Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: 0quQRfrupMKpdz2t0G4KbpFanD21cxmbEBeK0rNXlPM=
Subject key identifier: EA:87:A0:09:7F:E3:45:F3:FA:DC:DA:1C:6B:7D:25:D4:10:E6:16:27
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 0195113568EBA0ACF92A5A49C79361D99981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 1164
Signing time: Mon 17 Feb 2025 00:01:07 +0000
Manifest this update: Mon 17 Feb 2025 00:01:07 +0000
Manifest next update: Tue 18 Feb 2025 00:01:07 +0000
Files and hashes: 1: 54SDy2hBAf60rRk7Cn2SENdLnF0.roa (hash: W4T7JvYJiD5Kubx3/xyHkSB0zOGjx+2ez3Dgx71rGrg=)
2: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: 5puBrhxcnLkpXLLvrZGxunJa1pCTfc2oqU06e8Bda2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:68:eb:a0:ac:f9:2a:5a:49:c7:93:61:d9:99:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Feb 17 00:01:07 2025 GMT
Not After : Feb 18 00:01:07 2025 GMT
Subject: CN=ea87a0097fe345f3fadcda1c6b7d25d410e61627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:c7:a9:f1:7a:48:e6:fe:71:2a:ad:13:0e:
43:e3:8c:9d:eb:fa:fb:14:15:22:fd:fb:ac:f3:7f:
46:ba:4c:7e:6d:2f:53:e0:24:f6:b9:8d:eb:62:31:
59:6f:fc:63:5d:02:49:48:c3:eb:61:78:2b:6e:9a:
02:d9:cf:8e:1a:76:cc:2d:d9:23:50:0c:e8:6f:1c:
89:ca:ee:bf:90:bc:eb:fc:47:87:bb:32:05:fb:4f:
cd:fd:32:c6:85:68:ad:2b:11:c7:c1:67:f3:78:b1:
d1:e3:63:2d:f4:3d:08:ac:95:cb:95:fa:f3:97:11:
cb:7f:17:64:e3:2d:eb:a4:32:ae:ad:cd:5d:61:9a:
37:a0:45:bf:14:da:81:87:1c:f0:df:22:8c:14:6a:
27:0b:50:1a:ac:10:e6:86:80:b1:ce:03:79:7b:7b:
c5:f9:60:12:c0:be:f8:c3:52:e9:ee:ce:27:4f:1d:
c5:ed:cb:00:27:36:ba:1e:cf:13:8e:b6:61:6a:8c:
7d:d7:15:91:e4:53:6d:43:0f:34:dc:4a:c2:31:4d:
0b:8b:8f:0a:ae:5d:37:88:8e:59:f4:03:75:13:f8:
93:59:25:36:e0:74:a2:9f:39:33:ac:ea:73:a4:ce:
45:37:a5:dc:c9:ca:17:a9:ba:11:93:47:e5:98:49:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:87:A0:09:7F:E3:45:F3:FA:DC:DA:1C:6B:7D:25:D4:10:E6:16:27
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bd:7e:c1:ff:7a:bb:c2:34:7c:5e:58:66:0c:95:33:ef:22:
12:48:f3:ce:fc:05:09:c4:4d:e4:48:86:50:ac:0e:d7:38:7e:
e7:af:86:e5:70:5e:8e:50:5f:6b:d3:b4:51:01:8d:49:1b:a4:
28:d8:fd:2e:91:88:c9:75:21:87:ec:76:9a:a3:88:3d:9f:a9:
9f:c4:59:6c:f3:5e:22:83:c3:51:ba:97:e9:ed:6b:06:4c:10:
a1:27:0f:9e:ae:c0:2f:70:3c:18:e5:b8:e5:0c:ab:2d:91:ae:
12:d8:b1:0f:e3:2d:64:e5:eb:bb:c2:ad:0b:2d:e0:6b:43:13:
41:9b:4c:05:04:49:15:bf:e2:ce:5c:1d:4a:cd:58:8f:91:d0:
b6:88:77:3a:51:85:a4:2a:44:9a:bd:fc:a6:c3:49:60:2b:ec:
32:e4:c1:29:38:b6:d4:8f:f2:8b:4b:07:ac:5f:18:b7:20:83:
40:ca:3e:c1:5c:1b:3b:b0:cb:a7:8e:14:a9:d2:db:01:8f:17:
f0:47:b9:41:28:44:0b:33:25:2a:17:6c:84:cf:56:b7:30:51:
a5:44:80:34:d5:42:82:94:4f:ac:17:0c:80:74:0d:43:2e:3b:
8e:a7:43:0d:67:b8:18:63:03:6a:13:d2:1f:f8:c8:ae:85:63:
0b:87:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:04 2025 by rpki-client