Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier: XFCeNL5OLowdo7DyccKHXVK0niOjVnazQ/5BFEckDOY=
Subject key identifier: A8:6F:07:16:93:0B:51:C5:FE:FB:DA:93:7A:16:BC:6E:33:28:BA:14
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial: 0194C42C320FB1146940E5206D7DC86B8452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number: 0F2C
Signing time: Sun 02 Feb 2025 01:00:18 +0000
Manifest this update: Sun 02 Feb 2025 01:00:18 +0000
Manifest next update: Mon 03 Feb 2025 01:00:18 +0000
Files and hashes: 1: 6HQFKIaH-doszFtkd3GkDQ1Wxaw.roa (hash: 1OXXKiYa8WQkCMkAZRnTwQi7yeY/wqvng1D/8Z8Ivmg=)
2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: sHcGjKJYqaXxNlq+YIlr/1dM39gTtKJDAphAqOy0R64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:32:0f:b1:14:69:40:e5:20:6d:7d:c8:6b:84:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Validity
Not Before: Feb 2 01:00:18 2025 GMT
Not After : Feb 3 01:00:18 2025 GMT
Subject: CN=a86f0716930b51c5fefbda937a16bc6e3328ba14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:ad:01:99:8c:32:2c:a4:7e:cc:f0:bf:70:
1c:29:24:02:08:93:d3:e0:44:49:44:eb:5f:05:e8:
c7:dc:44:03:e9:f5:63:cd:4c:15:4f:7d:15:1b:99:
98:26:c7:c8:66:09:85:12:08:30:75:84:2d:fc:10:
f5:d7:96:53:b7:11:40:a3:6f:f8:ec:ed:87:fb:5b:
4f:5a:ac:3e:37:37:c2:42:21:e8:e8:a2:d5:c4:53:
5a:54:87:b7:ec:f0:b4:1b:ce:6d:09:2d:67:9a:b7:
49:e3:2d:ce:a4:12:b8:24:4d:40:aa:75:6f:b8:39:
2a:1a:b4:de:4b:72:f8:25:4b:4b:9b:64:e6:07:27:
65:e7:ce:66:4a:93:cc:3a:43:59:64:c5:18:7f:ec:
e8:32:18:18:bd:aa:e2:f4:a2:a4:c0:c7:50:52:b2:
7c:7a:ea:75:ee:3c:04:9a:5e:b1:d4:00:49:cc:25:
8c:e9:cc:9d:d7:3f:91:81:7c:6a:32:f1:8c:4a:3b:
2d:69:96:54:c0:0a:b0:aa:f1:0b:7f:72:5e:14:68:
0a:6a:0d:ed:b9:43:37:df:a1:5d:99:fe:3f:73:78:
ce:c0:ab:49:f5:c7:23:41:00:0d:c4:f8:39:94:6f:
f1:8b:73:77:4f:c5:7f:23:25:5f:11:14:35:76:f5:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6F:07:16:93:0B:51:C5:FE:FB:DA:93:7A:16:BC:6E:33:28:BA:14
X509v3 Authority Key Identifier:
keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:14:65:df:fd:37:29:b9:9a:de:54:e9:04:49:ee:c3:55:a5:
b1:cb:12:be:68:6d:77:73:5e:bd:f7:5a:69:cc:ef:f4:89:40:
7a:41:b9:41:84:51:cc:7e:58:4c:74:06:df:a4:d9:70:0c:21:
1f:f0:29:fc:9e:bf:9a:0b:9b:c7:b0:85:c2:9f:3f:48:ab:b4:
8d:f1:c0:e5:00:36:c4:f0:4c:c7:c2:32:98:35:3d:88:2d:cf:
1e:95:41:55:10:84:8b:cf:df:5b:7d:ec:14:53:0b:02:a1:a1:
e8:50:53:54:8a:39:9d:fb:8d:0c:ba:f4:c5:03:37:cf:b6:25:
68:e9:6c:9c:fe:b5:c8:62:51:44:d1:b6:f7:96:72:1c:61:7c:
67:c1:4a:29:09:5b:99:9b:48:3d:59:ef:4d:56:a4:2c:9f:51:
35:a4:4f:7d:61:b5:d0:cf:e1:1b:a3:41:7b:3c:5b:2b:0e:ea:
aa:26:fe:bb:53:d1:89:e1:fb:29:ae:01:86:37:1f:46:62:0b:
48:77:d7:a7:8f:39:39:86:5d:70:03:dc:20:e3:d4:82:9c:55:
76:8f:28:6c:bb:c7:4a:13:ab:9c:1d:b5:fe:9f:cb:84:3e:a5:
c6:91:ce:91:ef:bb:d1:e2:73:a8:64:73:3d:92:60:b3:05:39:
98:1e:6a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:22 2025 by rpki-client