Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: 2LDAIxrHXWAZv6TRGocPNaC5/ERHCZ0XWSHNWrQg/HY=
Subject key identifier: D1:C6:87:23:69:E1:EA:D5:B9:C2:2F:22:7A:DB:48:4D:9A:7D:B7:DF
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 0194C388099AE9CC28F00562EB48CCC6DF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 22:00:59 +0000
Manifest this update: Sat 01 Feb 2025 22:00:59 +0000
Manifest next update: Sun 02 Feb 2025 22:00:59 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: DiOBiGVLCjmsH5vM7eWWCdMij37WeydzvzDMp0q+s48=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:09:9a:e9:cc:28:f0:05:62:eb:48:cc:c6:df:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Feb 1 22:00:59 2025 GMT
Not After : Feb 2 22:00:59 2025 GMT
Subject: CN=d1c6872369e1ead5b9c22f227adb484d9a7db7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:ad:2c:f0:33:6c:b7:32:b8:b5:00:9a:ef:
93:39:15:f4:c3:6b:bb:3f:cc:26:b1:55:81:02:c0:
2d:ef:ba:1a:b7:7a:67:52:ee:9c:a4:5a:9d:f5:63:
fe:eb:01:9d:1a:d5:bf:51:c7:5a:22:c9:5f:0b:84:
bc:f3:e5:a8:39:c8:66:75:f3:45:0a:05:35:e7:9c:
19:3d:e5:64:10:a9:5e:40:92:a4:d5:4c:00:97:57:
79:7e:7d:b7:c5:20:98:3c:ec:28:d9:f3:d1:0b:99:
7f:90:e5:7a:07:8a:3a:a6:b7:31:4a:6a:c4:01:5c:
3a:8e:5e:fd:3e:6a:00:f4:b6:fc:1e:dc:9f:0d:af:
c0:3c:24:35:ac:ff:31:88:4f:bb:65:e4:9c:5e:39:
6b:ab:9f:b5:3f:7b:01:15:42:89:9a:e8:e4:51:c2:
f4:8f:32:04:76:e1:3b:88:bd:ef:9c:5c:2f:09:e0:
88:7d:95:04:0e:ea:31:46:57:61:2e:26:98:8e:4d:
79:1e:75:f8:ff:ad:64:77:b2:9a:ae:7a:d8:fa:ff:
62:38:c5:84:d1:7e:26:ee:40:46:10:ba:e6:8f:1b:
ec:29:b0:85:46:14:5b:53:6d:0e:17:b0:86:d0:b4:
fa:8d:dd:bf:c2:d3:89:e5:f3:f6:d1:fe:a8:15:cf:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C6:87:23:69:E1:EA:D5:B9:C2:2F:22:7A:DB:48:4D:9A:7D:B7:DF
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ae:46:c9:20:f0:ae:21:a1:2f:6b:ec:1e:6d:1a:80:0a:57:
d1:f9:c8:39:5f:88:f1:46:4d:93:2c:ad:ae:9b:f4:b6:81:53:
49:8c:8b:76:c6:e7:0b:0f:3d:89:b6:6d:bd:c0:4d:6e:15:48:
89:0c:0a:f5:c4:8f:a6:d2:20:53:36:33:97:69:e2:27:fa:c5:
b4:9b:a3:26:1a:7f:bc:49:27:4a:7d:c1:ee:60:97:f6:2d:6a:
89:cf:be:f0:24:93:dc:b2:91:50:10:7c:79:62:3b:31:53:a3:
f2:c6:ab:03:6e:a9:b1:53:f2:2b:3e:30:35:01:62:8d:54:19:
72:60:44:d0:48:21:cb:d7:d0:80:98:ef:a1:85:b3:f3:d1:4a:
c1:46:d5:e1:35:a2:d3:72:4a:41:04:3c:de:e8:fc:e4:23:33:
a5:b4:36:4f:9a:bd:2a:e9:5a:06:82:42:30:08:ac:c4:54:ee:
a0:74:11:49:c3:0a:38:5b:4d:65:f2:ec:7f:c1:9a:2f:6a:03:
ca:82:6a:68:54:bb:02:97:ae:4e:41:7d:9f:32:ab:91:64:15:
5d:06:d4:29:09:34:77:65:75:68:c1:74:21:53:10:e5:8a:8b:
20:a3:d5:50:af:0b:8f:fb:b1:28:3d:5a:b0:1c:31:5b:c8:25:
b0:92:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:11 2025 by rpki-client