Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: TTlE/koY4lUAoSV+lOLZwgVP/Cz7JLwh5xeU1azwREU=
Subject key identifier: A3:5D:20:EC:01:92:71:31:9D:CC:62:8D:41:D8:07:15:0F:41:A4:9C
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 018F885B5DAE473E806E5FD174C30CC174DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 110A
Signing time: Fri 17 May 2024 21:00:39 +0000
Manifest this update: Fri 17 May 2024 21:00:39 +0000
Manifest next update: Sat 18 May 2024 21:00:39 +0000
Files and hashes: 1: 7YOusaKLJ8pIs_k5EVCkumHpVK0.roa (hash: xyjy36aC3yH+bR2qZjciQkjuIo6u0e59MwjJr5xyx4c=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: GFJ3YuWD439GS7PZVSHFA/hJy+pYHWGXnyQuvLTmvPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5b:5d:ae:47:3e:80:6e:5f:d1:74:c3:0c:c1:74:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: May 17 21:00:39 2024 GMT
Not After : May 18 21:00:39 2024 GMT
Subject: CN=a35d20ec019271319dcc628d41d807150f41a49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:67:c3:d8:9b:a8:60:0f:39:9f:91:50:9e:
d0:76:2c:1b:3c:3b:ff:a7:58:ad:3b:71:a5:c2:62:
e0:f8:78:29:01:d5:de:c0:a6:a6:61:ff:47:cd:aa:
60:fe:2e:14:8d:ee:2f:2a:72:03:c6:d0:ca:5b:d2:
b9:48:1e:11:91:1e:7a:e1:bd:b1:53:c5:85:6c:b7:
ce:94:37:1b:49:0b:ff:0a:c0:75:45:14:73:67:ed:
ed:a1:00:0a:42:4b:20:97:18:30:91:ca:89:16:47:
5c:3d:ed:fd:5b:8e:bf:91:f3:c3:72:a2:38:1b:85:
4a:67:42:2b:4d:9a:f9:ca:25:7a:7f:7b:b3:3e:91:
2f:01:87:77:69:c7:c5:d0:2e:3b:08:e6:7f:f3:68:
79:9b:56:95:ba:61:3a:e5:31:c9:4f:f3:87:f6:85:
79:90:7f:90:8f:c3:2c:2e:bc:9b:75:fe:72:9e:2e:
04:13:4c:12:4b:cd:6e:a4:a0:57:2b:0c:d5:6a:e8:
df:17:30:88:e9:bc:4a:2d:4d:f6:c3:e4:5f:11:bb:
85:e7:12:f0:ed:3f:94:dc:29:0d:93:0d:b7:52:ee:
91:a0:52:01:9d:70:08:75:02:15:32:a3:1a:46:9d:
29:a1:a3:68:6a:6e:f6:86:89:94:0c:89:31:0a:53:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:20:EC:01:92:71:31:9D:CC:62:8D:41:D8:07:15:0F:41:A4:9C
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ca:5a:0d:3d:50:0b:d0:b9:f7:8a:2a:12:bf:46:74:4b:fa:
01:4c:12:b8:9d:78:32:1a:0b:b8:6f:50:2a:07:6c:04:dc:66:
96:95:70:df:47:63:36:5d:e1:bc:74:4e:89:3a:4f:22:f5:52:
5b:aa:5a:d6:63:a0:29:bf:80:41:da:63:4b:41:83:7d:ab:84:
4c:52:1c:71:ec:25:04:81:9c:f0:af:88:b1:bb:2c:79:6d:af:
88:f4:ab:46:46:04:2e:49:bb:b3:b6:7d:7f:28:b3:81:91:b9:
4c:d9:68:f4:9a:65:48:1f:0b:d9:71:db:52:c2:56:b1:ba:d4:
52:64:6d:e2:7b:29:73:85:23:af:ce:5a:bd:34:b3:67:10:11:
98:72:15:6a:f6:6b:7f:e7:76:31:5c:39:41:ea:c9:50:47:14:
c9:a0:08:51:bc:68:3e:c6:a0:fe:39:d0:4a:45:08:35:43:b6:
f9:39:33:1d:94:f4:c5:fa:86:12:3d:59:bf:65:7d:d0:16:51:
4f:0e:84:35:17:2e:89:25:10:f1:99:c4:f6:31:35:49:85:94:
a6:90:e8:91:eb:74:6e:91:28:83:76:18:67:e6:69:0e:69:59:
75:b1:f6:0d:28:40:71:b9:81:f9:b6:5a:1d:f2:fc:0a:44:7c:
6c:23:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:07:05 2024 by rpki-client on console-fra.rpki-client.org