Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: Siq/+2ipMnGKax7nOqjmXZfwhSnEBmxxmYaF/KMdq7s=
Subject key identifier: 7B:90:90:E6:C3:E4:28:BB:74:1B:48:19:9B:1D:9B:58:68:A2:27:E0
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 0194C46392BCE80CD83EC9CBC0B45ABF7C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: A1
Signing time: Sun 02 Feb 2025 02:00:47 +0000
Manifest this update: Sun 02 Feb 2025 02:00:47 +0000
Manifest next update: Mon 03 Feb 2025 02:00:47 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: Zny65djBSm2k8YihS5SrlZ1zz5xs8KgwCoM5P9k1HSM=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:92:bc:e8:0c:d8:3e:c9:cb:c0:b4:5a:bf:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Feb 2 02:00:47 2025 GMT
Not After : Feb 3 02:00:47 2025 GMT
Subject: CN=7b9090e6c3e428bb741b48199b1d9b5868a227e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:8d:d5:77:93:60:44:81:b7:e5:53:c8:84:
2f:73:ce:5e:3c:30:c3:b9:40:25:a3:0f:ea:18:25:
84:cb:ca:f2:84:e9:9a:4a:20:2f:22:5e:96:24:2d:
cb:b3:b6:6a:78:e0:75:43:76:d1:a4:4c:db:3b:1a:
1d:e9:f5:31:c3:fd:42:aa:16:dd:e4:18:e9:d9:15:
3c:0c:63:ad:23:7f:e7:99:32:61:56:55:bc:c1:c8:
be:81:bc:ab:ac:40:13:11:a5:ef:1f:af:13:20:a9:
01:91:0e:9f:7f:fa:50:be:ba:1c:c8:f9:74:fc:d2:
72:4b:37:19:fe:7b:92:3f:50:30:ca:5f:01:88:bb:
5b:ed:7b:38:be:c6:fb:e3:74:99:65:25:2b:bc:85:
56:3d:ad:4b:34:2e:af:23:15:60:18:49:0f:28:23:
ef:67:42:3b:cd:5f:34:5d:67:bd:06:b4:c4:16:d4:
cd:be:3d:f4:e5:3f:90:b3:bc:5f:88:51:84:0b:e1:
ae:56:b7:73:00:39:5a:52:94:40:18:40:4c:45:30:
90:03:1a:5e:b4:34:92:a1:74:fa:13:63:2d:dd:b1:
1b:bc:b1:4e:e6:75:71:8c:d5:e3:0a:e9:0a:30:30:
db:7f:39:f1:35:71:f1:b9:10:c7:98:50:f8:9b:b9:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:90:90:E6:C3:E4:28:BB:74:1B:48:19:9B:1D:9B:58:68:A2:27:E0
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8e:65:e5:8f:97:1b:fb:11:75:ca:fc:dc:96:ea:2f:ff:49:
2c:f5:79:58:58:a3:89:9a:5e:99:dd:0b:f8:a3:93:b6:22:52:
86:72:8a:e4:e0:4e:01:27:3e:58:0c:40:e8:ca:df:a6:14:f1:
ad:ed:8c:51:f9:4e:12:0f:38:e7:f9:6a:ed:f3:f5:53:e5:f2:
5f:57:5c:d9:d9:ff:39:a3:e9:87:0c:c2:f6:50:dc:76:e6:29:
9a:ce:51:60:5f:fa:17:98:71:38:7b:53:56:14:18:02:44:c9:
f4:cb:26:69:39:e8:78:21:d9:64:18:fb:2d:4f:6b:5a:72:f3:
e6:40:3c:39:87:8b:7e:28:47:49:e7:ad:1b:97:2d:40:43:2a:
5f:01:f9:c5:dd:65:eb:a4:04:4e:6c:56:25:b6:fc:66:70:40:
b1:1d:94:2b:22:37:c6:76:44:cd:6a:2e:c2:60:52:0c:30:a7:
a9:ba:d0:44:9b:7e:4d:9a:b4:34:21:78:59:52:b7:ec:d0:27:
c8:c8:45:d2:a8:9c:76:91:cc:92:2d:1a:b6:87:2b:b2:f8:7a:
5c:60:53:bb:cf:c7:ef:40:03:c1:7b:88:59:dd:66:e8:9d:ee:
c0:be:a7:62:97:c4:1b:09:5f:81:53:cd:7c:4a:18:e3:11:15:
d8:95:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:14 2025 by rpki-client