Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: ILb9NpdD+3wiP/tB9eB/Syhdt68JnzGXAETP+bM879k=
Subject key identifier: 9B:35:80:D6:09:95:4F:7E:BA:EE:E1:C8:3F:56:90:17:35:BF:15:35
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 019511A2877C161648B59B97E2360937270E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1011
Signing time: Mon 17 Feb 2025 02:00:18 +0000
Manifest this update: Mon 17 Feb 2025 02:00:18 +0000
Manifest next update: Tue 18 Feb 2025 02:00:18 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: 5/UOK+ebolBd1G0EJcD+dpNZcdyecewyboska0twyRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:87:7c:16:16:48:b5:9b:97:e2:36:09:37:27:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Feb 17 02:00:18 2025 GMT
Not After : Feb 18 02:00:18 2025 GMT
Subject: CN=9b3580d609954f7ebaeee1c83f56901735bf1535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:bb:0a:1e:6c:86:48:6a:bc:54:ed:be:89:
16:30:b4:9b:e1:de:8b:4d:a0:32:01:9f:4c:8d:21:
31:b3:0c:5e:75:c8:76:a6:93:4e:13:f6:9e:93:ba:
10:c5:68:d9:32:e0:fb:fe:c1:73:28:a1:9b:e4:16:
5a:fe:21:e3:dc:c4:51:72:81:5d:c8:90:45:f1:1d:
3a:95:ce:62:28:f7:5f:44:72:d6:55:48:b4:37:d7:
c3:8c:d8:36:80:70:b5:f8:79:dd:06:27:5c:24:6b:
1b:48:24:5a:23:50:32:d4:c2:23:a3:c6:4f:d2:e4:
4d:92:10:f2:37:5d:83:4d:1b:75:5e:48:26:88:d6:
07:99:e0:b1:e5:48:35:95:1e:97:1d:48:09:8a:64:
c3:13:d4:32:f7:a2:aa:36:2e:1c:db:4f:c2:1a:f8:
93:aa:9e:2d:c8:56:6e:72:2e:d4:d1:63:fa:ff:14:
dd:d2:d6:ad:66:7c:4b:a9:c4:8b:06:ea:2a:2b:03:
04:89:38:d1:15:9d:c0:ba:84:dc:7b:c4:8e:f3:b1:
bd:00:15:58:af:1e:88:de:27:b9:ba:36:d0:6f:21:
3a:62:06:98:e2:8f:93:d8:84:d4:91:2f:41:bf:57:
52:a6:1d:f5:ab:8e:68:21:bc:ee:fb:d6:45:41:bc:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:35:80:D6:09:95:4F:7E:BA:EE:E1:C8:3F:56:90:17:35:BF:15:35
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3c:58:85:d4:6c:c6:95:df:ca:07:ca:2d:72:20:b7:c4:5d:
fe:15:97:86:96:35:4d:a2:64:04:74:78:20:0e:0d:68:2d:34:
b3:fd:d8:35:aa:d5:d9:ed:1f:ce:ca:b4:0c:a2:3b:2b:7a:7b:
a5:6a:06:14:e6:fc:26:55:d2:5f:d1:90:7a:e6:86:d4:b2:90:
cc:2d:15:4e:11:2c:05:32:ce:8c:81:41:82:b8:02:ff:1a:64:
5f:d0:6a:ba:a3:3d:66:26:e0:58:56:a5:6a:1a:62:5f:fb:0c:
46:f9:42:bc:c5:4c:5f:8d:ba:4d:6c:73:94:0a:29:92:a2:22:
de:8b:70:fc:e5:82:46:65:7d:9e:83:38:dc:dd:2c:bb:82:50:
1c:05:ce:8f:cd:b3:da:97:f2:35:15:9d:16:2e:72:a9:08:f9:
fd:a9:18:c1:05:65:1c:3d:eb:a4:da:63:b0:42:b8:04:25:52:
5e:19:e5:76:62:9d:df:1a:55:72:fc:ed:b4:8f:3e:19:8a:ef:
57:b9:4e:98:c4:a1:e2:51:47:56:33:82:29:9b:75:20:67:ad:
09:59:bc:43:6c:76:49:4a:21:75:61:d2:52:bf:b7:8b:22:d5:
96:c3:2c:75:f6:5d:29:87:cf:69:02:77:d1:75:ae:ce:6b:34:
54:bf:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:04 2025 by rpki-client