Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: R9r3cq6O4HZvECjMxA3MO27P3evpCpA5YX+pbrFbPo0=
Subject key identifier: B7:1C:28:FB:F8:7B:B9:33:95:68:A3:5B:DB:32:60:60:98:D0:42:4C
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 01936B224A2A01AADF3CF0003F90D82BF840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 84
Signing time: Wed 27 Nov 2024 01:00:29 +0000
Manifest this update: Wed 27 Nov 2024 01:00:29 +0000
Manifest next update: Thu 28 Nov 2024 01:00:29 +0000
Files and hashes: 1: 1-7G08pI_hqVrmntorkk98lSNuxw.roa (hash: Jak2gLTuhorWpzIsEeg4N8nth1AuY11Q2J1PfyuiAQE=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: Ngu9ZX1l/HV0OMQD6WB98kvqs9oL33We0yohu0Zjnfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:4a:2a:01:aa:df:3c:f0:00:3f:90:d8:2b:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Nov 27 01:00:29 2024 GMT
Not After : Nov 28 01:00:29 2024 GMT
Subject: CN=b71c28fbf87bb9339568a35bdb32606098d0424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:18:4f:0e:4b:df:cf:67:6a:8d:3e:ef:57:
5a:5e:6e:23:16:73:91:b2:8c:a9:95:db:bc:47:cf:
35:5f:92:19:34:1b:af:29:cb:0e:70:ad:22:8a:ec:
75:57:f4:59:7e:94:fd:58:a9:11:85:80:73:c0:13:
0f:77:b2:ef:46:06:6e:a3:68:e8:56:bb:f7:a3:97:
50:4b:5b:f7:03:df:f1:9d:83:74:3b:b0:c8:6c:52:
f8:d6:1c:61:8f:05:1f:36:8f:78:45:43:82:c9:b5:
95:05:16:60:9a:cd:09:14:2d:4d:53:98:38:eb:55:
46:73:ba:14:f9:9d:f5:b4:87:ce:80:86:c9:de:36:
46:94:ce:08:b7:80:0d:8f:83:e2:8e:aa:bf:5c:4c:
16:50:24:2d:73:fa:b2:91:3a:3d:6b:fe:f3:81:de:
89:3a:31:80:73:aa:dd:55:44:8f:94:3c:a4:d3:67:
98:5a:57:b1:aa:bb:f1:25:f5:2f:38:c1:7c:09:9d:
4a:93:32:50:53:37:86:d8:67:db:8b:50:5c:13:23:
75:a2:4d:76:8a:e9:19:a5:14:41:97:4d:d5:40:d8:
fb:c2:88:52:57:19:dd:a6:c3:b4:e4:7f:4b:f9:18:
b5:ce:83:20:3a:9a:1f:8c:7a:71:c3:fb:2c:40:a6:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:28:FB:F8:7B:B9:33:95:68:A3:5B:DB:32:60:60:98:D0:42:4C
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c8:43:5a:78:b4:fa:bd:d1:27:e3:d6:f1:62:30:cb:5c:60:
0a:5b:aa:fa:20:8f:98:d4:0b:3d:c3:a0:70:0b:aa:51:04:50:
10:94:fc:fb:f6:5b:7f:78:14:b0:1c:24:16:0f:bf:ea:6a:7d:
98:69:3d:33:d7:aa:6c:1f:32:29:48:d8:a2:d9:62:19:a2:1c:
22:77:9e:28:7e:e1:5b:86:89:87:a6:7b:3c:c1:72:ea:26:47:
3e:21:8a:00:44:12:1c:08:e4:00:28:45:ca:51:32:3e:a9:93:
4c:c9:02:5a:e8:67:b9:fc:45:c4:51:d6:86:fa:37:36:40:7c:
41:b2:7d:5c:f7:ea:d4:f2:eb:2d:bc:4d:04:39:4f:af:44:23:
8b:48:06:a4:65:80:3c:ad:b6:cf:42:63:06:dc:3d:a3:16:55:
2e:43:8c:3e:93:3c:b1:97:23:e8:46:8c:1b:f2:0b:86:1b:d7:
2c:3f:48:32:1d:35:25:0c:48:ea:69:b2:f2:84:b7:c5:15:b5:
d8:14:f8:5c:0f:7b:32:d6:46:06:e6:37:49:95:0c:ab:19:63:
fa:9d:96:dc:c9:f6:f0:3f:cc:e8:d1:51:f4:dd:cc:7f:9d:ed:
08:5c:ed:22:0d:76:a1:8e:53:89:77:21:9a:20:62:1f:ad:d0:
76:ea:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:53 2024 by rpki-client on console-fra.rpki-client.org