3e2e1104dd81d51b8c3aec108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:72:cd:4f:db:96:8e:f4:43:28:3a:6f:2a:
34:fd:e7:fe:5a:93:2a:b5:fa:45:a6:bc:bc:56:3d:
d6:6e:09:cf:76:16:3d:21:44:64:03:69:98:c7:9a:
e7:37:e6:9c:8b:ce:c3:23:6d:3c:22:e1:f8:a8:72:
97:92:d7:95:1f:3d:62:73:55:59:13:ff:fd:19:df:
7b:f9:66:c7:f3:4e:b4:75:28:c3:71:2d:36:df:e6:
d1:75:ae:53:46:2c:0a:38:cf:f8:4f:54:a5:61:23:
6f:c8:6a:bc:55:e2:fe:9d:5d:bf:50:63:5e:5b:33:
1a:53:4d:b4:cb:e8:52:d0:c9:88:75:26:91:9e:85:
f4:41:f3:8e:0a:ec:35:7e:00:92:b7:41:88:d1:14:
b3:96:dc:04:5f:e8:d1:25:93:86:bb:57:af:87:8d:
37:41:05:62:cb:99:f4:14:fb:3a:c1:67:20:75:f7:
4c:58:16:e0:10:c8:2f:73:fd:be:40:2b:ed:c8:0b:
b7:80:03:bd:2c:46:0d:29:3c:99:3c:89:53:67:06:
c3:8e:17:b6:b4:fd:3d:94:90:15:81:38:79:f2:60:
3a:80:53:ec:a0:5d:83:fd:c6:2f:ec:43:83:46:bf:
75:95:17:bb:cd:f2:17:70:a4:2e:f5:56:80:00:a6:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FA:C1:40:66:25:4B:3E:2E:11:04:DD:81:D5:1B:8C:3A:EC:10:8C
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5d:ce:c3:ce:73:6c:2d:1e:0b:40:b7:73:2f:8a:0d:e0:09:
e0:dd:79:8e:0a:ab:97:f4:31:9e:0c:13:05:42:d9:38:dc:ab:
c0:f4:7b:01:da:13:81:cb:81:7c:cb:f8:af:0c:75:bf:c1:8b:
b4:8c:06:20:fd:d1:31:da:6a:53:2c:ce:09:76:f4:42:77:07:
e5:0c:34:1a:27:78:d6:2a:2e:f0:d1:8e:37:83:77:75:87:f1:
40:bd:09:b5:08:77:3e:26:29:f4:46:e3:09:a4:41:ef:03:53:
a2:02:86:66:59:31:16:6a:a5:3f:14:c7:e5:7b:a9:68:5d:80:
80:a5:3e:95:71:d6:45:77:f2:39:f1:61:c4:4f:ac:bc:18:d1:
db:68:53:6f:51:94:73:00:57:00:02:73:6b:45:99:1d:34:49:
81:e2:19:79:58:01:3d:4b:e5:1f:23:31:fa:0f:65:12:ff:84:
ef:2f:bc:a1:df:be:5f:78:90:5e:d7:5e:c5:b1:80:90:a4:29:
5e:25:f5:63:c3:41:36:65:7b:79:7e:d5:10:c2:bf:94:d1:55:
13:80:42:de:62:c9:09:3c:f4:82:d5:54:2c:40:45:f7:3d:64:
3b:8c:97:b2:fe:40:52:88:ce:25:a7:c8:65:d6:4f:92:d5:84:
a4:7c:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:44 2024 by rpki-client on console-fra.rpki-client.org