Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: Vx5COUUTCtrDvZ0simGmb5hnAiGl6vWF0SygPLHJi2E=
Subject key identifier: 23:90:9E:5E:05:C6:E2:6C:9C:18:75:6C:53:D9:65:D2:18:5D:DB:32
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 018FB30F2D0B6101AA258FC8978736F4E15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 1162
Signing time: Sun 26 May 2024 04:01:06 +0000
Manifest this update: Sun 26 May 2024 04:01:06 +0000
Manifest next update: Mon 27 May 2024 04:01:06 +0000
Files and hashes: 1: Kyfpr5aT55DL-bLo16uBNrjAqHc.roa (hash: v7cyTheKoZ6JUxQD0pgosWJVuOPNM7ltYjLsCX7DGKs=)
2: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: Mb6voUJOA0e5rV7Hgdbhy/29siC8Rv25a0HX38yrB5U=)
3: ku5xXWwcqsWh1FSaZEzcbCZxQ5k.roa (hash: Awj+um1J3ccNCfMsqvLiSKrvAa/YK/HsxOdCIA2Au+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:0f:2d:0b:61:01:aa:25:8f:c8:97:87:36:f4:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: May 26 04:01:06 2024 GMT
Not After : May 27 04:01:06 2024 GMT
Subject: CN=23909e5e05c6e26c9c18756c53d965d2185ddb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:83:7e:4d:90:f9:1b:a4:6d:4e:8a:d5:d2:
61:cf:ff:5d:b0:53:7d:6d:7e:7a:97:d5:ac:55:26:
49:6f:b5:08:7f:b1:b5:a7:5c:53:4f:1e:bf:d5:57:
3c:8b:b2:34:ed:c2:16:c7:5a:38:50:66:48:0d:5d:
74:8d:5b:0c:ac:58:d9:05:31:ed:9c:d3:e2:8f:31:
44:0f:45:91:20:fb:35:86:3c:62:02:2d:6c:79:64:
8f:4d:d7:70:7d:94:c6:f1:45:46:45:7a:cb:fe:5f:
69:a8:b3:ed:54:86:13:00:c8:e8:27:0b:9c:cd:dd:
a4:cf:78:74:06:ce:7f:4e:5c:0d:03:23:99:fa:c2:
7c:9b:91:a0:c5:e2:5a:9c:fe:f0:28:d2:79:b0:2f:
b2:4a:91:92:c6:18:b3:4c:b2:42:f5:a8:0c:d4:81:
22:f9:41:07:04:32:c8:c6:fc:46:4a:f3:f3:43:a5:
db:5d:3e:e8:87:a5:b9:de:6a:9a:e5:2f:20:db:a9:
24:82:4b:4d:d1:9d:d4:ed:77:1a:ac:bf:dd:a4:d0:
e7:fe:fe:dc:9c:38:e3:fd:f2:b5:6c:d3:28:e7:8b:
2e:39:2a:c6:57:52:f9:6c:78:32:96:06:d6:1d:e7:
e5:e8:3a:ca:f2:88:43:9d:50:8e:9e:fb:ea:a9:77:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:9E:5E:05:C6:E2:6C:9C:18:75:6C:53:D9:65:D2:18:5D:DB:32
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:83:53:80:15:60:ad:10:cf:d9:07:4c:fb:95:74:49:c1:96:
e5:dc:4d:98:7b:56:81:f3:c2:ed:33:5b:b2:0f:99:dc:8a:00:
e4:f1:d8:ab:a7:96:94:c1:17:da:ab:ba:85:32:a4:9d:5a:53:
f1:9e:d8:a7:1b:8a:21:5d:9f:48:49:02:66:b5:cc:78:88:16:
1c:3d:21:f7:a9:b2:d9:69:78:bf:fe:05:af:99:53:ac:f2:23:
43:6c:d5:d5:02:90:01:57:fc:14:22:51:45:a3:20:45:3a:d4:
c7:c1:cd:2d:a5:a4:3d:c5:12:5b:ac:64:8e:fd:2e:01:36:d9:
76:38:ed:b2:f3:52:00:b1:f5:80:f5:9c:25:de:31:59:d9:85:
68:0e:64:cc:36:6a:6a:92:f3:95:48:73:9e:3a:ed:95:dd:0c:
94:2d:27:fa:34:37:11:6b:e2:cc:07:63:0a:eb:d5:38:d0:3f:
45:f9:af:78:56:87:c0:cf:ac:cd:40:25:92:fe:82:7e:06:e7:
0e:fa:26:53:2a:22:93:d8:74:58:dd:b5:4f:91:5a:c4:14:32:
d6:63:a0:d2:f1:2e:3b:4e:2e:02:b5:f9:06:10:26:16:c3:44:
eb:d6:46:11:37:77:bf:04:11:77:73:42:57:82:23:f2:8f:c4:
99:2b:9e:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+zDy0LYQGqJY/Il4c29OFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNjdmM2U0ZTE5NzdhYmU5OGNjYjIwY2ExYWZhODU4ZjFl
NjY4MWMwHhcNMjQwNTI2MDQwMTA2WhcNMjQwNTI3MDQwMTA2WjAzMTEwLwYDVQQD
EygyMzkwOWU1ZTA1YzZlMjZjOWMxODc1NmM1M2Q5NjVkMjE4NWRkYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX+Dfk2Q+RukbU6K1dJhz/9dsFN9
bX56l9WsVSZJb7UIf7G1p1xTTx6/1Vc8i7I07cIWx1o4UGZIDV10jVsMrFjZBTHt
nNPijzFED0WRIPs1hjxiAi1seWSPTddwfZTG8UVGRXrL/l9pqLPtVIYTAMjoJwuc
zd2kz3h0Bs5/TlwNAyOZ+sJ8m5GgxeJanP7wKNJ5sC+ySpGSxhizTLJC9agM1IEi
+UEHBDLIxvxGSvPzQ6XbXT7oh6W53mqa5S8g26kkgktN0Z3U7XcarL/dpNDn/v7c
nDjj/fK1bNMo54suOSrGV1L5bHgylgbWHefl6DrK8ohDnVCOnvvqqXdtawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOQnl4FxuJsnBh1bFPZZdIYXdsyMB8GA1UdIwQY
MBaAFC5n8+Thl3q+mMyyDKGvqFjx5mgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEt
ZTQ3OWM2YjlmZjJiLzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wNmJlOGYtYTI2NS00MjZhLWFhMGEtZTQ3OWM2YjlmZjJi
LzEvTG1mejVPR1hlcjZZekxJTW9hLW9XUEhtYUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlINTgBVg
rRDP2QdM+5V0ScGW5dxNmHtWgfPC7TNbsg+Z3IoA5PHYq6eWlMEX2qu6hTKknVpT
8Z7YpxuKIV2fSEkCZrXMeIgWHD0h96my2Wl4v/4Fr5lTrPIjQ2zV1QKQAVf8FCJR
RaMgRTrUx8HNLaWkPcUSW6xkjv0uATbZdjjtsvNSALH1gPWcJd4xWdmFaA5kzDZq
apLzlUhznjrtld0MlC0n+jQ3EWvizAdjCuvVONA/RfmveFaHwM+szUAlkv6Cfgbn
DvomUyoik9h0WN21T5FaxBQy1mOg0vEuO04uArX5BhAmFsNE69ZGETd3vwQRd3NC
V4Ij8o/EmSueUQ==
-----END CERTIFICATE-----
Generated at Sun May 26 08:23:24 2024 by rpki-client on console-fra.rpki-client.org