Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: BLwn+CvE1Jmta8x7QL0C1QJmT7VLTn1U/EP4Cy05mpc=
Subject key identifier: 42:B2:14:1D:00:62:64:97:A8:7F:8D:FB:69:5B:2A:35:65:DB:8A:E7
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 0190490C43FC70380BE1263F681E7CE1ADA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 116B
Signing time: Mon 24 Jun 2024 07:00:58 +0000
Manifest this update: Mon 24 Jun 2024 07:00:58 +0000
Manifest next update: Tue 25 Jun 2024 07:00:58 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: zD3ftD0kYwqM9KZaaCEGmarGmApAG5fL0wbDICFmIkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:0c:43:fc:70:38:0b:e1:26:3f:68:1e:7c:e1:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Jun 24 07:00:58 2024 GMT
Not After : Jun 25 07:00:58 2024 GMT
Subject: CN=42b2141d00626497a87f8dfb695b2a3565db8ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:33:da:49:a4:20:1c:e2:59:67:54:2d:f9:
57:0d:64:6b:1c:80:9e:9b:97:7d:73:de:f2:5c:f3:
47:3a:de:65:41:cb:2a:64:b0:0f:39:b5:10:a5:8a:
f4:d7:e1:8e:45:cc:ea:cd:04:aa:26:8d:88:86:98:
b7:5a:c5:5b:0a:e6:d9:37:d3:44:e0:bc:b7:eb:0b:
a6:fa:a5:22:3e:ab:db:6e:31:53:ce:90:d1:6a:95:
f2:5c:28:14:a7:bf:51:7f:a9:97:56:47:38:3c:5f:
0e:3d:f8:dc:8b:47:b0:f3:77:1d:64:ea:1f:35:24:
29:db:c5:de:10:9e:09:6e:bd:af:0a:05:42:6f:00:
64:0c:84:c4:40:fe:a6:32:62:9f:7c:16:bb:5e:66:
90:6c:70:6e:c0:ee:b8:19:88:ad:1e:a4:14:8f:56:
34:9d:18:ef:e0:4b:e6:da:22:97:fe:1d:85:53:24:
ae:ba:53:55:07:b4:05:d4:3c:b4:e7:f6:48:fe:9a:
33:8d:1b:93:0f:23:e5:87:3a:1e:b1:22:c7:66:ec:
ff:bb:fa:29:dd:89:b4:97:c5:24:eb:d0:98:3d:97:
0f:d8:86:da:41:05:9f:29:77:48:f5:a3:f9:e6:b2:
ac:80:fb:dd:ff:68:02:0e:fd:b3:32:c8:b0:64:6b:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:14:1D:00:62:64:97:A8:7F:8D:FB:69:5B:2A:35:65:DB:8A:E7
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b2:5e:57:a0:3a:e0:f4:86:09:35:bd:28:9f:dd:1d:3e:36:
35:84:71:5c:49:94:73:d3:79:09:c7:af:38:0b:ce:29:48:c5:
6f:d4:45:ce:ea:b7:7c:c4:f6:e1:f3:3f:29:9f:e8:47:79:62:
ff:ae:c9:bb:a0:fd:a6:a3:a8:0c:b9:28:8e:c7:b6:09:7f:66:
47:5c:78:b1:f3:2f:cc:63:7e:b0:78:aa:64:5e:89:aa:77:69:
c8:33:53:12:9e:dd:7f:8d:1e:1d:d9:35:46:22:56:bb:97:31:
68:0f:ad:1d:ca:8b:c2:2e:79:7b:2c:b1:f2:05:b5:7f:ef:b9:
63:3b:55:7e:c8:f9:2b:65:79:10:94:75:cd:42:1c:90:db:83:
00:bf:9a:e2:ee:95:0c:5e:fd:20:de:8c:f1:7a:ef:8b:0f:cc:
76:f3:43:bd:24:31:0c:de:30:7b:fc:75:cf:67:2e:17:bd:63:
b1:be:30:88:24:f0:c7:98:01:3c:42:e6:bb:74:7a:5d:01:00:
5f:eb:ad:59:5b:d9:5a:80:f6:6e:0a:fd:1b:ae:9d:7a:6b:fa:
7a:13:a0:68:08:a6:ab:bd:dd:7f:0d:78:5b:8b:e8:87:37:7c:
b7:3d:92:10:68:50:e0:44:76:b4:f5:89:93:e5:18:69:31:11:
e1:2f:2a:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJDEP8cDgL4SY/aB584a2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTBlOWEyNDYxZGY0ZmNiOWUyMmU3NzcwYjI2MTNhMDcy
NDEzODgwHhcNMjQwNjI0MDcwMDU4WhcNMjQwNjI1MDcwMDU4WjAzMTEwLwYDVQQD
Eyg0MmIyMTQxZDAwNjI2NDk3YTg3ZjhkZmI2OTViMmEzNTY1ZGI4YWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgcz2kmkIBziWWdULflXDWRrHICe
m5d9c97yXPNHOt5lQcsqZLAPObUQpYr01+GORczqzQSqJo2Ihpi3WsVbCubZN9NE
4Ly36wum+qUiPqvbbjFTzpDRapXyXCgUp79Rf6mXVkc4PF8OPfjci0ew83cdZOof
NSQp28XeEJ4Jbr2vCgVCbwBkDITEQP6mMmKffBa7XmaQbHBuwO64GYitHqQUj1Y0
nRjv4Evm2iKX/h2FUySuulNVB7QF1Dy05/ZI/pozjRuTDyPlhzoesSLHZuz/u/op
3Ym0l8Uk69CYPZcP2IbaQQWfKXdI9aP55rKsgPvd/2gCDv2zMsiwZGvS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKyFB0AYmSXqH+N+2lbKjVl24rnMB8GA1UdIwQY
MBaAFJPg6aJGHfT8ueIud3CyYToHJBOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MWU1ODQtOWNmNy00YzYyLTlmNjEt
MGUyZTM2MDE5ODQ5LzEvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80MWU1ODQtOWNmNy00YzYyLTlmNjEtMGUyZTM2MDE5ODQ5
LzEvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrJeV6A6
4PSGCTW9KJ/dHT42NYRxXEmUc9N5CcevOAvOKUjFb9RFzuq3fMT24fM/KZ/oR3li
/67Ju6D9pqOoDLkojse2CX9mR1x4sfMvzGN+sHiqZF6JqndpyDNTEp7df40eHdk1
RiJWu5cxaA+tHcqLwi55eyyx8gW1f++5YztVfsj5K2V5EJR1zUIckNuDAL+a4u6V
DF79IN6M8Xrviw/MdvNDvSQxDN4we/x1z2cuF71jsb4wiCTwx5gBPELmu3R6XQEA
X+utWVvZWoD2bgr9G66demv6ehOgaAimq73dfw14W4vohzd8tz2SEGhQ4ER2tPWJ
k+UYaTER4S8qgQ==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:25:51 2024 by rpki-client on console-ams.rpki-client.org