Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: QPqmBsQviMHAy3C2Krbbq9qxeXVTuiYv5QT95j0SBVY=
Subject key identifier: 67:5E:E9:62:FD:5D:6C:38:33:42:DB:A4:B5:2C:06:B9:6F:E9:CF:D5
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019367EADD22716A036E82880EA65739E7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 10:01:05 +0000
Manifest this update: Tue 26 Nov 2024 10:01:05 +0000
Manifest next update: Wed 27 Nov 2024 10:01:05 +0000
Files and hashes: 1: AuFmPh_llmGkGRpbmYs2kUKz9wA.roa (hash: mXln8YeRbD1ML7yB/gKGb+UnSKPY8GlCnLWln8K/NO4=)
2: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: 7M0K7KS9j+dJms/uGauU6zIoB/9/hZ368QG3h2idi2I=)
3: Z_6qcWXafFHeeNM0JcwghYpm_Pc.roa (hash: N/RMTXzzdl30hFRA1+qOUgSZO91LlshPNCMhB213flU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ea:dd:22:71:6a:03:6e:82:88:0e:a6:57:39:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Nov 26 10:01:05 2024 GMT
Not After : Nov 27 10:01:05 2024 GMT
Subject: CN=675ee962fd5d6c383342dba4b52c06b96fe9cfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:4d:f7:aa:8a:53:ea:88:98:ec:c6:97:00:
d9:c7:2b:68:8c:da:b3:86:49:f5:ec:16:9d:e0:53:
d6:ab:19:af:69:a3:e2:c1:f6:5e:38:44:75:06:1b:
78:52:1c:3f:0a:31:08:3b:cb:bf:3f:39:fc:c0:67:
86:b6:1b:a0:8c:47:d3:87:77:28:7b:84:4b:61:7c:
0c:c5:30:cf:65:4c:d5:3a:ab:62:a8:5a:21:c2:e9:
99:7a:63:ed:fe:bd:9a:9b:15:b7:56:9c:ca:20:7b:
65:19:11:6f:a8:74:15:a3:04:b0:c9:ad:ea:31:1d:
76:31:0d:29:e8:e2:30:d9:4c:a7:ab:ca:3c:8e:a3:
13:1d:33:ac:10:fb:bb:2c:2b:c7:e7:d7:9a:06:b4:
4a:79:b7:5e:be:7f:12:a2:26:51:10:53:5b:7b:fd:
bd:a2:15:4a:43:15:95:0f:dc:80:80:4b:e1:0d:06:
75:cf:5c:db:11:c0:ff:50:34:6a:bb:d7:a1:6f:5e:
17:8d:5e:58:e2:b2:d6:1e:68:2c:eb:32:7d:a9:cd:
c7:be:90:06:3f:17:12:f7:a4:ba:2d:e9:13:2d:b7:
c0:c6:e3:84:0c:28:94:3f:a2:36:a7:2e:28:b3:19:
3a:06:32:38:30:e5:53:c3:6a:c4:b1:05:98:56:e9:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:E9:62:FD:5D:6C:38:33:42:DB:A4:B5:2C:06:B9:6F:E9:CF:D5
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2e:33:a0:32:4e:72:34:7f:d9:07:3e:83:f2:31:66:46:95:
7d:b6:4b:8e:53:ff:44:8d:a5:ea:ec:9f:42:f3:d4:7e:c2:03:
6e:92:d8:23:ba:82:e1:60:08:c9:ac:d1:96:8b:4c:79:f1:7b:
95:35:fe:11:97:e1:d9:a4:c0:ca:54:3e:ee:99:c1:f6:c3:06:
68:08:fd:68:ac:20:53:cd:cc:17:64:71:59:01:dd:30:56:a4:
94:b4:48:78:c2:b5:5e:10:74:44:37:15:3f:5e:f7:95:69:cc:
5f:5f:a4:92:65:2c:24:31:42:0c:d8:fd:65:2a:4e:a7:9e:d0:
e9:c7:7d:2c:e2:c0:fa:e7:7c:12:ee:2c:bc:0e:db:66:e0:10:
28:95:b9:25:0d:64:6d:e5:7e:ea:dc:ff:3a:f1:ae:15:75:b8:
9a:c7:a2:66:ec:5e:b1:39:df:e2:c4:32:f0:5e:9f:18:d4:69:
d2:e2:51:fa:03:43:28:39:bd:95:91:f3:9a:e8:41:4a:bc:9d:
19:78:e6:11:59:1d:09:00:ed:71:a0:c8:89:f1:91:16:04:0d:
35:fc:4c:30:53:a0:c3:3b:d4:eb:3e:ce:5b:5a:4d:6f:46:9e:
67:4b:74:d3:c0:2e:c4:95:76:dd:54:81:93:7a:0e:69:90:b3:
6b:ad:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:53:33 2024 by rpki-client on console-ams.rpki-client.org