Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: safGYl68MN3Z5uDm0jpeL0lJ3n08d//fgnEN8g2cn3k=
Subject key identifier: 12:5F:F7:1E:09:D8:86:0C:DE:F4:1A:BF:8D:33:D7:55:9E:A4:0C:96
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 0191FA103A6BB078159EFF75192151A6DCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 8D
Signing time: Mon 16 Sep 2024 09:00:53 +0000
Manifest this update: Mon 16 Sep 2024 09:00:53 +0000
Manifest next update: Tue 17 Sep 2024 09:00:53 +0000
Files and hashes: 1: 2LL-AKmmbsQRdC1Q5QdGWut78d4.roa (hash: urfoKnwBRRTdtReer7OH2bNvLx//qIp7th7HbuPGhuQ=)
2: FR49L_tM6WAVKT5hGH3KS3K2Oh0.roa (hash: 1LGqgjKFOMp1FwtVtC5CiL9qlyqtaWMN4BBWXKAonoA=)
3: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: Br9F3+bTsu12+YMuyu1mvaQubM8kHNrGhLlk240wQr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:10:3a:6b:b0:78:15:9e:ff:75:19:21:51:a6:dc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Sep 16 09:00:53 2024 GMT
Not After : Sep 17 09:00:53 2024 GMT
Subject: CN=125ff71e09d8860cdef41abf8d33d7559ea40c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:c7:fc:8f:7d:6c:18:99:08:3a:bf:70:06:
3c:44:8e:37:cf:e5:17:5d:bc:3b:fe:e5:22:b7:dc:
ae:9a:8a:94:df:f2:c5:fd:46:f8:8a:47:fe:74:f1:
0c:d4:0d:0c:44:03:76:9b:5a:4d:4b:8b:51:dd:ac:
1b:d4:c8:44:ec:37:d2:5c:2e:fc:eb:81:54:50:27:
8e:37:d9:f0:0e:ae:cb:8c:9a:d4:04:82:4a:5a:3c:
87:79:98:06:86:37:2f:dd:52:b2:b9:92:ec:d8:60:
27:f7:e6:51:44:95:cb:57:2b:18:d7:fc:52:d8:dc:
5e:3e:9f:2f:05:a8:07:07:8e:94:fa:44:5d:4a:f2:
92:b0:2a:3b:99:88:03:ee:9a:07:4c:bb:59:dd:d9:
29:ee:6c:a5:6f:23:63:e5:a0:e1:92:75:0a:d1:08:
90:03:0a:33:48:50:2e:dd:46:3c:45:85:75:70:e8:
7b:0e:8d:69:9f:aa:b2:c8:dc:82:2a:92:7b:39:39:
bf:e3:25:f6:05:19:e3:09:66:43:46:83:28:97:cf:
cd:10:82:07:0e:ac:96:fe:48:e1:97:24:8b:21:b1:
30:e0:13:91:de:c5:95:2a:0f:d8:1e:46:1a:fe:de:
56:c6:85:03:c8:e2:33:e3:f9:ff:af:38:bb:ff:e7:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:F7:1E:09:D8:86:0C:DE:F4:1A:BF:8D:33:D7:55:9E:A4:0C:96
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b8:a1:32:bd:c2:62:fc:52:1e:95:be:fb:15:69:01:a3:e7:
83:9b:43:22:7f:95:61:42:50:53:5f:31:b6:0f:05:6d:7c:f8:
87:aa:8a:0f:53:d9:7a:01:03:2c:c5:91:46:cb:58:61:55:a2:
d3:76:10:a8:06:2a:e6:73:04:90:74:7c:8c:9f:aa:01:ef:2e:
cb:33:8a:a3:e2:fb:49:70:15:a9:9c:78:e7:ce:dd:af:23:46:
04:c5:cc:47:72:6e:a6:bf:11:44:24:86:21:05:93:47:44:17:
69:e0:1c:44:c3:2f:31:43:25:eb:02:fe:6b:58:8d:df:ef:8f:
b0:91:98:bd:cf:f9:cb:22:ed:c7:de:be:86:54:6c:67:e9:26:
12:98:90:7b:ad:98:5a:ea:63:81:2e:af:bd:60:1b:47:47:30:
af:d6:82:79:51:9a:b3:2f:cd:56:1d:cd:ca:3a:c8:cf:99:9c:
2b:63:90:22:3d:d3:c7:40:54:a4:8e:4d:28:f5:f6:41:36:d1:
98:0c:a2:65:57:04:0f:5c:2d:c6:3b:07:93:13:66:43:a5:1c:
9a:03:f2:d4:f1:be:e7:69:d5:da:1f:49:cf:54:ec:70:e7:28:
0b:e8:ba:95:1b:c4:d9:ed:10:f0:2e:5f:f1:a1:3c:48:7d:91:
29:bb:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:11:56 2024 by rpki-client on console-ams.rpki-client.org