Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: BNJrTuGPJLQUiaqtYrKLzo+vk3VAf53G/FJKcRy6Zi8=
Subject key identifier: 81:D0:E2:71:9F:F9:F4:B5:89:1C:10:B9:CB:6B:A3:B1:40:3B:8F:55
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019367EA6E429267EA4191A732A4BDF8D12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 07F7
Signing time: Tue 26 Nov 2024 10:00:37 +0000
Manifest this update: Tue 26 Nov 2024 10:00:37 +0000
Manifest next update: Wed 27 Nov 2024 10:00:37 +0000
Files and hashes: 1: 4HeGJXZKaxYnfIehfTqageiX3_o.roa (hash: 0kWEjVhCRHuilzTpdiApQWbZjblZ/HsQQVKE/q937Lg=)
2: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: 4NmeNqSUe6WkAgOuMFllMvZEej3qraaxfk56JHCWVTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ea:6e:42:92:67:ea:41:91:a7:32:a4:bd:f8:d1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Nov 26 10:00:37 2024 GMT
Not After : Nov 27 10:00:37 2024 GMT
Subject: CN=81d0e2719ff9f4b5891c10b9cb6ba3b1403b8f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:35:d2:b3:71:06:e3:56:1f:d1:8b:90:fc:
e3:d3:1e:0d:ac:30:31:fd:11:26:40:8e:ff:d6:d7:
a0:48:27:b5:b9:78:d9:c9:cd:44:af:4a:40:47:70:
b7:bd:fc:f0:f5:e1:9d:7d:85:d6:c3:35:7e:9f:e1:
3b:45:7b:55:0a:57:18:c1:4c:24:a7:c5:b0:00:41:
fc:bd:07:98:75:13:d6:1d:d6:16:90:1b:a1:72:fc:
5a:fa:a6:4c:cf:2c:f4:b4:62:b6:4c:4b:06:61:ee:
a7:01:b1:46:29:08:e5:63:f1:f8:2c:ff:2e:c4:de:
18:3a:4f:b1:80:2b:fb:f4:54:a4:87:12:96:1f:35:
75:e2:63:7e:de:e8:19:c4:0f:91:4f:cd:46:69:5e:
9c:11:70:0c:c4:bc:81:27:ea:d2:93:51:5a:de:88:
d0:ce:76:94:c9:2e:b8:d3:ad:84:bc:d3:61:e6:eb:
e9:6d:96:bf:40:2d:db:c0:49:8a:f5:2d:6c:78:30:
cf:f3:d9:93:fd:4a:da:0e:8c:6f:e4:fb:9b:d9:bc:
43:be:95:b3:99:8b:d8:02:0b:ea:ce:17:3b:50:e5:
13:93:89:a5:83:44:92:17:32:0f:2d:11:13:64:c8:
64:bd:bc:8a:a2:06:1c:5c:47:57:f6:da:61:17:5d:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:E2:71:9F:F9:F4:B5:89:1C:10:B9:CB:6B:A3:B1:40:3B:8F:55
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:39:3a:e5:85:69:c4:15:16:e9:12:9b:17:2e:e9:0b:3f:f3:
47:c1:53:7f:f4:b6:46:f4:e1:26:65:4c:dd:7e:8f:5e:9f:e3:
36:c6:86:15:d5:a7:37:5d:1d:d4:68:c8:38:9a:21:b3:c7:40:
36:a7:62:00:f8:b9:cf:c8:47:f0:fa:12:38:da:3a:58:5f:12:
d4:d9:98:0c:51:e5:03:90:fa:b3:ef:90:02:88:bd:80:fb:ea:
f1:24:7d:11:e1:dd:07:62:d5:cc:e6:d9:d0:b4:c5:6e:fc:d9:
1f:58:e5:18:56:60:55:94:fd:30:02:b3:5a:61:90:4e:93:8a:
74:38:ce:8c:60:75:54:cb:f3:14:34:53:a0:f4:c8:59:c6:86:
8f:c8:97:0a:de:66:a6:c2:fa:dc:56:53:fb:93:59:98:47:8b:
92:ec:13:c1:37:2b:01:f1:19:d1:fd:b1:35:9f:16:28:51:af:
12:72:5a:10:2e:08:36:8c:fe:d1:8e:c6:a5:74:b4:12:22:f7:
23:56:a3:f9:d6:a5:73:84:dc:30:00:fa:19:bd:7e:e9:a5:9a:
6c:d3:b1:94:4e:39:4e:d5:ea:61:6a:b8:f5:a2:6a:2c:1f:f9:
52:ba:27:91:ea:f2:b7:a9:6e:84:65:28:23:ad:73:a7:23:07:
7f:da:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:30:48 2024 by rpki-client on console-ams.rpki-client.org