Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
File: lkptHqRrxAuqMavE9ByQZn7-Nu0.mft (raw, json)
Hash identifier: gdgJmNSJsD7q8/F8nn9gER4CTZIwAYn16wS6NmNWnxE=
Subject key identifier: BB:DF:5E:1F:69:23:F7:B8:6D:8E:30:96:89:DD:99:69:8D:F5:6E:42
Authority key identifier: 96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
Certificate issuer: /CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Certificate serial: 0190448C664D4E9020737B0D43502A4A91DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
Manifest number: 02A6
Signing time: Sun 23 Jun 2024 10:02:50 +0000
Manifest this update: Sun 23 Jun 2024 10:02:50 +0000
Manifest next update: Mon 24 Jun 2024 10:02:50 +0000
Files and hashes: 1: lkptHqRrxAuqMavE9ByQZn7-Nu0.crl (hash: Dd7iXShEKGz8qHdIlzWP7OOpl/Horemm6UuCBU+tUtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:66:4d:4e:90:20:73:7b:0d:43:50:2a:4a:91:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Validity
Not Before: Jun 23 10:02:50 2024 GMT
Not After : Jun 24 10:02:50 2024 GMT
Subject: CN=bbdf5e1f6923f7b86d8e309689dd99698df56e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:9a:56:ce:b9:98:03:36:65:df:28:fa:0f:
a6:58:b9:ac:7f:9b:b4:4b:b9:95:6e:e5:5d:52:11:
e0:17:05:0e:33:2f:d4:0a:26:d8:36:40:ac:b3:33:
c0:fd:50:dc:55:a4:4d:1e:9c:00:3b:ea:3c:f2:6d:
92:4a:48:6f:18:c5:78:b2:15:2c:7a:85:57:09:12:
a1:67:ba:ae:87:0d:87:95:ba:f3:24:16:6b:e1:ae:
63:5d:d6:f1:57:3e:5c:b4:6e:34:a7:21:ac:f5:11:
2b:f7:df:93:e7:11:b3:71:ef:94:b3:d9:6e:9d:40:
63:a8:73:a4:e2:d6:48:06:f3:65:8a:bd:aa:d3:c9:
41:9a:0a:82:8a:16:e0:23:03:e5:1e:6b:a5:43:03:
b1:9f:ac:57:c9:da:6a:3b:9d:5d:0d:2d:c0:fe:42:
95:ca:0a:1a:a5:31:83:06:d3:d9:b4:78:2b:f1:34:
8b:f0:ad:95:56:a8:74:a2:79:f8:83:83:2f:c7:1d:
c5:fb:03:02:48:fd:33:fa:34:8e:60:05:7e:90:1b:
1d:b7:93:5b:b3:02:8e:10:00:04:ea:49:83:d8:81:
28:14:01:23:33:66:4b:32:cc:27:da:79:a6:95:af:
68:62:06:c9:d6:dd:b4:1b:1f:27:39:c0:af:39:2f:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:5E:1F:69:23:F7:B8:6D:8E:30:96:89:DD:99:69:8D:F5:6E:42
X509v3 Authority Key Identifier:
keyid:96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d2:07:ba:4e:d6:e0:76:36:c7:4d:93:25:b6:eb:11:93:f5:
f8:f4:63:45:d6:d0:b5:74:f5:e7:ad:8c:0b:9d:f5:bb:f4:95:
2e:81:67:b3:26:53:14:1b:a6:e8:af:10:31:69:ee:a6:79:f2:
2c:0a:b4:c5:a1:d1:9b:b3:ba:31:73:38:2f:43:2c:56:03:6c:
c5:d4:6e:b0:b9:49:c2:ec:5f:3c:fa:e9:7e:fc:8d:87:24:f3:
80:ce:71:3e:a1:be:20:10:df:99:46:12:80:e6:a3:28:57:8b:
c6:d6:10:74:12:2d:ec:f0:e6:df:ac:a4:14:fd:f2:16:50:d3:
ec:64:a6:51:04:34:48:55:e4:c0:80:bc:b7:39:49:76:a6:71:
48:01:25:a1:47:df:57:af:39:c1:76:cb:2d:ec:fe:b7:be:4e:
83:1d:71:cb:0e:41:a5:ba:b5:09:f6:f7:28:b0:89:3a:ea:8f:
8d:f5:6b:76:65:a9:3f:69:0f:30:ce:b7:c7:0d:bb:3e:28:ae:
1b:17:4e:ca:f6:fa:0c:c3:8d:22:02:0c:eb:b5:38:dd:9c:18:
72:7c:2a:dc:e7:b6:38:bd:18:bd:57:91:43:8f:5e:7f:b7:3e:
fa:3d:a1:5e:d7:5e:b4:27:d9:6f:d6:5a:b5:98:ca:c6:e4:95:
cb:ba:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:45 2024 by rpki-client on console-fra.rpki-client.org