Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.mft
File: mflcN9caovSWleE_QX4wqXMEqvQ.mft (raw, json)
Hash identifier: N+z2BpUxxhaMxtK/oMFMeQqGQgrJPeNdujd4GTkQvBI=
Subject key identifier: 4B:47:0F:31:4B:93:C1:5B:2B:3A:1E:B8:96:74:74:4B:8D:5D:7C:EE
Authority key identifier: 99:F9:5C:37:D7:1A:A2:F4:96:95:E1:3F:41:7E:30:A9:73:04:AA:F4
Certificate issuer: /CN=99f95c37d71aa2f49695e13f417e30a97304aaf4
Certificate serial: 01903F2D89E5CE9C168763142130B519D7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.mft
Manifest number: 09EE
Signing time: Sat 22 Jun 2024 09:01:07 +0000
Manifest this update: Sat 22 Jun 2024 09:01:07 +0000
Manifest next update: Sun 23 Jun 2024 09:01:07 +0000
Files and hashes: 1: cZDJ0tg7E7zfW2kAPW7a9MLEwOs.roa (hash: FP5DF5mwbgabPSmCCshKZeehn/mD14DG5iUOIotN2Is=)
2: mflcN9caovSWleE_QX4wqXMEqvQ.crl (hash: MvUevMGLfNC81uf9LyM1BSljNuKFtqiR9roMQDn0Nqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3f:2d:89:e5:ce:9c:16:87:63:14:21:30:b5:19:d7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f95c37d71aa2f49695e13f417e30a97304aaf4
Validity
Not Before: Jun 22 09:01:07 2024 GMT
Not After : Jun 23 09:01:07 2024 GMT
Subject: CN=4b470f314b93c15b2b3a1eb89674744b8d5d7cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:b5:58:d1:fe:c6:f7:ee:ae:c4:d4:83:19:
d2:41:0e:f2:e2:4e:14:a3:22:e8:59:fa:ea:a9:02:
d1:74:cd:d5:a7:ba:92:a9:93:76:c3:06:91:fa:6c:
d4:07:1d:87:b5:2f:0e:1f:18:17:c3:9a:d5:f0:e5:
2a:66:52:42:eb:62:f4:b1:a0:60:59:3e:0d:88:b2:
1b:3f:13:90:36:f7:29:dc:6a:50:d2:b0:32:42:98:
03:22:65:93:a2:f7:01:d1:56:d3:a5:1f:4b:c5:47:
a5:de:d4:8d:9b:48:db:d4:f2:77:db:99:b5:29:f3:
59:6a:58:e1:50:47:b4:08:eb:a0:7a:a2:8c:04:1a:
63:ec:98:8c:ff:19:53:e2:7f:43:a3:49:de:f5:39:
75:b7:e6:01:7d:55:26:5f:2b:fe:25:b0:86:11:c2:
3c:b7:48:9e:64:2d:45:7c:9d:85:c3:7f:9e:f1:db:
b0:1a:2a:c4:95:68:3f:9f:e4:95:30:8d:d1:37:a9:
24:04:bc:8c:7a:28:59:af:aa:e5:6d:dd:b6:13:8b:
3a:e8:1d:7d:39:67:5b:dd:c1:28:29:21:c5:dc:cb:
38:15:26:0f:9a:87:5b:98:d5:52:73:da:ca:b7:73:
b6:c1:9d:ec:20:c2:3b:59:c4:85:ff:69:7a:83:4d:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:47:0F:31:4B:93:C1:5B:2B:3A:1E:B8:96:74:74:4B:8D:5D:7C:EE
X509v3 Authority Key Identifier:
keyid:99:F9:5C:37:D7:1A:A2:F4:96:95:E1:3F:41:7E:30:A9:73:04:AA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mflcN9caovSWleE_QX4wqXMEqvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b8301-9391-4384-b951-5eee123b38dc/1/mflcN9caovSWleE_QX4wqXMEqvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d5:32:ff:d6:17:9d:37:aa:1a:b9:e2:b9:4e:ed:8c:72:a6:
