Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
File: LRGXVPwU_-eWimUWvUm9slYzuIc.mft (raw, json)
Hash identifier: mtm4qojSWlJkjd0xxohq8Z+VlvRr59KfjW7glc4ufYs=
Subject key identifier: A4:B2:77:05:62:53:E4:DD:4C:D3:A4:EC:31:4B:16:09:DC:83:8A:6B
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Certificate issuer: /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial: 019510C6F96C835B931744EC0C801FFBC14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
Manifest number: 0E11
Signing time: Sun 16 Feb 2025 22:00:30 +0000
Manifest this update: Sun 16 Feb 2025 22:00:30 +0000
Manifest next update: Mon 17 Feb 2025 22:00:30 +0000
Files and hashes: 1: LRGXVPwU_-eWimUWvUm9slYzuIc.crl (hash: PTba/IqSq+78r+ZKrYazR9Q8SUOP/REkigASfpkMRJE=)
2: Yq8p-Zl2UZI4Tb-nuCgzMSOT2M4.roa (hash: nZW2inX60+r3Vn2H9HqAa0liDQDWLVr6X/Z09+vg9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:f9:6c:83:5b:93:17:44:ec:0c:80:1f:fb:c1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Validity
Not Before: Feb 16 22:00:30 2025 GMT
Not After : Feb 17 22:00:30 2025 GMT
Subject: CN=a4b277056253e4dd4cd3a4ec314b1609dc838a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:04:50:80:27:31:29:89:28:3a:92:ed:1e:
9e:cf:c8:89:be:20:b7:90:e6:0e:81:a3:b8:48:b6:
15:0d:76:f2:67:2b:e5:e6:fe:94:bd:06:63:33:c6:
f1:50:b5:7b:c6:02:e1:8f:c0:b6:9c:e9:de:89:bf:
ce:dd:17:e8:91:0a:48:1c:f0:a5:a8:33:e8:dc:13:
23:21:b2:a1:1f:81:35:f7:a7:e8:43:31:5f:8f:93:
96:b9:80:7c:9c:04:cc:44:1f:c5:05:e7:95:f8:e9:
fe:34:29:b9:37:f6:99:79:33:94:5d:f9:7a:df:00:
e8:37:68:26:9e:3b:48:3a:44:fe:dc:93:a1:80:73:
98:15:e8:0c:dc:65:37:10:8c:f6:01:eb:b1:85:65:
9a:9a:16:04:70:b6:29:e8:9a:ba:ba:6f:4b:6f:0f:
e5:6b:84:05:9f:20:e8:e4:8f:31:c7:f5:c3:a3:c1:
f2:32:a7:51:f5:19:80:91:6f:9c:81:60:de:20:a6:
e3:cc:9c:44:8f:60:04:8f:7d:62:76:15:45:dd:dd:
1a:37:4e:be:e4:87:d1:bf:d1:69:e7:8c:d8:69:f5:
1f:7d:48:49:6e:36:5e:86:22:b4:ee:5a:bb:cb:81:
82:0c:74:25:6b:0e:29:69:c0:ed:c7:3a:cb:9c:5d:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:77:05:62:53:E4:DD:4C:D3:A4:EC:31:4B:16:09:DC:83:8A:6B
X509v3 Authority Key Identifier:
keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:92:62:fc:fa:a9:b2:03:bb:6b:5c:2e:c5:74:2d:16:92:b3:
cb:a3:3f:ef:3a:1d:a5:62:69:c3:86:65:b9:83:17:e8:f7:b6:
11:02:70:36:81:c5:e6:09:a2:b9:07:d1:00:d4:91:92:da:a8:
55:ba:46:98:12:27:8a:e5:7e:49:10:93:d9:48:0b:e2:72:29:
30:ac:07:16:50:c1:86:40:39:e4:62:6c:96:10:c2:67:f3:3d:
0e:0e:22:d5:24:39:84:45:c9:c2:61:38:50:84:b8:a9:ff:2c:
5c:cf:82:bb:22:a7:47:8b:c9:ce:00:d9:d2:f6:f9:d7:6b:e4:
b7:b2:a5:fd:78:56:e7:60:ac:33:50:42:2d:57:2e:42:fd:f3:
6c:27:74:aa:83:9b:db:9c:01:01:ac:68:2a:62:bd:fb:d7:87:
7f:33:8a:9b:a0:75:d8:3e:7c:30:9c:d2:2e:09:9c:30:a1:9a:
b2:59:ed:d3:0e:c7:e9:17:24:2e:31:c3:5f:21:ca:b7:26:e9:
70:29:3b:b7:0d:20:80:7c:ab:3d:f7:15:a3:c3:72:b4:d2:13:
63:d4:39:00:64:33:22:c7:2c:34:0e:a3:c7:0c:16:22:ed:bf:
c6:69:6f:a2:ba:90:3f:9b:cf:e9:a4:8f:84:a9:71:81:c7:c3:
e3:ef:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:54 2025 by rpki-client