Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
File: LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft (raw, json)
Hash identifier: Plkiq2/PV6PM96X4huXxFGYLG1EjJ/msXtVNejryOrU=
Subject key identifier: 06:3E:49:EC:B9:D5:C0:27:3A:0B:61:6C:DE:2D:EE:7A:42:2C:A1:5E
Authority key identifier: 2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
Certificate issuer: /CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Certificate serial: 0194C507D32548CAF987EC98E7EDC0074FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
Manifest number: E4
Signing time: Sun 02 Feb 2025 05:00:11 +0000
Manifest this update: Sun 02 Feb 2025 05:00:11 +0000
Manifest next update: Mon 03 Feb 2025 05:00:11 +0000
Files and hashes: 1: LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl (hash: dBNf3kUwxeaJiIVsu6NunRSyTwdAUaKC7LejPXKh4KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:d3:25:48:ca:f9:87:ec:98:e7:ed:c0:07:4f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Validity
Not Before: Feb 2 05:00:11 2025 GMT
Not After : Feb 3 05:00:11 2025 GMT
Subject: CN=063e49ecb9d5c0273a0b616cde2dee7a422ca15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:29:b2:79:ce:19:bf:59:e6:29:01:4a:ea:
5a:40:d5:e9:5c:d8:8a:13:af:99:f0:8f:81:6f:0b:
a7:ef:23:8f:c2:85:bb:15:19:85:f1:3e:31:db:2d:
97:77:9d:ee:db:18:dd:b1:41:7b:55:8e:dd:70:65:
22:61:5a:bc:5b:a9:2c:69:94:73:6f:8f:d2:8d:76:
48:58:e2:86:a4:5a:ed:55:ad:3c:29:ef:f0:96:e1:
f4:f1:58:dd:df:3d:3a:93:35:c7:c0:7c:f3:5d:bb:
39:19:bc:1d:ae:bc:36:5c:93:18:3a:42:80:2a:c0:
df:df:e4:b2:f6:e6:3c:f9:0c:fb:28:13:0e:93:6c:
1a:a9:63:9a:99:4b:c9:69:ed:05:33:19:5f:6e:84:
5c:ec:36:91:08:44:e3:d1:46:66:ff:22:9f:56:d1:
f5:dd:a1:0e:72:1e:d1:9c:ab:79:53:10:25:94:31:
23:33:d8:a4:14:55:e8:a2:c4:c3:47:c5:29:33:b3:
ae:4e:25:de:50:5a:57:42:10:1f:49:dc:11:a6:49:
34:bc:2c:86:4d:3f:84:57:6f:2c:8b:9e:f1:ec:c2:
1e:cd:9b:2b:64:24:ef:b0:e4:8d:b7:3a:a3:5a:a7:
42:01:f5:16:2d:be:6f:ca:19:f5:ad:f9:84:7e:ae:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3E:49:EC:B9:D5:C0:27:3A:0B:61:6C:DE:2D:EE:7A:42:2C:A1:5E
X509v3 Authority Key Identifier:
keyid:2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c7:6f:4c:40:25:1a:a4:f7:d6:1f:78:40:4d:a8:50:dd:10:
ef:5a:f9:51:da:3e:06:23:a7:c4:48:0d:84:f8:23:66:55:f9:
c0:4f:d1:60:72:11:86:0e:81:40:2c:e9:60:69:3d:64:dd:46:
8b:89:b3:b6:fb:a7:cb:c4:2f:61:9b:46:d5:b6:a4:cd:bc:90:
7a:ef:a7:68:06:3d:c7:60:e9:97:64:a9:39:2e:e7:ec:76:f6:
ee:06:60:3a:b0:a5:35:bd:90:a2:3a:d2:92:b1:cd:e3:0c:93:
19:f5:ca:e5:6c:cb:6f:0b:ce:95:ac:61:43:1c:8b:4a:4d:38:
bb:07:39:aa:ad:48:52:90:15:55:84:8c:26:c1:8e:82:dd:9d:
45:48:b9:16:8b:c1:16:1e:75:3e:07:1b:62:7b:f3:7f:e5:4c:
f7:dd:96:a3:0a:7d:7c:c0:df:9c:76:94:c6:96:8c:68:29:e7:
3e:e4:19:b0:ba:ae:6b:ab:bc:77:74:39:80:31:40:7c:a4:06:
53:5c:98:90:1d:6a:bf:44:48:60:a6:9f:a5:62:ca:f2:e2:8e:
ff:10:fc:f7:54:f1:ea:b3:bd:cc:e2:a0:ab:37:44:c6:03:13:
e4:8c:00:11:c0:65:c0:1f:11:f9:41:02:7c:d7:f7:ab:3c:75:
a7:db:87:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:56 2025 by rpki-client