Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: JYNIBDuZJ4A+aSRRyp3sxx+t1quVbvTZNWlUJdj7tio=
Subject key identifier: C2:EC:F6:0A:38:8D:C8:06:B2:21:7A:EF:A9:6B:87:BB:B5:94:E7:83
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 01901BFDCF73FFA7D076D693537614B8B168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 13:02:16 +0000
Manifest this update: Sat 15 Jun 2024 13:02:16 +0000
Manifest next update: Sun 16 Jun 2024 13:02:16 +0000
Files and hashes: 1: 1-C13rJoh_2AG3349xoorPIufciI.roa (hash: jYnBANgVl9Odqh9yLErT/DVhNquN6U8W1KyVQOLPgcU=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: oJaVTpRbJjNvhK5zw6iH0fxY4QfWgw724p1cJNOZLIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fd:cf:73:ff:a7:d0:76:d6:93:53:76:14:b8:b1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Jun 15 13:02:16 2024 GMT
Not After : Jun 16 13:02:16 2024 GMT
Subject: CN=c2ecf60a388dc806b2217aefa96b87bbb594e783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:0d:fd:fc:6d:25:48:50:e5:ca:da:61:ad:
52:e1:a3:ba:b4:42:d7:ef:29:54:e4:70:a7:36:35:
bf:3a:d8:3b:ed:d4:8f:84:1d:b0:b8:b4:c9:b4:90:
d0:05:70:c2:f3:0a:98:50:a8:16:8f:f4:d7:21:af:
2f:0b:63:25:8d:0c:2c:f1:b7:97:9d:00:b1:10:73:
94:24:6e:0f:f1:4d:63:9e:67:a1:c5:c5:04:09:9a:
7a:bf:c0:91:ba:85:7b:83:d6:f3:29:41:ee:2e:ad:
c4:91:b5:48:0f:12:8c:08:f2:6b:c3:64:d9:b5:18:
ba:6b:ae:94:a1:97:f6:c7:99:d6:bc:cb:fa:e5:8f:
e5:03:2c:74:a2:38:49:86:d5:26:bc:26:28:7b:68:
e8:1a:c3:57:26:a2:4c:d5:26:9a:b2:0a:8c:34:b4:
4d:80:99:dc:8f:b3:ed:91:c2:01:49:7b:75:a7:8a:
ca:f4:95:39:95:6d:2a:22:7e:80:2b:4d:0f:82:c9:
fb:f9:f2:fc:32:33:c6:87:76:62:b9:52:69:c8:9b:
9e:8a:39:bb:81:ad:02:fa:72:80:48:1a:6e:da:82:
a7:e4:1d:c2:e2:67:3b:01:87:38:07:6a:bd:e0:d3:
22:88:35:68:f9:7b:d9:13:d7:31:8b:ef:b2:3e:2f:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EC:F6:0A:38:8D:C8:06:B2:21:7A:EF:A9:6B:87:BB:B5:94:E7:83
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:04:2f:3d:60:93:a7:d4:54:e0:15:3f:91:f5:e0:61:28:ee:
d9:2b:dc:cc:30:c6:6a:eb:e5:4a:b0:f0:95:e5:3f:a3:02:c7:
b5:17:76:c1:1d:2a:a7:a3:c5:b1:08:52:72:87:f1:ab:ed:fd:
de:57:75:fc:7f:68:92:3a:69:45:16:3c:79:81:a2:ed:69:2a:
2a:8e:bb:3a:11:b6:0c:98:52:70:ea:d5:1f:30:e4:e0:bf:52:
0d:e7:f8:2c:fb:e9:e5:56:88:6f:97:39:3f:36:07:05:57:dd:
48:d4:df:1e:22:e5:7a:11:13:9d:2e:14:2a:b2:71:8a:a1:ff:
d3:5a:19:2d:a4:23:76:7c:79:2e:c7:2c:0f:85:cb:96:f6:5a:
b2:94:8b:e8:3a:57:e5:25:f3:87:28:72:f1:37:6a:53:03:96:
69:24:c4:60:62:15:7c:41:e3:af:a5:a3:11:07:7d:b7:8f:4f:
a6:54:9b:c3:5a:eb:a2:96:94:89:c6:9f:f9:ab:e6:e3:db:b5:
a8:86:3c:95:27:9c:27:ca:40:0a:5a:4e:b6:7f:d0:c7:56:64:
ef:13:da:f4:da:52:ac:dd:62:06:95:dd:d1:84:07:cb:e3:07:
2a:bf:10:98:3f:88:54:0d:84:10:01:90:17:83:e5:62:96:be:
73:6c:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:37:25 2024 by rpki-client on console-fra.rpki-client.org