Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
File: LiM0uQviK2Ggyoc_AQd06ONWGRY.mft (raw, json)
Hash identifier: GFNaaOsYIwrqgjIXvfPzyTIPPLh59HKVal2Ga330PQc=
Subject key identifier: D0:D9:36:98:2D:95:F3:7E:E6:7B:CA:E8:01:9C:03:3F:53:43:A8:22
Authority key identifier: 2E:23:34:B9:0B:E2:2B:61:A0:CA:87:3F:01:07:74:E8:E3:56:19:16
Certificate issuer: /CN=2e2334b90be22b61a0ca873f010774e8e3561916
Certificate serial: 0194C3F55A5C7C94B64150602D483CC0525F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiM0uQviK2Ggyoc_AQd06ONWGRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
Manifest number: 084E
Signing time: Sun 02 Feb 2025 00:00:24 +0000
Manifest this update: Sun 02 Feb 2025 00:00:24 +0000
Manifest next update: Mon 03 Feb 2025 00:00:24 +0000
Files and hashes: 1: LiM0uQviK2Ggyoc_AQd06ONWGRY.crl (hash: GG4t0zo6vEhExPQg4v6G8VT2B68MSmvUvxbt+yHUk9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiM0uQviK2Ggyoc_AQd06ONWGRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:5a:5c:7c:94:b6:41:50:60:2d:48:3c:c0:52:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2334b90be22b61a0ca873f010774e8e3561916
Validity
Not Before: Feb 2 00:00:24 2025 GMT
Not After : Feb 3 00:00:24 2025 GMT
Subject: CN=d0d936982d95f37ee67bcae8019c033f5343a822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:55:f4:6d:2a:c5:b6:c9:63:40:b6:5f:6f:
89:bc:23:4c:43:c3:c7:f1:f8:7b:68:e5:c2:02:4f:
17:8c:30:77:96:3d:93:9b:87:de:6e:2f:83:87:c8:
70:8f:6e:18:ac:20:7d:39:cb:94:2e:0b:33:3e:6c:
b2:09:ea:cd:00:8d:e2:77:4c:66:2a:4e:e5:42:1c:
5c:ff:d8:d6:06:a2:44:16:75:a9:12:aa:91:bd:51:
88:b2:89:78:36:43:f3:b9:88:30:b6:2d:97:68:fc:
c3:88:74:0a:2b:3b:17:26:4a:2f:0e:1d:bf:48:9f:
b7:e3:0c:a6:20:44:db:d8:7b:25:59:1d:e7:14:cf:
42:41:de:e9:db:d6:07:79:49:cf:6f:da:86:c0:04:
de:8a:de:fd:bf:9d:4b:ac:7e:3a:a6:4d:0d:1a:ee:
f5:60:c4:21:1b:29:54:33:5e:52:96:f3:d2:0a:f5:
03:56:4e:8a:8b:5c:1f:c1:e8:11:dd:23:0b:3b:e8:
bc:07:1c:01:f2:63:80:6e:68:00:a5:8d:76:18:ca:
77:4c:b7:06:bf:eb:96:30:8b:16:8f:6f:77:68:b6:
fe:2d:4e:5e:0a:dd:12:df:5f:80:44:6f:4a:52:60:
5b:db:75:26:b8:96:03:8d:43:a1:90:72:08:4a:aa:
27:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D9:36:98:2D:95:F3:7E:E6:7B:CA:E8:01:9C:03:3F:53:43:A8:22
X509v3 Authority Key Identifier:
keyid:2E:23:34:B9:0B:E2:2B:61:A0:CA:87:3F:01:07:74:E8:E3:56:19:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiM0uQviK2Ggyoc_AQd06ONWGRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a5:cf:a7:cf:74:a1:9a:2c:dd:23:f4:5b:af:c1:4d:94:dd:
3c:e9:5a:96:fe:70:5d:b6:36:07:e1:62:fd:dc:d6:7f:1e:d0:
28:91:eb:c9:cc:fd:2b:56:78:c9:09:44:b7:30:b2:e3:c2:f0:
48:9f:40:ac:d8:74:5a:8b:fc:e4:b4:c2:4c:fc:fe:87:84:f2:
a8:d1:02:42:a7:6a:d8:74:ea:f7:d2:56:b1:67:1a:bf:61:b8:
1f:e1:17:0b:bd:55:5c:89:68:1c:c2:54:39:e4:f3:f7:e7:c4:
58:81:cb:7c:20:41:50:24:4a:92:2d:92:da:ee:08:ef:b6:2f:
ca:ec:a5:d0:17:4a:37:32:dd:c7:d0:c3:c0:18:d9:8d:3a:ed:
8d:aa:a5:00:1b:9c:a3:97:f7:b9:ac:d2:9e:01:b4:b4:81:e9:
a3:45:ec:45:23:c1:c3:b7:aa:2b:4a:db:d6:ef:61:2a:e2:6c:
d3:79:30:83:40:bd:8d:b4:dd:16:ab:00:de:bf:39:ce:ee:b1:
f4:f3:6f:c4:a6:1e:45:38:c0:d0:c5:25:94:82:72:1a:61:9a:
07:6c:c4:54:b1:11:71:a2:f5:f5:88:17:d8:ba:45:84:df:b5:
53:b4:33:a3:d3:07:d8:75:16:35:6f:9f:53:c5:70:20:d8:a9:
e1:4d:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:29 2025 by rpki-client