Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft
File: 0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft (raw, json)
Hash identifier: LAnHzcyvKFADhtTmcAbvGQu9eOQEfus/ACCxXjrVMb8=
Subject key identifier: C9:E7:5F:92:78:5E:F6:9E:BB:62:67:8F:59:02:16:67:F3:2C:64:70
Authority key identifier: D0:A4:CA:E7:0F:72:62:1D:10:9F:EE:0F:08:E2:C0:C3:A0:D8:7D:25
Certificate issuer: /CN=d0a4cae70f72621d109fee0f08e2c0c3a0d87d25
Certificate serial: 018F1F6DFB66D72D9A4A9EEC059B494782F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft
Manifest number: 1141
Signing time: Sat 27 Apr 2024 12:00:52 +0000
Manifest this update: Sat 27 Apr 2024 12:00:52 +0000
Manifest next update: Sun 28 Apr 2024 12:00:52 +0000
Files and hashes: 1: 0KTK5w9yYh0Qn-4PCOLAw6DYfSU.crl (hash: cr9Y/5do3PvQTu/S+3fOJ9e6eWsEPYI/HlRLl+VKLHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:6d:fb:66:d7:2d:9a:4a:9e:ec:05:9b:49:47:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a4cae70f72621d109fee0f08e2c0c3a0d87d25
Validity
Not Before: Apr 27 12:00:52 2024 GMT
Not After : Apr 28 12:00:52 2024 GMT
Subject: CN=c9e75f92785ef69ebb62678f59021667f32c6470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:2c:34:40:73:08:5e:b9:96:e4:8c:cf:07:
99:b5:0e:49:22:6a:8e:1c:56:46:94:94:34:56:f2:
96:96:ea:b5:5c:65:2c:3a:8b:c4:ca:9a:24:6b:d8:
41:09:f9:8d:3b:e1:77:da:80:30:8e:c6:e5:de:c1:
dd:57:02:7a:e4:06:86:83:47:8d:e9:72:72:db:e2:
0b:9d:d9:50:d3:7c:e4:cb:2f:8f:87:48:91:9c:a4:
85:9e:16:74:11:a0:8c:84:53:7f:fa:e0:3a:41:09:
7d:52:33:25:56:71:82:fa:76:63:80:5b:4f:58:33:
df:c7:68:46:86:66:5b:c8:99:fb:2c:fe:48:e6:5e:
b6:7e:20:be:d0:10:da:c4:a3:a2:0f:fe:a8:1f:19:
a8:0c:fe:27:1e:4e:15:8a:36:e5:ab:c4:ad:d9:65:
40:31:0c:cd:22:13:8f:53:f9:19:4a:5e:a6:75:0e:
7a:a6:72:33:f2:16:8a:7b:6a:80:fd:e4:e1:38:16:
4f:05:f6:95:36:71:5b:d0:83:b1:66:a7:1a:24:97:
d1:ac:42:c6:68:0f:a1:ed:58:7b:21:e3:6a:c3:02:
a0:75:a0:f3:03:08:ed:13:e0:ac:e8:5a:38:34:a2:
86:d3:3c:00:c8:65:eb:94:8a:0f:50:4f:4e:8f:0d:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:5F:92:78:5E:F6:9E:BB:62:67:8F:59:02:16:67:F3:2C:64:70
X509v3 Authority Key Identifier:
keyid:D0:A4:CA:E7:0F:72:62:1D:10:9F:EE:0F:08:E2:C0:C3:A0:D8:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8ee1b7-b145-4f1b-9847-3e881f53499f/1/0KTK5w9yYh0Qn-4PCOLAw6DYfSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:04:60:e3:35:2f:91:27:01:cc:b3:12:d4:82:a4:14:31:32:
cf:12:9a:f7:92:7b:2b:fe:ba:69:9d:af:2e:77:d9:d1:38:d6:
fc:96:fa:f0:17:62:e2:8a:6d:73:bb:97:6b:e2:35:f6:6c:bb:
5d:3e:62:f4:02:a9:e8:e1:78:86:f7:92:87:8e:24:48:0a:b2:
84:b6:0f:02:f8:2c:e2:58:cf:be:b9:8d:78:29:d8:54:a0:3a:
65:7f:36:6c:93:53:61:12:84:05:83:a8:83:91:92:90:b2:fa:
1a:ed:39:74:8d:63:ef:26:3f:e1:5b:61:5f:9f:42:92:5c:7f:
a2:26:3c:86:01:d2:7f:18:23:45:1c:3e:21:f9:ff:c6:0f:ab:
71:52:eb:b8:e8:06:c8:fd:7c:f9:b7:ab:5c:5d:61:88:d2:58:
ae:05:e9:79:4b:a1:4a:07:cf:d9:60:58:9c:c2:aa:2f:f3:02:
3a:91:84:99:1e:08:30:2e:46:e9:8e:42:f6:b4:2f:88:63:df:
a5:83:dc:29:6a:c8:02:81:3d:69:15:05:81:18:ee:c1:e5:30:
7d:e3:23:2d:5e:43:4a:94:0c:b9:d4:a3:15:b5:91:75:e0:f6:
75:34:41:c7:02:51:de:61:54:c3:eb:72:3e:5b:bd:b7:c7:76:
30:b4:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:36:11 2024 by rpki-client on console-ams.rpki-client.org