Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: rVoRenxI9S+dHr4Yzr6rv5k7Qn6XsiU60YSF+PhleC4=
Subject key identifier: 97:99:91:B8:06:8B:27:E2:2F:66:98:BC:04:0F:F2:BC:88:7F:6A:CF
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 01904189DF41AF89291475702FA6A020C602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 11D1
Signing time: Sat 22 Jun 2024 20:01:12 +0000
Manifest this update: Sat 22 Jun 2024 20:01:12 +0000
Manifest next update: Sun 23 Jun 2024 20:01:12 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: PwUWv0C6VXf4FG2tlmzHFNiR0gfWNKFz3nWO5j0Cfyc=)
2: gmYKckI_UW05q6CtpjRpCOmmDrA.roa (hash: BNKd96b5uy4xKU8zqdqNOK/LKCUlMZCHz4cGHP/blaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:df:41:af:89:29:14:75:70:2f:a6:a0:20:c6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jun 22 20:01:12 2024 GMT
Not After : Jun 23 20:01:12 2024 GMT
Subject: CN=979991b8068b27e22f6698bc040ff2bc887f6acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8a:ae:b9:3e:a3:c8:25:79:5d:2d:92:02:81:
81:08:0b:45:24:30:00:0d:cb:11:a9:75:a8:60:8d:
88:3d:2d:3f:cf:10:e7:5e:e7:20:1a:f0:75:be:9c:
99:05:67:19:02:3c:09:be:38:3e:10:1c:70:20:c4:
7d:6e:ad:41:45:2d:3c:1c:20:ef:a0:c5:45:b7:62:
38:bf:67:ba:43:66:24:75:8f:d7:af:49:26:bf:72:
45:9a:b1:54:50:a1:3e:68:75:b3:35:af:84:6f:85:
37:82:08:e9:ab:9b:61:6e:9a:fa:3e:c6:29:2d:c7:
87:44:83:a1:97:60:f8:5e:fe:7a:23:29:39:8c:4b:
f4:f5:cc:41:d9:9a:23:71:23:33:e3:5d:1c:9f:9b:
f7:27:99:f1:bf:7d:9e:bb:84:a5:f1:bc:7c:58:48:
d1:e2:71:df:2b:c9:5b:1f:c1:25:9b:35:db:0a:ae:
3f:93:57:f9:12:bd:93:d9:83:87:6b:07:23:10:d1:
51:e6:65:58:6f:71:17:61:94:6d:45:05:f8:b6:f8:
22:ae:2a:05:3a:07:03:3d:b1:f8:d4:f1:d6:1d:2c:
37:89:c0:e3:8f:6b:4a:68:d6:6d:3f:df:3f:3d:b8:
10:73:30:5f:13:54:71:cf:34:a3:0d:e6:04:e1:30:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:91:B8:06:8B:27:E2:2F:66:98:BC:04:0F:F2:BC:88:7F:6A:CF
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3d:66:5b:22:cd:6a:10:f0:de:b4:f5:e9:77:04:e1:1b:bb:
07:4f:09:77:1c:df:b0:e1:ac:9d:c4:7c:e3:5d:60:a9:8b:d3:
6e:6b:92:e4:be:2d:d6:d2:56:e6:20:37:ba:9a:80:32:aa:45:
33:2b:d3:9b:19:9d:97:48:dd:27:de:14:d0:25:1f:3f:f1:55:
90:7b:03:3e:5f:46:0d:15:85:9d:23:5b:47:60:03:16:10:0b:
70:bc:43:cf:b2:4f:88:bb:6b:bb:8f:52:f9:15:7d:b4:cc:27:
49:d4:32:c6:ee:0e:6d:2f:18:14:60:d7:50:db:51:39:84:a7:
ed:78:97:2f:69:77:cd:a0:33:31:ae:d9:f2:38:18:ce:a1:a9:
16:40:06:48:57:8c:d1:85:2f:c2:84:91:c2:a9:41:d8:96:ff:
d0:cc:d2:6a:43:f4:70:79:d1:34:70:4a:ff:65:fe:89:38:3c:
bd:42:50:d6:61:b3:ec:ac:db:4f:e8:42:15:1c:37:4c:fb:d1:
ea:84:fd:30:43:8e:dc:65:7e:cd:5c:66:48:e1:e8:ec:63:1e:
ec:d2:0b:4a:fe:69:7f:96:dc:a6:8f:bf:9c:74:21:3e:36:46:
90:fc:3f:dc:60:af:9a:b1:c6:e6:f5:22:af:27:3d:13:f4:fe:
35:75:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:46:05 2024 by rpki-client on console-fra.rpki-client.org