Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: EIUR1AsorCJN6lNUzTErjmwNRS7gxCPysaBteUxB8m0=
Subject key identifier: B9:3C:57:91:C8:3C:6C:7B:13:EA:9C:79:1A:53:BC:F9:2B:88:60:82
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 019511A3007A14131713ED2001E9A8966EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:49 +0000
Manifest this update: Mon 17 Feb 2025 02:00:49 +0000
Manifest next update: Tue 18 Feb 2025 02:00:49 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: q5KHQIk/Skz5rpy9WiT+Q1u7L5s488iMFEbER/eBJ6U=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:00:7a:14:13:17:13:ed:20:01:e9:a8:96:6e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Feb 17 02:00:49 2025 GMT
Not After : Feb 18 02:00:49 2025 GMT
Subject: CN=b93c5791c83c6c7b13ea9c791a53bcf92b886082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:64:a2:d0:7f:67:ff:32:90:c4:2b:ff:a2:
86:f0:d4:6b:3a:a1:ba:f5:e7:5e:ea:4a:b4:2b:62:
a3:6f:e7:86:74:a2:7c:07:1b:f0:86:a2:0d:01:b4:
06:b4:c1:c1:5c:21:66:7b:9d:60:72:9c:a5:e9:99:
25:5e:10:47:0c:0d:36:73:0d:68:27:3a:ab:b0:b6:
0a:c6:ed:27:8f:e1:b6:36:0d:5c:e9:93:87:5a:6a:
73:23:40:fa:69:ed:19:4d:48:a4:8f:15:c2:6b:b8:
b3:f4:86:6b:7f:39:4a:0e:db:86:48:5e:de:95:06:
85:d2:94:e3:cc:e5:54:7f:a9:b2:a7:1c:4c:39:2c:
5b:6c:4e:43:d1:08:3d:f9:1e:d3:65:c5:79:1b:04:
cf:6d:28:c2:f5:94:de:33:ac:1d:df:0c:b6:23:d2:
75:1a:29:20:8d:b7:37:1e:88:b5:c5:c3:45:3e:0e:
a7:77:d1:9f:ae:cb:e4:69:fe:b1:25:67:20:c8:a3:
ce:e0:dc:38:2c:6e:0b:a2:4d:eb:47:ac:a1:cb:24:
7c:8e:e5:f6:ca:ab:dd:43:04:77:55:68:9b:ec:ee:
3d:bf:98:6e:df:db:e3:08:0d:cb:d7:7a:f5:eb:a6:
60:19:85:f2:98:68:9b:ba:fc:c8:fd:13:d8:03:71:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:57:91:C8:3C:6C:7B:13:EA:9C:79:1A:53:BC:F9:2B:88:60:82
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:82:38:de:1e:4f:fd:ff:dc:e5:df:83:55:ec:57:a8:f8:ff:
ab:da:26:5f:a5:32:7f:b7:8c:ff:91:0c:13:d9:09:af:93:2b:
9a:7d:bf:59:f0:82:08:9b:29:79:31:96:50:c0:0b:31:4f:48:
58:12:63:fa:e0:aa:4d:0b:df:a6:31:8f:2e:3e:ce:95:cc:8f:
2e:fc:a8:f6:7b:4a:79:a4:51:04:5a:83:40:fd:85:0e:4a:14:
38:f0:07:b5:9f:c6:fa:79:98:a4:27:db:a5:24:79:40:23:11:
f9:a6:50:7e:da:e7:32:1a:6e:61:2a:8a:19:8f:f5:41:5b:08:
bd:c4:0f:fa:a0:c0:a8:fb:70:9f:ca:73:ce:db:90:d2:47:ba:
ed:da:9f:b3:1a:c8:ef:2d:83:34:c0:2f:ba:68:61:cb:9b:f1:
c0:40:7f:7e:da:d2:8a:64:f4:54:71:8b:2d:35:6e:e8:11:bb:
14:8f:6c:4d:03:cc:ac:86:d8:1c:4e:a2:1e:e2:3d:2a:71:fb:
a1:1a:27:d8:82:0a:d9:11:ee:ef:d5:a2:6a:14:a5:9b:10:61:
1e:8f:d7:d3:35:66:9e:73:c9:70:8e:79:f8:9c:00:6b:be:c2:
ae:1d:d4:74:50:bc:c1:2f:0a:f0:b2:c2:8f:d9:de:a4:74:db:
97:3e:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:33 2025 by rpki-client