57:cd:65:7f:59:9f:fd:9c:3d:6d:49:af:9e:2a:ce:9a:f7:a0:
cd:cb:9f:aa:ab:7e:8e:e0:1b:ca:94:63:31:08:d8:2c:0b:43:
7f:70:74:14:76:34:b3:f2:7e:bb:fe:33:52:9b:40:72:74:90:
ad:5e:76:36:f8:40:07:f5:f6:8a:4b:38:89:50:6c:be:ae:4f:
c9:b8:96:82:57:26:29:36:6f:19:1f:e3:f0:35:24:be:5a:d5:
f2:18:5a:62:80:eb:20:c3:35:db:5e:ba:4d:93:66:8b:4a:db:
7d:b3:c9:a4:d4:be:e4:68:b1:00:75:5e:e9:79:47:59:bf:17:
c9:cd:8f:51:6f:c8:4b:8d:fa:a1:b1:8f:46:7a:5b:ad:b1:2e:
ae:15:d0:39:d7:c5:87:82:74:80:c1:d0:b8:40:29:a9:e2:23:
f9:32:52:4f:1f:d5:36:34:26:ea:69:17:9a:e2:f1:83:5e:2b:
9f:b7:03:c0:3d:90:06:e9:9c:02:b9:22:30:0f:e0:52:89:e3:
97:53:1e:1a:9e:53:f4:e4:12:7c:ed:f9:81:f7:3b:63:c6:24:
78:7f:90:7c:85:c8:2d:3e:46:4f:cc:5a:68:62:9d:3b:67:94:
db:49:dd:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA/LYnlzpwWh2MUITC1Gde3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Zjk1YzM3ZDcxYWEyZjQ5Njk1ZTEzZjQxN2UzMGE5NzMw
NGFhZjQwHhcNMjQwNjIyMDkwMTA3WhcNMjQwNjIzMDkwMTA3WjAzMTEwLwYDVQQD
Eyg0YjQ3MGYzMTRiOTNjMTViMmIzYTFlYjg5Njc0NzQ0YjhkNWQ3Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6i1WNH+xvfursTUgxnSQQ7y4k4U
oyLoWfrqqQLRdM3Vp7qSqZN2wwaR+mzUBx2HtS8OHxgXw5rV8OUqZlJC62L0saBg
WT4NiLIbPxOQNvcp3GpQ0rAyQpgDImWTovcB0VbTpR9LxUel3tSNm0jb1PJ325m1
KfNZaljhUEe0COugeqKMBBpj7JiM/xlT4n9Do0ne9Tl1t+YBfVUmXyv+JbCGEcI8
t0ieZC1FfJ2Fw3+e8duwGirElWg/n+SVMI3RN6kkBLyMeihZr6rlbd22E4s66B19
OWdb3cEoKSHF3Ms4FSYPmodbmNVSc9rKt3O2wZ3sIMI7WcSF/2l6g00LhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtHDzFLk8FbKzoeuJZ0dEuNXXzuMB8GA1UdIwQY
MBaAFJn5XDfXGqL0lpXhP0F+MKlzBKr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZsY045Y2FvdlNXbGVFX1FYNHdxWE1FcXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjgzMDEtOTM5MS00Mzg0LWI5NTEt
NWVlZTEyM2IzOGRjLzEvbWZsY045Y2FvdlNXbGVFX1FYNHdxWE1FcXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YjgzMDEtOTM5MS00Mzg0LWI5NTEtNWVlZTEyM2IzOGRj
LzEvbWZsY045Y2FvdlNXbGVFX1FYNHdxWE1FcXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtUy/9YX
nTeqGrniuU7tjHKmV81lf1mf/Zw9bUmvnirOmvegzcufqqt+juAbypRjMQjYLAtD
f3B0FHY0s/J+u/4zUptAcnSQrV52NvhAB/X2iks4iVBsvq5PybiWglcmKTZvGR/j
8DUkvlrV8hhaYoDrIMM12166TZNmi0rbfbPJpNS+5GixAHVe6XlHWb8Xyc2PUW/I
S436obGPRnpbrbEurhXQOdfFh4J0gMHQuEApqeIj+TJSTx/VNjQm6mkXmuLxg14r
n7cDwD2QBumcArkiMA/gUonjl1MeGp5T9OQSfO35gfc7Y8YkeH+QfIXILT5GT8xa
aGKdO2eU20nduw==
-----END CERTIFICATE-----
Generated at Sat Jun 22 10:16:54 2024 by rpki-client on console-fra.rpki-client.org