Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
File: 0ksd1ylu1YQ4M4lVyratWNvFP1M.mft (raw, json)
Hash identifier: 3gqWmPMTDgvRf4pqZlTDr2fFRozuaWrlMW2XM1Kejmw=
Subject key identifier: 86:6F:FE:47:57:C6:4D:3F:54:5C:2E:CF:75:14:C5:5B:2F:F4:30:9D
Authority key identifier: D2:4B:1D:D7:29:6E:D5:84:38:33:89:55:CA:B6:AD:58:DB:C5:3F:53
Certificate issuer: /CN=d24b1dd7296ed58438338955cab6ad58dbc53f53
Certificate serial: 018F513986F8A0535A5E5D308566DC9EBE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ksd1ylu1YQ4M4lVyratWNvFP1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
Manifest number: 1157
Signing time: Tue 07 May 2024 04:04:35 +0000
Manifest this update: Tue 07 May 2024 04:04:35 +0000
Manifest next update: Wed 08 May 2024 04:04:35 +0000
Files and hashes: 1: 0ksd1ylu1YQ4M4lVyratWNvFP1M.crl (hash: F4F1lKFGKD+4QiVLfBl5oGyKGUbzV/NgxVz/rIy1Ji8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ksd1ylu1YQ4M4lVyratWNvFP1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:39:86:f8:a0:53:5a:5e:5d:30:85:66:dc:9e:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24b1dd7296ed58438338955cab6ad58dbc53f53
Validity
Not Before: May 7 04:04:35 2024 GMT
Not After : May 8 04:04:35 2024 GMT
Subject: CN=866ffe4757c64d3f545c2ecf7514c55b2ff4309d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:bf:0e:2e:1b:c7:55:9c:48:5a:3b:52:67:
df:15:f5:fa:22:e4:b2:a9:f8:a1:e1:79:00:02:09:
07:4c:bd:7b:c0:a8:70:83:1d:b6:c9:73:89:ac:18:
30:29:f9:e0:dc:93:b5:ba:3c:a1:85:ab:01:80:2e:
65:61:cd:a6:9e:d5:c5:06:73:7c:b2:a4:2f:7f:5a:
f4:f6:1b:9e:47:9b:a3:2c:06:08:20:bd:62:a3:3c:
32:73:6e:d8:c5:0b:27:d9:a5:42:7f:8e:72:29:7f:
85:a2:c0:e7:4b:15:04:b1:67:f3:2c:17:24:03:cc:
3c:2c:56:3b:19:7a:d2:eb:54:fb:f7:0f:3b:e0:c0:
f8:5e:d7:a7:da:74:15:b2:84:bb:3a:18:08:93:19:
d6:c9:5d:70:3f:a5:08:97:76:e7:96:da:7a:44:c4:
d3:ba:05:92:c5:30:93:97:83:8e:23:7b:fc:05:92:
e5:cf:61:21:0b:cb:02:5b:89:83:21:5b:5b:cd:a7:
4f:2c:e0:f6:db:f4:73:24:42:c6:11:be:97:46:46:
32:23:7d:0c:fe:cc:1c:b1:91:53:05:b5:35:7a:84:
1e:bc:b8:41:71:d2:24:6b:50:b1:fb:32:1f:cb:f8:
ca:d6:e9:e3:0b:64:c0:9c:64:64:c8:79:00:0f:2e:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:FE:47:57:C6:4D:3F:54:5C:2E:CF:75:14:C5:5B:2F:F4:30:9D
X509v3 Authority Key Identifier:
keyid:D2:4B:1D:D7:29:6E:D5:84:38:33:89:55:CA:B6:AD:58:DB:C5:3F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ksd1ylu1YQ4M4lVyratWNvFP1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/66fa49-465a-4ab3-a854-c2d2c2f3cd8a/1/0ksd1ylu1YQ4M4lVyratWNvFP1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:48:d9:b0:41:85:5b:7f:6b:f5:04:04:a1:4a:3d:14:e0:31:
12:27:88:13:bc:eb:d2:70:b2:8a:39:24:de:50:22:7e:a0:2a:
8b:45:ea:f8:5b:12:63:9e:5f:77:a8:a9:65:b0:ca:24:3e:4a:
3c:25:3e:55:49:ba:c9:75:07:c7:8d:d9:ec:33:c3:48:1c:12:
7d:ba:52:bc:56:f4:7f:d6:c5:d9:25:cd:09:f4:48:46:9e:e2:
5b:eb:a7:67:20:b1:51:b7:05:00:29:ef:46:94:45:0c:d8:19:
33:1d:a8:f9:cf:1e:f9:f7:8d:66:31:08:2f:05:83:7b:1c:53:
78:ab:ff:cd:9c:9d:71:2a:5f:54:70:29:ad:f8:b2:2b:d2:48:
67:f5:74:74:97:c4:c8:1e:4a:98:38:2d:95:68:f9:3b:4d:e4:
7f:f2:9f:40:95:a9:3f:f3:4b:63:5b:af:1e:36:9e:7b:04:83:
6c:96:6b:7b:2f:18:f5:7a:25:64:a3:49:14:16:e1:44:f5:14:
f2:dc:35:26:5c:c8:20:b0:f9:24:1d:cd:79:1e:fd:03:19:36:
d4:ac:38:76:73:15:a0:d3:06:cc:a9:be:0a:37:1f:fe:4f:d4:
cf:3d:04:8f:6b:1c:c6:21:e0:56:47:01:91:13:1b:00:23:e4:
cb:6b:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:35:15 2024 by rpki-client on console-ams.rpki-client.org