Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: VsWQ3V3JsiDS7w+7HEDBvW3/SIPo+/xIYcskJdDHMMs=
Subject key identifier: 2D:E8:2F:9C:83:C1:F7:8D:81:62:BD:41:8A:5F:F2:FA:32:12:1A:B4
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 018F866CAA2664598F77EB4E40E2489BC40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 12:00:19 +0000
Manifest this update: Fri 17 May 2024 12:00:19 +0000
Manifest next update: Sat 18 May 2024 12:00:19 +0000
Files and hashes: 1: L0CUjuF1aGVClAO2_nhsJcCy-6Y.roa (hash: zewS1FtW6lbA4f6HMfpZt7dDe3hkmmHfj5TveLv2TTU=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: 9OHI4qFSKvItbHQFyEFJu+/hVQbWn3pDFUAluC/GF9s=)
3: xU3rw0yRnalbfvke4mjkbJamhbU.roa (hash: LmGB/JMNe4NJFNXJLCj1qMLDg8gQNBPgir95sVQ01w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:6c:aa:26:64:59:8f:77:eb:4e:40:e2:48:9b:c4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: May 17 12:00:19 2024 GMT
Not After : May 18 12:00:19 2024 GMT
Subject: CN=2de82f9c83c1f78d8162bd418a5ff2fa32121ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:e7:de:05:2c:b8:33:60:60:22:7e:b6:6d:
fb:69:ab:cc:4f:2d:72:54:d2:c2:2e:bc:a7:5d:1a:
f1:93:08:ca:57:6f:6d:d7:cb:8e:44:5d:be:02:11:
e8:0e:59:c9:10:8a:52:95:65:0e:f7:72:30:15:a1:
e9:74:12:89:24:a9:76:0d:b0:ea:1e:46:5e:35:b9:
22:4c:ac:10:10:a9:be:48:27:2f:55:c0:3d:2e:b6:
63:76:13:e5:94:88:6f:2c:40:71:85:9a:79:15:ea:
37:e1:d0:c7:e2:11:85:f3:f5:3e:fe:99:4d:a6:b2:
8e:a5:92:27:1e:d0:db:c1:93:d5:43:cc:74:c4:97:
a6:50:9e:2f:cf:42:35:17:46:5c:4d:2c:05:64:d7:
e8:20:17:50:8f:83:5b:4b:cc:a4:29:d1:59:76:3f:
29:90:3e:40:63:e6:ad:8d:1f:18:65:59:f3:27:5a:
16:29:aa:16:c2:31:4d:4e:a6:88:fc:9f:87:ad:f6:
67:45:1e:cc:5f:26:05:f5:18:53:07:0a:01:ef:f1:
04:60:b2:5f:f6:72:1b:a8:fd:ab:ec:78:b9:89:35:
6f:43:dc:3a:8b:23:9f:d7:cd:0c:87:0d:71:b9:1f:
c8:e2:89:b5:66:40:7e:25:2d:f2:a3:4c:d9:0e:31:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E8:2F:9C:83:C1:F7:8D:81:62:BD:41:8A:5F:F2:FA:32:12:1A:B4
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:be:f4:d3:27:70:7f:fc:80:d2:29:ca:de:fa:58:56:a5:14:
9d:66:95:37:74:7a:6d:cd:3f:60:e6:8e:e1:ca:f8:b1:dc:3e:
1c:2e:ba:0f:7b:9a:ef:34:5f:44:4f:4c:ea:e8:a0:44:69:f2:
8d:48:27:e8:3c:61:22:f3:5e:c5:92:2a:bc:ff:10:a4:6e:4f:
34:20:7e:af:27:55:7a:f4:c2:1e:4b:37:48:ec:d1:78:67:c2:
3f:d2:1c:28:a1:dd:6f:cb:e9:f2:52:59:18:03:b8:fe:17:06:
a7:13:02:10:68:c0:40:da:cd:0d:e6:8f:0b:54:f0:6e:5c:72:
a7:94:48:fd:73:de:04:8a:50:a8:6d:20:d1:9c:80:f7:06:6b:
e7:c5:fe:ea:4d:6d:52:ef:ac:c7:6e:54:cc:74:54:a1:8d:48:
90:d2:fe:29:a0:30:14:09:9c:78:e7:3b:9b:fb:c7:f4:b8:47:
d8:27:b9:61:15:57:81:a4:6f:ad:34:09:9f:7b:23:7d:bd:20:
50:a2:89:9a:6a:48:3d:44:cc:eb:94:33:aa:5b:08:72:97:4c:
d8:dd:4a:2a:71:31:e4:87:80:cf:ed:9c:7e:f4:64:ce:e7:a2:
65:c5:42:0e:bc:68:63:23:96:4b:bd:7a:30:c1:59:62:6d:75:
76:0c:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:52 2024 by rpki-client on console-ams.rpki-client.org