Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: +FSjKI05/3pMggNYEpSvUGtNSt964qJ4ycC+o6ometQ=
Subject key identifier: 95:06:82:A7:88:F1:2D:B0:A0:80:5B:DD:62:33:D1:6E:4B:AE:46:AC
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 01938C9B7F40D84AC95CEF70645F7C93D53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 1320
Signing time: Tue 03 Dec 2024 13:00:21 +0000
Manifest this update: Tue 03 Dec 2024 13:00:21 +0000
Manifest next update: Wed 04 Dec 2024 13:00:21 +0000
Files and hashes: 1: 2YyO_qq4YM3hTW67Cnp-CJNf5YQ.roa (hash: NsfILaK4encHGEt/ipUyfbV+E3eqbIe7CfEmoERHrUA=)
2: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: hubRsPi2HpoIEEIhtDVZfxqRmbDmm5AbM+ngMAmVYW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:9b:7f:40:d8:4a:c9:5c:ef:70:64:5f:7c:93:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Dec 3 13:00:21 2024 GMT
Not After : Dec 4 13:00:21 2024 GMT
Subject: CN=950682a788f12db0a0805bdd6233d16e4bae46ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:c8:0e:70:af:ef:86:7c:7d:79:35:9d:1f:
6d:12:13:51:dd:15:35:d1:59:ba:71:5b:70:c1:65:
f4:a4:2d:d8:09:e3:b0:ed:9d:c4:d5:3a:41:91:41:
13:ce:21:b3:68:2a:a6:ec:f6:e0:ab:7c:9a:fe:ed:
75:b8:d0:2f:67:cc:fb:b7:36:6a:d7:ad:3a:df:e4:
41:65:73:08:08:56:72:50:8e:83:5f:f3:bc:33:a6:
65:0b:b3:73:e1:80:f4:aa:fa:f7:6b:80:81:b4:4c:
e9:93:ff:a2:c9:32:cc:2f:0e:f2:d9:e7:41:34:b0:
0c:7b:2d:26:57:1c:05:fc:6d:9f:80:d5:76:5e:d4:
64:8c:5d:cf:73:64:c6:ac:84:aa:df:d8:1f:32:2e:
d2:5b:72:43:d9:e3:b4:1d:05:a4:27:31:e9:44:85:
3f:67:20:3b:eb:f0:31:40:7d:e8:1e:a3:c4:af:b4:
91:f7:4c:58:04:13:0b:24:df:ee:7b:b3:28:f0:81:
ba:5b:59:63:7c:2f:03:02:cc:f7:42:dc:65:39:da:
5c:85:a1:10:b8:c6:94:05:a4:cc:5d:f6:90:e8:aa:
b0:58:0a:29:13:83:6f:b6:81:bf:90:9e:81:6d:ae:
50:74:2d:f1:93:e7:78:c7:6a:8a:f5:fb:af:51:20:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:06:82:A7:88:F1:2D:B0:A0:80:5B:DD:62:33:D1:6E:4B:AE:46:AC
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bc:dc:7f:cb:c9:16:26:a7:27:79:a9:e6:51:cd:93:6b:a2:
4a:ca:26:20:3f:3e:35:3a:cf:72:78:80:20:0f:18:58:b0:ff:
3b:95:ae:11:bf:41:42:f9:fe:ac:bd:b5:dc:fe:f4:6f:41:18:
8a:66:73:37:5e:f4:09:be:ef:4f:b7:cd:13:80:07:05:47:ac:
1e:0d:37:55:90:78:7b:3f:a8:fe:68:b1:68:27:fe:3e:47:55:
b9:cb:d8:b9:f2:95:50:b2:7f:89:d9:e8:e9:ed:fc:f7:b2:1c:
86:f2:b2:90:7d:35:8b:68:1c:62:6f:ec:aa:81:76:2a:d9:f9:
6c:15:10:c3:f3:15:77:d9:1f:80:2c:2b:43:4c:6e:2d:62:42:
9a:95:92:6a:89:f7:cb:39:2f:75:98:86:56:c3:4d:05:1d:ba:
ee:3e:9f:22:e4:fb:35:a1:53:e3:89:14:58:37:d1:7b:2e:74:
9c:d3:79:77:e6:9a:67:b8:ed:94:ce:dd:2c:69:c6:7f:01:6b:
c8:bd:de:1b:1f:2f:9e:22:7e:6b:da:bd:94:2c:0e:55:85:1f:
2a:b2:6b:6f:8f:e9:90:29:9b:c6:14:1d:a0:ac:36:42:7f:56:
ce:14:55:db:f0:63:fc:4f:1f:65:86:62:1e:6f:03:78:29:bc:
be:7c:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:40:21 2024 by rpki-client on console-ams.rpki-client.org