Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json)
Hash identifier: ENOoUklqzeFNFqGFfF09vfPiOQtSD6yulTmlYNefZDI=
Subject key identifier: 90:0D:3A:59:3F:CD:06:A6:FE:3F:1B:78:29:06:9F:21:DE:F7:F5:C0
Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Certificate serial: 0195116BEB12EFB9D93492F2EA27016FB4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
Manifest number: 13E5
Signing time: Mon 17 Feb 2025 01:00:39 +0000
Manifest this update: Mon 17 Feb 2025 01:00:39 +0000
Manifest next update: Tue 18 Feb 2025 01:00:39 +0000
Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: GqtWL4YVf/SBtdV4xFbXd+kMgsEuxSvn4wdKEnciPvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:eb:12:ef:b9:d9:34:92:f2:ea:27:01:6f:b4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Validity
Not Before: Feb 17 01:00:39 2025 GMT
Not After : Feb 18 01:00:39 2025 GMT
Subject: CN=900d3a593fcd06a6fe3f1b7829069f21def7f5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:e2:46:65:11:d7:ba:e0:93:3a:d8:d0:4a:
2d:4e:c2:e3:45:35:28:d6:13:13:e6:1d:58:c0:52:
38:e0:8f:d9:08:45:10:42:5f:a3:82:0d:2d:c8:b1:
79:51:62:09:eb:c9:69:a9:f6:5b:dd:18:06:07:7f:
51:d2:82:fa:82:e5:4a:2a:d7:1e:48:ee:a2:7e:f3:
df:dc:c1:5b:e1:72:de:e3:0d:dc:71:b0:68:87:d7:
ea:d2:0d:bf:f7:3c:6c:f9:a5:2c:5b:cb:bf:3f:cb:
b6:9d:6f:3a:b5:63:8e:64:5b:b1:f7:89:06:c6:15:
7b:f7:47:f7:3e:65:b0:11:4a:d5:f7:08:f5:7e:d2:
2c:13:63:fa:92:d5:51:b4:0f:f2:13:6e:9f:13:6c:
25:24:e2:42:3d:80:6b:f6:f5:b9:d4:c3:9c:65:20:
68:34:b1:30:c8:d9:52:3b:a5:f0:d9:dc:ee:2f:a6:
01:38:93:59:54:6b:7c:73:a7:fc:6e:9d:6a:bb:0a:
e1:21:eb:83:68:d8:7f:b9:f3:d1:2c:0e:16:c4:dc:
b3:21:b7:21:41:bc:8a:ea:86:25:b6:e8:c9:31:06:
31:ee:5f:a7:09:17:94:41:81:fc:1e:61:ba:b3:df:
fa:38:d4:35:95:51:ab:82:2b:3f:ec:a6:f0:4b:7e:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:3A:59:3F:CD:06:A6:FE:3F:1B:78:29:06:9F:21:DE:F7:F5:C0
X509v3 Authority Key Identifier:
keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:98:03:11:3a:52:c3:42:3a:53:ca:d2:0c:13:0a:b3:12:16:
78:18:6d:90:ac:a1:42:f6:58:23:f7:2c:e9:b4:ab:7a:84:1d:
fe:c3:23:e7:56:1f:5e:31:76:91:45:dc:95:4d:a5:6a:cf:59:
aa:b5:62:d8:fa:12:4c:b9:40:19:3b:12:57:d8:ad:3e:4e:8d:
f8:87:53:dd:07:2e:b6:42:b7:18:e8:bd:ac:ee:54:55:fe:64:
09:24:66:71:a9:aa:1d:f6:fd:d1:f3:13:fc:3b:e2:aa:31:77:
26:57:b6:63:ab:57:cc:57:2b:36:5b:7c:72:e7:96:6a:d1:ef:
25:4f:5c:aa:c9:3e:6a:1f:b8:eb:b1:24:90:e4:f4:9d:f5:7b:
97:fe:2d:65:b9:da:38:88:4c:0d:f9:7f:94:57:12:73:75:34:
bc:be:53:32:dc:12:8d:36:f1:b3:43:9e:e5:04:63:a2:b1:6b:
d6:fc:0c:8a:b8:67:24:22:3c:60:99:44:d6:bc:95:6b:6f:4c:
6e:c7:fa:17:2f:a3:48:97:04:2d:45:4a:d2:fe:1a:e1:27:23:
4c:23:67:df:3d:f7:28:8e:88:e3:a6:bc:c1:d3:e4:a1:59:57:
a9:45:4f:90:cf:d8:68:13:89:07:b5:89:fe:e9:26:f3:99:a7:
c6:85:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:29 2025 by rpki-client