Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: pQRVvZ3xkA6A/AobeQscxRhWh0RcpLiqGznZ+4/WOeg=
Subject key identifier: D7:42:15:EC:F6:41:ED:20:3B:9D:38:F9:88:FC:1D:03:EF:34:A1:5E
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 0194BABB1809538E2323BB2C0FCA54355C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 05:00:11 +0000
Manifest this update: Fri 31 Jan 2025 05:00:11 +0000
Manifest next update: Sat 01 Feb 2025 05:00:11 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: r1YtkZiruWbT7Nm9VK8iZ5MnaLhBCgLmTkkR62ghVZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:18:09:53:8e:23:23:bb:2c:0f:ca:54:35:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Jan 31 05:00:11 2025 GMT
Not After : Feb 1 05:00:11 2025 GMT
Subject: CN=d74215ecf641ed203b9d38f988fc1d03ef34a15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:a2:8d:cb:43:7f:8b:34:09:a1:2a:50:c7:
4a:a1:bf:d7:9c:06:a0:74:11:80:92:cd:04:ae:d7:
2c:26:48:c7:63:96:64:ba:4c:95:2a:5a:af:18:a8:
3f:a8:e9:a9:0c:de:0c:85:4c:da:0b:8e:6c:0e:47:
42:f1:41:2d:4b:fd:76:cf:2e:85:33:b2:07:47:10:
a3:47:2f:e7:74:a4:99:2f:14:76:e1:fe:80:33:60:
88:b6:79:57:f1:36:a7:b8:f3:2e:8e:a3:45:0b:82:
d7:5d:8e:27:32:76:4f:94:05:ce:41:90:38:a3:07:
c6:74:1c:58:cd:aa:7f:51:0c:f1:39:a2:7b:db:68:
8d:4c:ee:bb:05:10:48:c2:f7:6d:b2:ca:1a:87:df:
ce:6d:d6:ad:01:dc:25:14:86:d4:44:65:d4:18:b7:
b5:b3:90:3a:e8:88:4a:82:6d:95:21:1b:95:b3:e0:
7e:49:f0:a0:1e:36:96:55:c5:68:7f:20:aa:99:dc:
cf:65:c6:7e:a6:b4:bc:fe:2e:ce:82:8d:9b:de:0b:
1a:6a:96:35:ed:8d:09:76:dd:84:83:a1:25:cc:61:
04:e6:bd:96:7f:d5:97:f1:ba:7d:20:cb:a2:9b:80:
44:62:f5:f0:9b:a3:ad:c7:f2:92:c7:23:4a:53:2b:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:15:EC:F6:41:ED:20:3B:9D:38:F9:88:FC:1D:03:EF:34:A1:5E
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ba:32:f6:82:0e:3e:4d:b2:94:6d:60:89:d3:d5:aa:9d:da:
36:3a:a0:84:4a:aa:94:5e:58:10:40:bc:3e:1d:03:ad:22:15:
8e:89:70:ea:33:76:54:41:ed:be:37:ab:0a:97:13:24:48:0b:
d0:c0:d3:e7:28:1f:d5:e4:04:6d:dd:30:e6:18:ae:65:87:ef:
a1:6a:2e:28:d3:86:c6:3e:f5:39:b4:8b:45:3d:37:80:4c:bc:
eb:28:1e:1c:46:3c:8f:01:b3:06:99:24:10:47:c1:af:88:ba:
43:35:d9:2d:01:5b:ad:34:b7:9c:06:4f:08:c9:02:24:49:37:
63:5b:9e:7f:33:a7:e3:28:d7:02:b8:35:01:53:a7:cd:0f:71:
93:1a:7a:52:d0:36:26:19:1b:81:54:a4:a2:ea:47:ba:d5:db:
1b:77:71:f0:ad:e0:43:bf:4e:79:e8:66:9a:b6:63:27:d0:93:
dc:00:11:27:62:91:37:dd:c2:17:01:ee:ab:4e:1c:bd:11:a0:
cc:df:f3:f6:88:b9:38:89:d1:c6:8c:1d:3c:09:a6:35:c2:9f:
06:4b:9f:d3:cd:9a:6f:e9:46:02:31:59:79:57:d2:d4:47:28:
d3:68:71:6d:5d:7c:f2:2e:31:2b:07:d6:16:ae:c0:bc:57:8b:
ff:8d:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:00 2025 by rpki-client on console-fra.rpki-client.org