Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: f6SRzlTV6p0K1Q9AFodiEcSJmO/2h0Vrwp91bjdj4gU=
Subject key identifier: E2:4E:33:88:70:DB:57:93:47:1B:89:E8:12:B3:F6:70:31:93:65:61
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 019045D495490B0F9350FC3FFCFE7DA8E6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0AFF
Signing time: Sun 23 Jun 2024 16:01:17 +0000
Manifest this update: Sun 23 Jun 2024 16:01:17 +0000
Manifest next update: Mon 24 Jun 2024 16:01:17 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: nD/3jpdbl1S+Qmnk1Hrh/hvG19tJukESV1Go0tIQAnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:95:49:0b:0f:93:50:fc:3f:fc:fe:7d:a8:e6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Jun 23 16:01:17 2024 GMT
Not After : Jun 24 16:01:17 2024 GMT
Subject: CN=e24e338870db5793471b89e812b3f67031936561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:49:22:2c:4d:47:af:65:ba:a4:6b:bf:2a:
58:cb:ae:8a:cf:9e:ca:8f:0d:5c:20:ef:ad:b3:72:
4a:b0:e6:54:1f:ab:e4:68:ee:ed:d8:47:dd:73:e7:
51:bd:d0:77:66:5a:30:61:5e:fc:f7:2a:06:9f:55:
c2:30:bf:8b:32:ff:63:9d:98:28:cd:93:e4:f2:ba:
70:9e:de:db:56:4a:ab:e2:3c:b5:9a:70:88:c4:e0:
30:19:23:5f:e4:d6:d6:4f:bd:c3:af:c3:a3:3a:79:
bd:e3:60:aa:fc:2a:d0:04:ca:2a:29:18:89:8d:75:
cb:22:d7:86:a0:b7:f9:f4:45:5f:ee:ca:30:15:0e:
18:dd:12:0a:54:c3:fd:57:21:f2:6b:a5:bb:5c:76:
5d:fe:50:5f:f6:dd:4e:ac:6d:7b:13:0e:67:0a:c5:
c0:0d:a2:8a:0f:5a:61:d5:d1:97:22:ba:a5:d8:1b:
38:d9:fc:41:3d:a7:d1:7d:89:c5:36:30:b0:35:0e:
9b:cc:95:0f:1d:12:f6:cb:3d:b3:7a:f1:8f:b6:47:
1b:64:d9:54:5e:6b:1e:a7:55:4b:41:06:7e:72:10:
7b:4d:92:9b:16:46:16:90:17:fc:67:da:77:cb:ce:
11:81:e3:c4:5d:57:66:bc:92:29:2f:59:be:3f:96:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:33:88:70:DB:57:93:47:1B:89:E8:12:B3:F6:70:31:93:65:61
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:83:2c:88:ec:c8:a5:a3:b0:e0:d2:9c:3f:ef:21:a6:dd:20:
29:4c:c9:60:8a:de:ca:76:71:d1:02:70:6c:5d:2c:70:fa:10:
f6:cc:a9:d8:bc:df:f2:1c:8c:f4:eb:5c:97:85:e9:f7:24:03:
17:12:4c:37:fa:5e:22:b8:0d:3c:63:47:c1:ba:d0:d8:77:3a:
8b:86:38:aa:7b:ff:07:01:b1:9f:26:5c:2e:65:dd:44:31:30:
cf:9e:ae:52:03:4d:84:13:2f:10:e3:5c:f4:0f:cd:9d:77:a9:
72:e4:48:5f:e9:4b:ea:59:bb:f9:cf:b6:4b:53:74:e4:68:56:
c8:8f:76:b5:42:be:08:40:bc:ba:7d:ad:59:9b:d7:b7:c4:db:
c1:b0:65:a3:fc:12:0b:7f:c9:72:1e:72:0a:84:3b:94:ff:e7:
81:65:f6:7e:dd:2b:76:d1:2a:10:b9:1a:69:a7:7f:1b:33:3d:
46:48:90:9f:fd:22:e9:e1:08:1c:e1:6f:d8:f3:14:14:62:d8:
23:36:11:3f:79:63:50:ac:5f:86:10:72:e6:ea:71:a5:b5:78:
a8:91:ad:a9:a5:b9:8a:d3:68:85:f1:43:8c:64:be:8c:cc:b7:
c0:22:75:4d:03:d5:a1:ee:3e:f3:b6:68:e4:d5:54:54:7d:62:
4e:4c:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:09:03 2024 by rpki-client on console-ams.rpki-client.org