Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: VA5K/u3xq6n6HlS7SFcybzJ1fND5uNSqWLrJa72iVNg=
Subject key identifier: 4A:2A:34:92:8E:B9:6E:B0:61:81:76:02:8D:8C:B9:FE:94:CD:77:FB
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019511D9B567F523C290F57D471C849EF4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 03:00:35 +0000
Manifest this update: Mon 17 Feb 2025 03:00:35 +0000
Manifest next update: Tue 18 Feb 2025 03:00:35 +0000
Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: MFP1UxSSSa7munVHN9tjhevOdgyAk4UjiZ3XeMlZijs=)
3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b5:67:f5:23:c2:90:f5:7d:47:1c:84:9e:f4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Feb 17 03:00:35 2025 GMT
Not After : Feb 18 03:00:35 2025 GMT
Subject: CN=4a2a34928eb96eb0618176028d8cb9fe94cd77fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:6f:fd:ce:4d:0b:3a:9f:7a:20:a0:c7:4d:
3b:76:53:67:4f:c6:54:20:3b:3a:8d:48:cf:55:f5:
45:4a:01:f1:61:17:2c:d9:8e:c4:7f:3f:ba:22:c8:
fd:7c:d6:d0:12:03:99:7f:4e:a2:0f:b0:4b:e3:33:
84:a0:e1:24:c1:81:68:eb:25:d1:96:cf:b1:ee:73:
7f:28:71:c6:76:c8:22:16:79:88:c7:6b:8d:9f:7a:
d1:df:10:68:19:42:43:96:92:38:d8:d1:81:2a:6c:
b9:3f:57:45:93:4a:23:21:e0:e5:a6:1b:dc:72:7b:
5f:7f:00:73:9e:87:56:e7:2e:6b:77:ab:eb:c1:7a:
1b:77:36:5b:72:a9:eb:44:42:1b:af:07:76:6b:5b:
61:4b:a9:48:d2:21:13:47:53:16:5c:55:5b:ac:55:
cf:5a:57:a2:a8:00:fb:60:4e:be:a4:4f:92:2d:80:
0e:b9:15:81:8f:e1:05:74:d4:2a:75:d4:07:8c:bd:
49:98:43:53:88:36:2c:f0:6a:4a:ba:18:d1:da:f2:
43:71:d6:44:5a:8e:63:4c:32:d6:13:f9:b8:ec:66:
66:ac:8a:91:78:ed:5d:c8:9b:70:54:87:96:fe:44:
44:15:5c:8e:e2:5b:10:f8:d4:63:1e:bf:c5:6c:8e:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:34:92:8E:B9:6E:B0:61:81:76:02:8D:8C:B9:FE:94:CD:77:FB
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7c:22:d0:a2:5d:0d:e5:e3:00:28:c1:dc:41:06:be:7c:3c:
ca:6e:f2:f7:b0:4f:77:e7:10:e7:cd:1b:21:9f:53:f5:9d:0a:
73:c2:dd:71:c9:09:48:06:0c:74:54:39:79:3b:dd:04:b2:ae:
8c:2e:74:60:fe:4f:ef:82:a6:91:7a:0c:6e:73:fa:fb:aa:60:
0c:cd:9c:4e:0e:ea:f1:c8:0d:53:43:33:c8:a4:5f:de:ef:9e:
96:0c:cc:eb:d3:31:04:ed:ff:31:8c:b9:d6:ae:83:f1:16:aa:
22:e3:8a:14:f2:27:a8:28:6a:94:1d:ff:dd:d9:6f:65:54:6b:
b1:fe:dc:5d:4a:bf:a3:62:ec:4c:ba:f2:a8:ea:00:bb:45:86:
e4:82:5e:dd:e8:0a:c8:3e:19:0a:26:96:2f:83:18:6f:00:7c:
bc:65:ec:01:48:e6:45:70:28:37:db:cb:27:ae:34:15:c9:bd:
a8:2d:3b:aa:1a:e8:20:b8:94:1d:52:89:f2:0d:58:46:c1:d3:
e7:23:e1:7a:6f:8f:e7:22:87:05:30:0c:a3:c7:d8:86:11:f7:
82:d9:a2:7a:0e:e7:d2:68:32:4f:94:31:53:b1:99:c1:4b:fd:
d2:4b:94:c8:c0:44:86:61:e3:28:e4:2e:cd:f3:f2:6e:2a:ae:
d9:5f:4e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:05 2025 by rpki-client