Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: UjI5CLlOg3lmVO/aMCNyZKdLaALx19QQv5wrtM9RiKU=
Subject key identifier: 2A:AA:FA:23:77:EB:A1:87:DD:18:FD:78:B9:BA:8A:75:00:FC:EA:91
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 01901DEC0FB04E02972B55E5A1F6D90025B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 0134
Signing time: Sat 15 Jun 2024 22:02:08 +0000
Manifest this update: Sat 15 Jun 2024 22:02:08 +0000
Manifest next update: Sun 16 Jun 2024 22:02:08 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: 5+tlrrWBzpAsU8eq5MaPnOsl2355EK8k56QMYcPhVPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:0f:b0:4e:02:97:2b:55:e5:a1:f6:d9:00:25:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Jun 15 22:02:08 2024 GMT
Not After : Jun 16 22:02:08 2024 GMT
Subject: CN=2aaafa2377eba187dd18fd78b9ba8a7500fcea91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:b7:86:5f:26:24:b8:a7:bd:64:4d:f1:c9:
6a:44:c9:35:28:ac:ae:5e:15:17:a2:cc:a8:11:cc:
6b:94:96:ee:05:76:9e:8d:43:67:9a:df:2c:63:2c:
cf:7b:b4:a2:7d:4b:dc:83:2d:9c:43:97:5d:53:fe:
b4:07:6b:ec:6e:d7:a5:54:64:4b:13:8b:26:88:58:
2b:82:50:43:00:51:07:57:f7:16:14:36:96:d5:5b:
e6:45:a1:5d:77:6d:0e:1b:0e:c9:5b:56:56:0b:d1:
b3:44:5d:f8:c1:30:e2:93:04:f7:a8:39:ee:09:43:
70:d5:bf:36:7c:1a:79:c2:ab:82:9d:0b:ab:99:aa:
c0:6c:e9:32:e2:dc:78:42:42:5a:7b:26:d9:a9:c3:
2c:fc:20:18:c3:07:36:5d:92:b9:e2:2e:1e:72:6e:
d9:bf:f7:12:8b:0c:02:32:32:b0:c4:91:4e:8b:25:
78:47:a7:dc:18:f4:6c:10:17:6d:b5:8a:79:1a:cd:
ff:ab:98:49:23:43:43:c1:92:b7:2a:cc:f7:1c:12:
7c:62:a2:f7:cd:e6:27:0c:c5:7c:b7:8f:f4:cf:0c:
5c:64:fd:a6:74:76:3c:66:eb:a3:20:26:1a:31:4f:
83:46:67:da:63:61:f0:fa:9b:53:a3:1a:e9:64:7a:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:FA:23:77:EB:A1:87:DD:18:FD:78:B9:BA:8A:75:00:FC:EA:91
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:39:92:5b:cd:41:ed:18:89:5f:6e:9a:78:0a:ad:ca:fa:f1:
b9:d4:ac:41:e6:a4:65:1c:e0:e6:82:c8:16:5c:75:e0:45:87:
5e:da:d4:0d:1a:d0:d1:cf:90:47:85:42:61:51:f9:45:f2:25:
7a:05:77:4d:09:5f:4f:d9:07:92:52:98:19:97:ef:64:4f:05:
03:ac:61:12:9b:34:70:5f:a1:41:82:1c:0b:29:f3:24:9d:30:
fb:ab:2a:6c:fc:74:cd:8e:0f:fd:7e:42:d7:86:59:d4:ee:d8:
ee:c6:3c:4d:d6:bb:e2:3a:bc:f8:a6:da:63:11:cd:07:b4:61:
0a:96:9a:e3:2d:63:3a:11:8a:bc:a6:51:d1:6c:a3:04:53:5f:
b9:19:55:b7:32:eb:78:52:05:5a:52:95:6b:cf:0c:33:12:73:
fe:b5:69:fe:d0:c6:0c:ca:20:8c:fb:18:17:34:fa:6f:c2:af:
30:2d:b1:d2:ea:5b:15:c3:ef:8c:c6:62:f0:39:0e:87:54:e6:
b0:fe:8f:d1:96:ad:3d:1d:2b:c1:c5:74:1c:1c:23:91:fe:31:
43:5d:e9:37:5b:4f:2c:a4:c5:be:6f:57:ca:f7:d9:d7:eb:dc:
ee:47:f6:1b:4d:9b:76:26:48:fd:20:21:28:af:27:2b:40:a0:
af:69:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:59:59 2024 by rpki-client on console-fra.rpki-client.org