Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json)
Hash identifier: /Oq1pZMGW5DOn1N+bogKcJ42avgFBy5OmkHd/ky2wcE=
Subject key identifier: 71:52:F7:B4:0A:FE:49:A0:29:1C:E4:A6:F3:46:8C:1F:80:B2:37:46
Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Certificate serial: 018F96BDE2FD19228765EB37B06BD6355C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
Manifest number: 1181
Signing time: Mon 20 May 2024 16:02:57 +0000
Manifest this update: Mon 20 May 2024 16:02:57 +0000
Manifest next update: Tue 21 May 2024 16:02:57 +0000
Files and hashes: 1: 3VFXPqnsN6twQWtX4HdC-Y4904I.roa (hash: rSbNkdEwxZ2dWTKl3C1FrTUCbAH6he55ZexPOXXZ7U4=)
2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: Zuq5FE62U7soKTe8UREbsx9t8He9JBXO+TeLQHiuGHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:bd:e2:fd:19:22:87:65:eb:37:b0:6b:d6:35:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8
Validity
Not Before: May 20 16:02:57 2024 GMT
Not After : May 21 16:02:57 2024 GMT
Subject: CN=7152f7b40afe49a0291ce4a6f3468c1f80b23746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:db:72:99:25:71:f5:6f:1b:d8:b5:eb:d9:
4d:33:cc:61:48:d3:3d:0d:9e:76:b2:7d:bc:5c:6f:
d5:ce:74:3b:d4:24:d4:9a:d1:7a:c5:f4:65:e6:b0:
c9:04:bf:f8:3a:f9:d8:cc:70:43:3d:5f:22:09:99:
82:07:9d:88:3b:fb:ae:f2:c4:b5:a3:85:eb:00:b5:
4c:89:c8:a8:b2:fb:ac:44:22:aa:bb:81:66:6d:5b:
ec:a0:33:f3:a0:68:48:ba:82:eb:9f:8d:85:24:68:
15:2f:36:46:75:09:48:c9:88:43:be:a8:ad:8a:46:
75:ab:81:b4:f7:4e:22:4a:2b:b4:b5:46:4f:24:6d:
d5:3e:c6:c9:ed:b0:9b:e7:60:b3:d1:d2:db:f3:c6:
c3:ea:fd:4f:fc:b9:de:d3:cf:ea:b4:96:26:43:4d:
aa:f9:02:89:44:dd:52:89:72:da:e1:29:1b:90:37:
be:ff:ce:eb:5c:13:d1:12:d8:61:54:c1:eb:97:27:
66:2f:45:d9:28:76:bd:ec:97:99:1d:23:cd:e4:e6:
a4:39:91:e3:21:68:40:c8:73:9d:cc:39:54:e5:e3:
d2:b3:04:75:4f:2c:cf:28:52:2e:3c:4c:11:46:5b:
ef:ff:0c:a6:3f:8c:25:ce:e6:7e:be:9e:77:77:fa:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:52:F7:B4:0A:FE:49:A0:29:1C:E4:A6:F3:46:8C:1F:80:B2:37:46
X509v3 Authority Key Identifier:
keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3b:67:75:77:dd:c8:84:48:4d:c2:b7:7a:56:fe:93:c6:b6:
09:38:3f:de:1d:46:be:d9:16:ae:91:ba:11:f9:f4:50:24:7e:
ed:a7:2c:dc:41:74:8a:96:78:05:50:fe:43:b7:ca:f0:f8:d2:
87:60:29:fb:36:f2:c3:18:14:0d:06:86:00:7b:e4:f3:d7:7f:
6d:c3:54:e5:f1:17:a8:25:c8:97:b8:78:0d:87:7e:27:4a:31:
78:43:6d:3f:86:6c:fb:d8:c2:51:df:e7:d9:fa:aa:58:a3:49:
30:72:91:2a:ff:98:e5:e7:21:45:1f:1b:cc:de:3c:98:63:c7:
87:d3:82:6b:b9:9c:90:ca:c5:2c:d3:b7:f7:71:61:10:7e:0f:
38:34:c4:73:b7:be:21:7e:ff:ea:3e:d8:6b:91:c9:ae:3e:20:
f3:46:a7:77:c6:5f:7a:b0:72:a5:a5:53:c3:4e:9a:4f:30:dc:
3e:97:24:3e:3b:4d:02:31:cd:61:a6:a3:6f:4c:81:85:66:ae:
66:b7:91:af:a0:47:d3:48:85:58:b5:d0:8d:51:67:c1:2f:50:
88:06:52:69:ed:ab:34:0b:a3:f5:8e:db:98:6a:79:96:96:97:
3f:93:33:16:a9:5b:99:65:23:24:05:d8:ec:51:f1:a1:f6:bc:
57:00:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:17:10 2024 by rpki-client on console-ams.rpki-client.org