Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier: GPbdZ/Lw59Hr5Brxda2fO6/f/R7sX5uogaSVqdqE4bY=
Subject key identifier: 79:1A:C7:82:F8:67:7E:F2:BE:C0:B2:E7:4F:4A:DB:57:0D:7C:7F:8C
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01951135173F8508EC328915DBA15C9EDAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:46 +0000
Manifest this update: Mon 17 Feb 2025 00:00:46 +0000
Manifest next update: Tue 18 Feb 2025 00:00:46 +0000
Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: En/SvT9HQuFXRTJLAc1vrZPgijKdSAurLd5BxH9/Y5E=)
7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:17:3f:85:08:ec:32:89:15:db:a1:5c:9e:da:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Feb 17 00:00:46 2025 GMT
Not After : Feb 18 00:00:46 2025 GMT
Subject: CN=791ac782f8677ef2bec0b2e74f4adb570d7c7f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:0e:9f:17:98:66:f4:f4:27:ae:51:6e:33:
29:56:3c:b2:45:d5:aa:18:d2:eb:78:ef:db:c1:b3:
21:7b:85:9e:2a:10:d7:69:56:ea:f6:7c:64:57:6a:
f0:62:44:12:e0:0e:c7:3b:2b:1d:86:c5:53:da:49:
ed:e7:16:cd:8e:a5:fd:55:48:8b:86:26:b9:c1:d4:
a5:cc:b2:69:14:c3:e2:1a:79:a0:ab:f0:f0:ab:d7:
65:ba:a2:c2:86:bb:93:b2:cc:60:69:af:03:58:c3:
01:f6:2b:6b:af:fd:70:ff:bf:0b:6f:0e:33:36:27:
13:a7:02:e7:82:4d:90:cd:0b:48:48:38:ac:a3:24:
d3:fc:de:d4:eb:60:d9:fb:b7:d1:e9:02:80:00:35:
f4:7f:a0:d1:30:56:7f:be:e4:dc:79:93:83:8d:99:
f2:2c:65:6c:ac:b1:a4:39:24:1e:e3:4f:0c:3d:56:
46:0a:68:48:80:ac:56:aa:09:0e:7f:31:9b:f5:a9:
1c:66:ce:a8:b7:7d:01:c8:58:73:ec:69:db:5d:c2:
13:90:fd:04:4f:2b:af:d0:e9:ac:a3:fd:fc:2e:4f:
e5:d4:54:c5:42:ff:69:3e:ff:53:85:ae:a0:0b:74:
8a:41:f6:35:a7:2e:f6:a4:b4:30:e6:c6:60:9a:9a:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1A:C7:82:F8:67:7E:F2:BE:C0:B2:E7:4F:4A:DB:57:0D:7C:7F:8C
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:14:ba:04:fd:58:0e:da:dd:53:14:4f:7a:8b:09:14:07:74:
e7:4f:8f:0e:9b:1e:79:23:51:38:57:6e:74:41:69:48:de:bb:
aa:53:72:7e:c9:1f:73:0b:6d:d0:17:fe:3e:ee:5b:81:3e:7e:
33:62:4c:2b:05:0f:eb:f9:28:0f:51:9e:09:fd:57:55:a2:75:
0a:7b:27:9d:2d:0b:57:83:06:37:e1:09:ae:e0:96:4c:5f:f1:
49:ba:b8:63:91:c3:a6:1e:99:5f:a9:f1:67:dc:a8:63:80:d0:
5e:ec:36:15:7a:d0:25:fd:ec:5f:18:43:44:c8:89:4e:e0:5a:
a9:f1:63:29:07:1b:a4:5b:83:1e:ac:d3:82:f0:7f:aa:f1:75:
92:5c:f2:c2:07:0c:c5:40:09:a5:bb:4d:68:df:1e:0d:b2:66:
48:ec:85:6d:46:dd:93:d7:b4:e3:36:a6:fe:cf:f4:b4:fa:17:
24:a1:c6:b1:e1:02:38:49:a9:c9:39:e0:a5:e0:b4:e0:02:8a:
81:27:7f:b1:30:96:b9:4d:25:40:6a:f6:b1:90:19:5c:10:a2:
da:81:b1:1d:00:58:29:69:e2:02:aa:c3:f0:15:5c:a0:c9:a1:
b8:34:82:97:2f:61:d1:a4:0e:35:48:16:d5:a9:da:f3:2b:61:
4b:b5:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:39 2025 by rpki-client