Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: DFk27fz2zvah9zlE84kd+1rg15JvTljclziuAJrAeTY=
Subject key identifier: AC:8D:87:63:EC:22:71:91:CA:F6:66:F9:97:45:D1:67:F9:88:B9:51
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 019357D2C60630E455B4E2B97EDD066AE7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 12FF
Signing time: Sat 23 Nov 2024 07:00:51 +0000
Manifest this update: Sat 23 Nov 2024 07:00:51 +0000
Manifest next update: Sun 24 Nov 2024 07:00:51 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: iN3Wy2kPSb54VglI2nwdjyuhGfImk7vnnqvcgpCQrmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:c6:06:30:e4:55:b4:e2:b9:7e:dd:06:6a:e7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Nov 23 07:00:51 2024 GMT
Not After : Nov 24 07:00:51 2024 GMT
Subject: CN=ac8d8763ec227191caf666f99745d167f988b951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:2c:c8:4d:fe:6f:ac:60:fb:d4:39:a6:fe:
79:ca:c8:a7:06:26:4b:75:1f:52:e5:69:31:85:62:
a7:07:d4:e0:94:c0:10:3f:72:46:e4:90:70:f2:1a:
aa:a4:d8:95:49:e9:de:f6:15:95:1d:4a:c2:a0:5d:
58:c4:8a:8d:f0:91:a0:61:cc:af:59:9c:4f:f4:44:
da:f7:f5:e5:ed:4c:ea:66:30:5a:d9:09:0d:3b:37:
d4:c1:26:5d:a5:f3:c9:32:49:5c:1e:ad:86:f5:e8:
ba:60:5f:bf:29:17:95:b6:d6:d0:28:45:79:66:72:
89:69:64:74:24:0a:a9:a1:8d:f5:c3:39:ec:c4:85:
38:df:0e:0e:de:a2:b7:4c:41:5a:b5:20:27:d1:77:
c5:fb:41:30:3b:25:0a:e3:18:b4:aa:ce:b2:23:59:
41:fa:de:c7:24:70:67:79:28:39:d5:5e:ce:fa:20:
75:55:9b:5e:9f:c0:aa:0d:70:98:ed:6e:96:74:a3:
82:9c:69:1a:aa:3e:bd:a1:54:b0:5d:3f:69:c8:09:
0d:b0:f3:89:d0:fa:b4:c4:6c:dd:34:c1:3b:74:e6:
2c:fa:07:6d:25:ca:35:b6:bd:64:cf:0f:a4:0d:2f:
85:eb:09:55:92:fc:35:d5:ef:da:de:fa:28:ac:7d:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8D:87:63:EC:22:71:91:CA:F6:66:F9:97:45:D1:67:F9:88:B9:51
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c8:8c:9b:68:a5:c3:43:3c:ee:ef:e0:5e:8b:c1:4a:3f:28:
a9:47:94:65:40:3b:fb:6e:29:4e:4d:9e:af:e0:6d:b5:81:19:
e7:ca:8f:01:57:71:07:44:b0:6b:1e:f0:5a:de:85:18:ec:d8:
02:5e:7e:a7:03:c7:2e:f0:66:3f:5c:25:92:8d:04:be:cc:c2:
40:6d:ad:f9:0b:6e:8b:16:74:7b:b6:b9:9a:d0:e1:81:52:13:
58:94:2a:b5:64:7d:d0:a8:4e:09:e8:69:18:f5:4f:63:8d:5b:
a8:4b:89:59:3c:54:cd:c9:62:65:d9:68:d1:4b:85:b1:ed:a8:
7a:c5:fd:07:11:dd:d1:85:7d:38:b3:78:fb:3b:48:4e:d0:6a:
3c:aa:fe:0e:07:68:c7:ce:23:fb:f5:32:4d:6c:a9:f0:31:fb:
55:b4:ba:ef:3a:1c:0e:61:da:0b:a5:42:76:03:db:99:6f:be:
02:00:8a:7e:c0:d5:c5:05:68:ed:17:2b:14:71:6a:59:43:1b:
b9:72:1f:bd:f3:6d:a8:58:81:0d:13:92:e1:85:cc:93:a5:21:
2c:7f:10:6a:e3:b2:23:28:54:3b:8d:50:6a:df:97:ff:59:d6:
71:e8:46:a0:f0:f5:14:5a:cd:06:a7:f6:14:2b:62:72:0b:fc:
21:a1:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:41 2024 by rpki-client on console-fra.rpki-client.org