Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: 2BkrfTsfPuVPwZ+Zlh9TGMybywOaTtrOB+xaXRMGqdY=
Subject key identifier: D5:ED:68:1D:74:6C:9E:4F:10:3E:74:62:EC:5D:17:19:7E:6C:C7:51
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 0193644475D4C96B9CA27BCB79C861622F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1380
Signing time: Mon 25 Nov 2024 17:00:28 +0000
Manifest this update: Mon 25 Nov 2024 17:00:28 +0000
Manifest next update: Tue 26 Nov 2024 17:00:28 +0000
Files and hashes: 1: AUb1vYvBnDoiPtrE9wWNcz5HMHs.roa (hash: 6A2BCC3xin+wszaQbl0u30gGqEonG/dNfp3sBRCOFfU=)
2: Azkxw0dzw66csnlmxyGLm6CG2Tk.roa (hash: 56QY0FBVrZL8q9K3OWM76jQ+WsoKNJJaXpC1KgcP6rE=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: wI5Lv+FJy1S00FrCWI0YqhbNdLB7dOEgdwzjPnOXy+c=)
4: vo8puqlaWL0K1N_HNafDLKK6SfU.roa (hash: amk/uLNQzQY4e9zIBLF7DR3Np13lKEFS01t1o36L2pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:44:75:d4:c9:6b:9c:a2:7b:cb:79:c8:61:62:2f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Nov 25 17:00:28 2024 GMT
Not After : Nov 26 17:00:28 2024 GMT
Subject: CN=d5ed681d746c9e4f103e7462ec5d17197e6cc751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:cb:45:3f:73:36:0e:88:a4:9a:e4:6e:e3:
c1:26:04:4c:2c:70:39:ff:65:29:16:a8:3f:79:1e:
fd:8a:b9:55:ec:ec:33:84:ac:23:e4:61:72:5a:d7:
e8:05:ec:82:93:bc:30:9c:2e:8e:fe:4d:b8:9a:76:
03:6c:73:7a:51:89:7e:23:d4:4b:5e:4a:c2:7c:d4:
6d:55:6c:09:2a:85:8c:6c:74:b4:c5:e6:33:19:85:
db:cc:78:ea:7a:8b:db:fc:c9:4f:d2:c5:ca:e6:37:
e6:40:b3:8c:1e:c9:1c:c8:49:21:c9:d9:06:07:42:
61:8d:45:ec:52:71:c0:86:15:8e:a9:a3:32:f9:1b:
78:6c:3a:8d:51:27:da:de:b5:8f:28:b2:d7:a3:ce:
4a:9a:c7:85:d4:bc:ea:81:3c:fe:57:f4:e0:e7:77:
d4:e4:2e:7b:95:00:9d:7f:a8:9c:d0:73:0a:13:30:
62:e7:80:81:41:2b:e6:3b:53:9e:af:86:06:b9:cb:
b8:ee:3c:80:d7:c5:76:11:c2:65:f1:d6:d9:ab:ba:
61:3e:08:a4:88:ea:b6:95:06:24:08:70:ef:2c:95:
28:b3:8b:9f:19:2e:2d:78:03:dd:87:8b:3a:5f:8d:
9c:79:7f:40:42:7b:a8:9e:70:42:50:90:cb:80:13:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:68:1D:74:6C:9E:4F:10:3E:74:62:EC:5D:17:19:7E:6C:C7:51
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e1:bb:ab:4f:16:04:fb:6e:d7:7b:e0:45:37:61:4e:35:1a:
37:65:39:d5:41:da:b7:58:c9:76:30:78:53:45:66:12:a0:89:
85:22:da:f1:0f:bf:f7:e2:a4:eb:88:df:fc:c7:b9:eb:f9:7d:
18:d6:5d:41:39:2c:73:e4:16:94:9b:87:e6:6b:24:19:c8:ff:
74:ba:8d:3d:2d:bb:09:65:41:96:89:05:d7:52:9b:d4:18:4b:
9a:83:fe:f3:f5:47:51:b1:cf:57:5a:ab:40:b0:9b:b7:b4:8b:
8a:cf:b8:2e:10:87:81:2c:e9:d3:26:23:6e:9d:9f:3b:0b:67:
13:6c:02:9b:c9:4a:21:dc:20:1c:41:53:f9:ff:f8:e2:18:c0:
d8:b3:cc:2a:75:12:3a:d6:78:9d:e0:46:89:2c:83:9a:92:4b:
9e:bf:23:56:1e:a8:87:61:64:bd:95:3c:e9:66:e5:ea:8f:14:
d8:74:b7:3a:a1:8e:49:1d:36:ed:27:01:b3:50:ce:92:a0:5e:
9e:32:63:8d:3c:c2:36:b2:5d:3d:e2:9e:77:a9:0f:fa:e1:7c:
22:67:cc:a6:cb:48:4a:4c:69:f3:7e:c9:12:2d:bb:b6:c2:ae:
22:cd:86:56:65:10:1a:00:a6:78:08:e2:e5:63:21:5d:cb:0c:
81:42:49:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkRHXUyWuconvLechhYi+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk
MjYxYzkwHhcNMjQxMTI1MTcwMDI4WhcNMjQxMTI2MTcwMDI4WjAzMTEwLwYDVQQD
EyhkNWVkNjgxZDc0NmM5ZTRmMTAzZTc0NjJlYzVkMTcxOTdlNmNjNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KbLRT9zNg6IpJrkbuPBJgRMLHA5
/2UpFqg/eR79irlV7OwzhKwj5GFyWtfoBeyCk7wwnC6O/k24mnYDbHN6UYl+I9RL
XkrCfNRtVWwJKoWMbHS0xeYzGYXbzHjqeovb/MlP0sXK5jfmQLOMHskcyEkhydkG
B0JhjUXsUnHAhhWOqaMy+Rt4bDqNUSfa3rWPKLLXo85KmseF1LzqgTz+V/Tg53fU
5C57lQCdf6ic0HMKEzBi54CBQSvmO1Oer4YGucu47jyA18V2EcJl8dbZq7phPgik
iOq2lQYkCHDvLJUos4ufGS4teAPdh4s6X42ceX9AQnuonnBCUJDLgBMJzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXtaB10bJ5PED50YuxdFxl+bMdRMB8GA1UdIwQY
MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt
MmE2MzcyZTA1NGQyLzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy
LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOG7q08W
BPtu13vgRTdhTjUaN2U51UHat1jJdjB4U0VmEqCJhSLa8Q+/9+Kk64jf/Me56/l9
GNZdQTksc+QWlJuH5mskGcj/dLqNPS27CWVBlokF11Kb1BhLmoP+8/VHUbHPV1qr
QLCbt7SLis+4LhCHgSzp0yYjbp2fOwtnE2wCm8lKIdwgHEFT+f/44hjA2LPMKnUS
OtZ4neBGiSyDmpJLnr8jVh6oh2FkvZU86Wbl6o8U2HS3OqGOSR027ScBs1DOkqBe
njJjjTzCNrJdPeKed6kP+uF8ImfMpstISkxp837JEi27tsKuIs2GVmUQGgCmeAji
5WMhXcsMgUJJNQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:31:31 2024 by rpki-client on console-fra.rpki-client.org