Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: 8HH5SDgVXHQY0UVITXmKTu7EpZ2NF2FNBtjw5OsinXg=
Subject key identifier: 90:D1:25:0E:27:BD:65:15:71:93:F7:8C:02:2C:C5:4D:5C:1A:F9:9E
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 019511351A90E540DA9363BBD64EF2C25111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 0228
Signing time: Mon 17 Feb 2025 00:00:47 +0000
Manifest this update: Mon 17 Feb 2025 00:00:47 +0000
Manifest next update: Tue 18 Feb 2025 00:00:47 +0000
Files and hashes: 1: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: mx8otyUJlA7WR88zSkx4YxuLN0yXgscuEXc4uvgVkfo=)
2: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (hash: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=)
3: wqY_ixYVjH1acrjorGcEZywYgRk.roa (hash: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:1a:90:e5:40:da:93:63:bb:d6:4e:f2:c2:51:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Feb 17 00:00:47 2025 GMT
Not After : Feb 18 00:00:47 2025 GMT
Subject: CN=90d1250e27bd65157193f78c022cc54d5c1af99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:f9:9d:42:e7:68:bf:6d:0a:9a:0b:e8:4c:
3c:f2:2e:35:8d:f8:16:40:81:30:d3:43:77:ba:63:
32:5e:f9:1a:31:07:5b:f9:34:71:fb:1f:df:e7:9f:
0f:0e:4e:eb:63:ba:fd:4c:d3:01:7b:f1:5b:d3:00:
51:09:02:76:87:f3:8c:3f:3a:42:3e:ca:a8:ab:37:
a7:6b:97:5d:e0:20:85:10:07:d2:4f:27:ca:32:28:
fe:79:ca:c1:15:06:1e:a4:4d:09:26:86:01:17:1d:
15:e7:cc:e9:fd:c9:69:3f:14:61:19:3e:6c:b3:7a:
d1:73:22:dc:05:ab:ee:80:1a:9c:af:ab:be:9a:4a:
39:cd:2f:3f:1c:37:54:09:15:7a:2f:b3:ea:ec:ec:
c3:08:0f:29:ef:04:ff:48:68:b6:31:7c:90:f6:95:
98:25:4c:55:b0:57:57:44:8f:15:02:aa:dc:ed:0f:
b5:63:3d:ad:11:cc:40:0c:73:f1:01:08:b2:0a:30:
cf:2e:98:96:5a:10:c4:4b:64:e9:a8:23:ac:7d:09:
87:3c:4f:4b:e2:59:83:62:52:5c:9e:44:94:a9:39:
3e:66:bd:3b:79:44:09:5a:0f:36:92:2f:95:62:84:
b8:ec:36:0c:ff:71:9a:15:92:8b:e9:24:86:6a:41:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D1:25:0E:27:BD:65:15:71:93:F7:8C:02:2C:C5:4D:5C:1A:F9:9E
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:09:42:5a:86:5b:8c:56:55:fb:db:9d:25:2d:3f:0f:51:ea:
87:3e:bd:e0:f5:eb:dd:16:93:73:c3:30:2a:c0:e3:89:cb:01:
62:0d:22:54:d3:38:b4:be:c4:d8:ec:69:50:b9:a5:f0:3e:03:
a7:7e:33:11:ea:2f:20:af:b2:f5:de:ef:2c:22:96:49:e8:90:
b4:0b:c2:e7:87:f8:e4:fb:10:33:3a:04:20:3b:4f:1b:ec:81:
a1:e1:4b:9b:ec:f1:b4:29:5f:dd:a8:5f:a9:50:e4:be:e6:00:
59:ec:13:14:47:d2:77:47:80:f9:49:48:06:a8:fa:9a:1a:d1:
01:1f:66:a5:ea:77:e6:91:8c:98:bf:ad:1e:4c:b4:b1:4d:f6:
02:3a:f9:9c:07:1d:97:c4:fc:05:05:2f:76:0b:85:08:5c:af:
7d:ce:95:64:fc:34:03:fc:75:ae:93:f2:cf:b5:aa:22:e6:6e:
8d:e8:e8:25:92:05:22:59:0b:93:7a:c4:d7:98:da:2b:56:58:
ca:29:6e:59:b0:2e:3a:db:b2:55:7b:41:2a:35:00:8f:e7:ea:
83:39:89:a3:6a:9f:b4:b2:05:07:cc:fe:72:f8:89:8a:57:98:
82:69:06:77:c0:30:57:d2:11:e2:04:2e:fb:9d:f8:76:ce:ca:
72:96:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:06 2025 by rpki-client