Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: ncxcGksXh598YcI+zz5uBOoCmii2vw3d/OkIzOtpLvw=
Subject key identifier: FF:32:A8:01:DD:10:88:1E:D4:89:98:0D:A6:97:1B:A4:EE:D5:97:A8
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 01901DED4DA51D381757EE1201811C4FA98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 22:03:29 +0000
Manifest this update: Sat 15 Jun 2024 22:03:29 +0000
Manifest next update: Sun 16 Jun 2024 22:03:29 +0000
Files and hashes: 1: AuFmPh_llmGkGRpbmYs2kUKz9wA.roa (hash: mXln8YeRbD1ML7yB/gKGb+UnSKPY8GlCnLWln8K/NO4=)
2: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: C+VoQs+AjP4NlKiOsSoLAKZOraCp5BvseHpmjkw2MNE=)
3: Z_6qcWXafFHeeNM0JcwghYpm_Pc.roa (hash: N/RMTXzzdl30hFRA1+qOUgSZO91LlshPNCMhB213flU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:4d:a5:1d:38:17:57:ee:12:01:81:1c:4f:a9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jun 15 22:03:29 2024 GMT
Not After : Jun 16 22:03:29 2024 GMT
Subject: CN=ff32a801dd10881ed489980da6971ba4eed597a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:0b:ed:5e:18:e4:e7:9a:d6:99:f3:58:8a:
ff:be:61:7f:c5:83:56:ef:7a:86:dc:0e:1b:70:6a:
31:7d:ec:51:9c:83:dc:5f:ac:23:15:15:d9:e3:b4:
5a:ce:6d:e2:89:09:70:f7:8b:64:fc:a9:7e:df:77:
0e:52:f1:b8:0f:6c:d6:97:10:dc:e4:89:50:ab:f1:
3b:ff:3b:58:25:0b:99:35:d1:aa:2a:f9:1f:d2:07:
f5:2c:6e:91:cf:69:f9:df:64:0a:77:53:38:b7:5f:
18:3e:a3:cb:88:4c:7b:e2:51:b5:48:2a:ec:16:4e:
3d:c4:6d:20:63:c5:59:a2:13:10:ab:04:d7:4e:4f:
cd:ce:7b:fd:ae:cf:0d:f8:a0:95:f2:28:26:f2:c2:
a4:6d:c1:af:6d:9c:8e:4c:69:6c:fd:07:bf:32:11:
fd:1f:20:b3:41:da:3c:9e:56:8e:5f:f4:ff:5a:f0:
24:86:e4:de:65:ad:f0:39:94:d3:9d:43:31:bd:f1:
84:ea:3f:15:cc:ec:27:28:67:ea:a2:e9:07:41:39:
c7:52:df:c7:7a:0a:0f:f4:a3:1c:7d:ba:40:e0:95:
37:11:87:72:3c:94:7f:0f:c0:d3:f2:10:72:35:a7:
d7:7f:00:37:38:87:a0:e4:2f:68:b9:e7:c7:7a:12:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:32:A8:01:DD:10:88:1E:D4:89:98:0D:A6:97:1B:A4:EE:D5:97:A8
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2a:59:ac:45:ba:e8:26:a1:fe:4e:32:e1:e8:51:bd:93:ad:
c8:52:11:c5:39:af:8d:bd:5c:f7:90:65:e2:85:7a:3d:57:f3:
76:66:aa:af:1a:2a:2c:62:ca:b7:1a:4d:1a:21:f2:ba:6f:09:
46:92:3c:32:57:88:c2:a7:97:38:c0:bd:bb:48:08:69:1a:7c:
ca:83:aa:9c:d5:1c:b1:db:58:c6:fc:42:3f:91:e8:c5:84:74:
61:4e:77:e9:41:fe:ef:c3:94:6c:8b:14:f1:a8:1d:4e:b4:d6:
fb:43:fe:1d:ef:89:db:1b:cd:08:3f:7d:33:08:4f:64:d1:12:
76:f6:90:cd:a8:5e:e3:5f:b1:2a:b9:67:f4:f4:8a:20:60:a4:
71:b2:81:d1:8d:5c:55:82:e3:1f:5b:a3:30:26:fa:f1:66:34:
3c:58:d6:92:a8:90:4d:7f:19:89:7c:91:ca:67:67:d0:1b:b9:
09:ad:95:76:b1:4e:c1:6b:26:43:5a:8f:fb:25:26:2c:f3:1f:
2e:6a:bb:6b:f4:78:9b:78:00:76:f1:16:7d:c0:1e:fa:6f:f8:
e9:dc:b7:d3:d9:96:2f:11:dc:37:b9:b4:12:ca:63:a2:ad:99:
90:c4:1a:db:cd:e2:62:5b:d9:0d:3e:fa:bd:a0:f3:db:3c:65:
a5:2b:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:59:34 2024 by rpki-client on console-fra.rpki-client.org