Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: TWHJdZkkH5eSQcAu+nbGXI9UiafdMn9VRi3sZQcs9gs=
Subject key identifier: F7:44:83:D1:60:2E:3E:93:55:9B:73:F2:D7:FC:75:73:69:BC:7B:3B
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 018F874A634B43E3A479BA0371CC4B2D3FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0914
Signing time: Fri 17 May 2024 16:02:30 +0000
Manifest this update: Fri 17 May 2024 16:02:30 +0000
Manifest next update: Sat 18 May 2024 16:02:30 +0000
Files and hashes: 1: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: U5mPZTK2zgQ6f0QeSkU4G3uQZuG/0wOyR2NM3X/E4/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:63:4b:43:e3:a4:79:ba:03:71:cc:4b:2d:3f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: May 17 16:02:30 2024 GMT
Not After : May 18 16:02:30 2024 GMT
Subject: CN=f74483d1602e3e93559b73f2d7fc757369bc7b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:81:7c:29:e3:f1:c4:0a:bb:9e:a5:a6:43:
90:2a:dd:f6:bd:be:94:e9:50:4c:ef:6b:56:22:e0:
fc:25:ce:ea:6e:39:56:0a:78:e1:0f:a2:22:c7:46:
15:3d:df:0c:a1:2d:e3:39:c7:7f:8d:e7:e8:35:ef:
b6:de:95:62:53:90:fe:2c:7f:8f:47:1d:77:94:2f:
dd:41:b8:db:32:eb:fa:9f:a3:86:f5:c5:91:cd:ed:
d5:d6:8b:32:33:87:be:b7:f9:15:f0:4b:4d:4d:6a:
3e:64:9a:8e:9c:35:e6:4b:cb:d8:51:39:48:fd:1e:
6a:39:bc:32:35:6e:4c:4b:78:a8:2a:1a:18:9e:3e:
e8:a2:41:c7:9b:9c:4b:dc:29:a2:70:c3:6a:db:55:
2f:19:1c:30:0d:95:ea:bd:76:d6:2e:30:84:df:e1:
1b:13:01:27:7c:8d:5a:27:3a:3b:0f:8b:76:76:9d:
94:7d:be:45:e3:3f:6e:4e:37:b4:9c:4b:2f:ab:8e:
bd:46:61:51:bd:55:fd:29:a5:f0:ea:6b:98:9c:bd:
b9:e8:0f:c8:f4:67:7d:4b:aa:4b:77:a8:e9:ae:7d:
24:d2:03:64:d3:3a:8b:39:13:1a:44:fa:66:92:df:
7c:f7:e5:66:20:b4:5c:62:60:6d:fe:1a:73:8e:9c:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:83:D1:60:2E:3E:93:55:9B:73:F2:D7:FC:75:73:69:BC:7B:3B
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1f:46:f7:24:e1:35:06:32:3c:36:33:df:3e:90:4d:7e:ff:
e4:e3:53:91:b8:ce:87:2f:92:e8:86:23:58:13:fd:dd:e7:94:
22:a6:ee:fe:b7:13:e3:ac:39:18:6d:28:0a:59:d7:06:21:29:
1a:8c:a6:eb:2c:ed:3c:c7:a5:89:2f:1a:b7:17:48:2f:28:90:
08:3c:cf:d5:5e:ad:8d:8b:5e:fa:dd:79:48:57:17:07:b0:9b:
93:6f:e8:17:a7:e3:dc:ec:73:a4:5b:9e:a2:f0:39:ed:97:32:
41:cb:a5:ed:43:3d:86:80:d2:58:c5:5b:c0:ba:92:33:4c:d6:
6c:dc:5e:f4:d6:0b:25:ba:a1:9f:53:aa:fa:56:60:32:db:87:
7f:c2:b4:d4:8d:f6:eb:3d:58:2d:db:54:b5:6f:64:72:30:1a:
f9:4c:79:da:93:58:70:ba:e4:88:28:e3:ae:d7:65:00:7b:55:
41:8b:26:6f:19:b2:dd:4a:7c:e7:cb:60:86:97:85:15:92:90:
73:6f:a6:76:61:b7:7d:cd:0d:9a:18:29:43:80:7b:a6:38:55:
cf:2c:2b:70:e3:23:8f:61:d1:18:03:43:72:9a:1e:a4:08:ff:
d8:50:22:d4:a8:fd:97:2f:78:05:e8:05:9b:98:3f:57:a1:99:
2b:55:0d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:45 2024 by rpki-client on console-ams.rpki-client.org