Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: A4bvO8kiswZokwISxzzwJ6rgDhfXC8rfpkmq3dFJi2U=
Subject key identifier: F8:1E:14:0E:83:2E:9D:B3:48:A9:5E:B9:DF:A9:32:B5:A6:9C:C1:33
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 019511A2E988663D4D93C56FF7D08CD1302F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:44 +0000
Manifest this update: Mon 17 Feb 2025 02:00:44 +0000
Manifest next update: Tue 18 Feb 2025 02:00:44 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: zi1NJSgzzf9uDsuwyn4cx5l+EuAbTi4I2geV49qGoDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e9:88:66:3d:4d:93:c5:6f:f7:d0:8c:d1:30:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Feb 17 02:00:44 2025 GMT
Not After : Feb 18 02:00:44 2025 GMT
Subject: CN=f81e140e832e9db348a95eb9dfa932b5a69cc133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:8f:03:5f:8e:d1:ab:ab:f6:0a:65:29:03:
0c:71:fe:d2:61:14:3d:b6:cc:69:ca:3c:ce:fb:d9:
fc:ab:a0:3f:52:73:1e:7d:b5:93:eb:88:65:2d:9d:
1e:eb:d0:ee:55:fc:10:d0:7f:07:88:df:6a:f1:63:
db:4c:51:f3:ea:45:c6:bb:4d:2b:0b:c1:37:ee:f0:
86:45:5d:2a:fe:d5:c0:5b:43:cf:61:99:59:68:6f:
01:64:02:c5:c6:93:20:40:81:25:7d:7a:c4:89:b3:
9d:fd:78:87:a0:d9:f0:b3:28:68:37:47:0d:67:4c:
71:1e:cb:47:c4:7c:7c:29:92:f5:fe:f4:ee:ab:67:
9e:f4:37:53:4f:5b:90:ab:d3:07:01:03:97:a3:9e:
75:a0:82:80:11:c4:1e:7e:c0:b0:29:ed:53:60:9a:
c7:a7:44:5c:38:ff:8c:e7:97:eb:d6:b3:ba:12:75:
07:48:8f:c7:b4:1b:f8:db:65:b2:54:6c:c8:a8:ea:
cc:52:df:41:4c:b5:99:0b:6f:87:5a:e5:9d:f5:0a:
b8:29:6a:0c:d3:42:c3:05:8a:cd:b0:f4:59:90:f2:
35:e6:48:02:5e:a0:37:e5:2a:81:92:54:28:6f:ec:
de:50:b2:39:da:e4:d7:44:98:13:a1:f3:22:d9:a7:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:14:0E:83:2E:9D:B3:48:A9:5E:B9:DF:A9:32:B5:A6:9C:C1:33
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fe:a4:5f:1c:4a:da:4e:60:f6:05:5d:4c:ca:1b:06:a7:db:
f0:12:6d:5d:8f:c9:8e:3a:3d:f0:2a:5f:91:a4:1c:19:78:e2:
7c:46:a5:1d:d3:ce:84:69:7f:c3:7c:51:ea:ad:ad:d7:a4:c8:
93:24:cc:78:f5:c0:8d:cb:26:88:55:cd:06:15:af:c3:6a:f8:
40:b0:01:1a:0c:a2:bf:15:b3:31:0f:54:cf:4e:c4:b1:65:90:
71:ee:c5:d8:d0:bb:22:5e:37:98:a4:d8:04:6a:b8:d2:5c:34:
b4:81:38:b4:1d:c4:4e:61:6f:46:fb:8b:de:80:fe:4b:af:bb:
0d:d7:41:c8:84:f9:d0:31:4a:d5:64:bd:11:20:cc:d0:4c:71:
b8:8d:d5:63:1b:73:74:f3:6d:70:76:0a:35:6d:f9:9f:54:98:
c8:5d:49:b2:7c:dc:3a:b3:b0:48:7a:52:ca:7c:61:23:ea:28:
6e:0e:f8:2f:32:0a:7d:42:21:e6:07:63:4f:af:92:90:4d:a1:
41:b7:82:8f:53:91:87:22:32:c7:0f:50:0f:8b:1d:56:af:dc:
88:04:0e:6c:80:fa:1e:1c:cb:79:bf:81:dd:f0:c7:cd:fd:0d:
11:72:9e:21:1a:3d:1c:8c:56:26:bc:27:ed:a5:08:72:cb:91:
a4:4b:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:16 2025 by rpki-client