Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: IppCFpyeoD7u+DUMnHfEH/y6FFSgz3UZddp9Wn8cDJ0=
Subject key identifier: CA:F5:A9:2F:F9:4D:86:DF:95:0B:74:97:94:F6:A2:FC:D7:66:45:7C
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 0190448C1A5968E4A3C35BD6091B8DE8ABB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 11D9
Signing time: Sun 23 Jun 2024 10:02:30 +0000
Manifest this update: Sun 23 Jun 2024 10:02:30 +0000
Manifest next update: Mon 24 Jun 2024 10:02:30 +0000
Files and hashes: 1: AuFmPh_llmGkGRpbmYs2kUKz9wA.roa (hash: mXln8YeRbD1ML7yB/gKGb+UnSKPY8GlCnLWln8K/NO4=)
2: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: rqBzjLns2/gGhB7k0kloM5/5276B8+hwyDCe9gVixsM=)
3: Z_6qcWXafFHeeNM0JcwghYpm_Pc.roa (hash: N/RMTXzzdl30hFRA1+qOUgSZO91LlshPNCMhB213flU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:1a:59:68:e4:a3:c3:5b:d6:09:1b:8d:e8:ab:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jun 23 10:02:30 2024 GMT
Not After : Jun 24 10:02:30 2024 GMT
Subject: CN=caf5a92ff94d86df950b749794f6a2fcd766457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:c0:1b:38:b2:b0:c3:19:60:9d:1b:1b:ff:
61:b2:5a:74:1c:11:84:e0:be:ad:5f:16:2e:d3:26:
5f:06:5d:d1:50:02:71:96:b9:0e:35:4f:92:b9:67:
17:6b:59:ef:1f:98:a0:24:4e:64:ec:e8:34:95:1e:
1a:33:fe:a9:1e:c7:2f:d6:88:a7:68:99:fa:7b:05:
74:7f:90:19:ea:43:cc:72:a4:fa:31:47:2a:fa:dd:
1e:07:b6:52:33:77:5e:8b:58:98:67:a5:e4:6c:aa:
9d:1b:fd:e3:1c:9c:ef:9b:49:ae:00:e8:80:04:2f:
5e:75:6a:3c:0d:ed:93:fc:aa:01:a7:d5:3d:0f:ec:
9e:28:43:c0:0e:15:1f:8e:0e:72:9e:9a:ca:46:7a:
ca:eb:f6:7d:10:ee:f7:60:86:65:aa:99:f1:8c:02:
40:f3:93:7e:df:ab:2e:f5:cc:a7:40:17:5e:37:ef:
db:38:a2:93:ac:0b:ed:27:30:e9:37:2d:72:07:9f:
af:8e:1b:2c:a9:64:81:ab:57:72:be:be:e5:3c:29:
7a:29:e9:1a:3b:23:f6:ec:c2:a3:5a:39:4c:8b:ff:
b8:e2:4c:f0:80:ec:1a:aa:73:77:66:36:c1:46:82:
bd:91:90:0a:8d:74:19:75:ba:ac:46:f0:c4:e5:49:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:A9:2F:F9:4D:86:DF:95:0B:74:97:94:F6:A2:FC:D7:66:45:7C
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8f:b6:94:26:8c:61:50:f0:2f:8b:bb:c8:17:0e:f1:b8:3e:
32:08:c0:bd:55:95:fd:04:b4:79:b8:01:e9:47:ca:c4:a2:81:
eb:20:93:42:ae:5e:44:ff:31:bc:3a:29:34:ea:65:26:60:f7:
cc:df:7d:31:9b:ba:c3:47:75:39:7f:86:ac:a9:d6:c6:81:70:
94:d6:bd:6a:d2:bc:39:20:81:2a:26:a6:82:71:2c:c4:ed:18:
88:b3:80:14:6e:13:35:0f:e1:e5:3f:d5:46:98:de:79:51:91:
68:2d:4e:85:c7:b9:8d:81:fc:e9:73:8a:6a:43:7d:57:70:e1:
a9:54:99:93:23:07:dc:58:ee:c6:49:84:7f:e9:38:b3:be:73:
5c:7b:d9:05:6b:99:61:8b:2b:78:bd:11:ba:bd:ac:dd:c5:b1:
94:6a:f3:c0:13:2f:f6:21:c0:64:6c:68:a5:2b:f7:17:f7:db:
ca:da:7b:d7:18:34:c0:ec:4a:6d:47:33:24:45:f8:7d:33:c2:
17:f6:3d:df:92:1b:6d:f2:2d:2a:6e:4c:0c:27:11:fd:cb:c8:
58:c9:d7:05:3d:be:e1:21:44:f5:da:c3:d3:42:c0:b3:75:15:
a2:82:61:5d:43:6a:bd:f0:75:2f:e9:aa:0d:3e:b4:17:42:98:
5a:3e:2d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBEjBpZaOSjw1vWCRuN6KuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy
ZjFkNWUwHhcNMjQwNjIzMTAwMjMwWhcNMjQwNjI0MTAwMjMwWjAzMTEwLwYDVQQD
EyhjYWY1YTkyZmY5NGQ4NmRmOTUwYjc0OTc5NGY2YTJmY2Q3NjY0NTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKvAGziysMMZYJ0bG/9hslp0HBGE
4L6tXxYu0yZfBl3RUAJxlrkONU+SuWcXa1nvH5igJE5k7Og0lR4aM/6pHscv1oin
aJn6ewV0f5AZ6kPMcqT6MUcq+t0eB7ZSM3dei1iYZ6XkbKqdG/3jHJzvm0muAOiA
BC9edWo8De2T/KoBp9U9D+yeKEPADhUfjg5ynprKRnrK6/Z9EO73YIZlqpnxjAJA
85N+36su9cynQBdeN+/bOKKTrAvtJzDpNy1yB5+vjhssqWSBq1dyvr7lPCl6Keka
OyP27MKjWjlMi/+44kzwgOwaqnN3ZjbBRoK9kZAKjXQZdbqsRvDE5Ul+QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr1qS/5TYbflQt0l5T2ovzXZkV8MB8GA1UdIwQY
MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct
OTc4NWEzMzU1NDJhLzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh
LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAII+2lCaM
YVDwL4u7yBcO8bg+MgjAvVWV/QS0ebgB6UfKxKKB6yCTQq5eRP8xvDopNOplJmD3
zN99MZu6w0d1OX+GrKnWxoFwlNa9atK8OSCBKiamgnEsxO0YiLOAFG4TNQ/h5T/V
RpjeeVGRaC1Ohce5jYH86XOKakN9V3DhqVSZkyMH3FjuxkmEf+k4s75zXHvZBWuZ
YYsreL0Rur2s3cWxlGrzwBMv9iHAZGxopSv3F/fbytp71xg0wOxKbUczJEX4fTPC
F/Y935IbbfItKm5MDCcR/cvIWMnXBT2+4SFE9drD00LAs3UVooJhXUNqvfB1L+mq
DT60F0KYWj4ttg==
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:42:38 2024 by rpki-client on console-ams.rpki-client.org