Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: +xKFdkOuYVw2WNNbHaPmP+mFcLo/RBFLu+x+N89U/ac=
Subject key identifier: 51:9D:4C:B0:1B:78:4E:97:D0:B1:4A:51:E9:32:9B:DD:78:77:B8:B6
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 019511A2BFD3F8522AE48E264F9D27FC3304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0B4D
Signing time: Mon 17 Feb 2025 02:00:33 +0000
Manifest this update: Mon 17 Feb 2025 02:00:33 +0000
Manifest next update: Tue 18 Feb 2025 02:00:33 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: d9rpmzIK5GVZWp+6G5zo472/cmjT8MR6p/OaxQwKmfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:bf:d3:f8:52:2a:e4:8e:26:4f:9d:27:fc:33:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Feb 17 02:00:33 2025 GMT
Not After : Feb 18 02:00:33 2025 GMT
Subject: CN=519d4cb01b784e97d0b14a51e9329bdd7877b8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:83:42:35:8d:e2:70:fb:17:6e:93:cb:c7:
ef:93:3c:48:e7:a3:41:47:79:16:b1:2e:23:8d:a9:
b0:43:31:e9:87:aa:e0:df:f7:5e:11:f3:d1:39:26:
55:60:28:08:af:47:23:3f:b6:d6:66:65:ed:22:d7:
87:8f:2b:1e:68:79:b2:22:aa:52:bf:27:85:9a:91:
c8:cb:9f:7e:f6:e3:56:f6:43:0f:bd:43:7a:73:92:
8e:7d:6e:9e:07:72:27:b6:ff:aa:87:27:6f:39:70:
73:5a:fc:89:55:64:f9:5d:67:51:6d:2f:b7:6a:3b:
5c:da:13:7e:b8:32:71:5f:59:ed:80:f1:5e:10:be:
e5:e8:e3:79:ec:df:0a:1f:47:a8:c7:ab:ab:e0:88:
34:a1:bb:22:70:80:69:42:54:26:93:3e:a1:84:6a:
8e:b0:e7:e8:08:c8:b5:db:cc:67:7c:11:97:e6:d5:
37:6c:42:74:7d:dc:98:16:ca:29:14:c6:28:ff:e5:
cd:a1:00:dd:6d:e4:0f:29:df:33:fb:f4:87:f0:ba:
3d:0c:25:43:82:75:53:77:25:5f:93:53:a5:8a:42:
ae:84:dd:b1:37:92:92:b8:a8:7b:3b:06:fb:12:65:
63:7d:67:d5:04:49:00:15:b5:21:39:b3:0c:5b:cb:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:4C:B0:1B:78:4E:97:D0:B1:4A:51:E9:32:9B:DD:78:77:B8:B6
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7d:7e:62:fe:00:67:f3:0e:26:5d:45:30:aa:dd:ff:ee:71:
36:bc:b1:76:82:5f:22:f0:7e:02:df:6b:fb:6c:07:22:1a:5d:
eb:88:0d:8f:d4:ab:89:8a:27:2c:28:fb:00:7e:af:4a:09:07:
79:29:2c:64:39:94:f8:7a:1b:04:a5:ad:90:c8:1e:c6:01:08:
fb:fa:d8:fa:ba:c1:c8:ac:73:eb:25:79:eb:07:a3:9d:8f:2b:
45:ab:7a:0a:d0:fb:a2:57:29:d5:12:aa:47:38:22:f4:62:15:
06:02:e9:ca:b9:37:79:6d:e4:76:76:f8:9e:d7:93:59:49:bf:
8a:4a:b6:1c:16:1b:b0:2a:eb:d2:cf:a8:40:fd:6d:88:be:b1:
ca:aa:2f:a1:35:89:cf:c1:1d:72:bf:dc:ef:02:64:9c:74:67:
47:90:45:81:01:92:d8:75:5f:a9:d5:4c:6d:04:aa:c3:21:3d:
f9:59:ba:26:dd:fe:65:56:63:63:ff:3a:78:92:0d:9d:4d:8e:
20:d8:4e:0d:f0:c1:07:34:20:ef:87:ce:24:c5:b7:40:e3:8e:
d8:48:97:9e:7a:36:cf:5a:65:6b:f6:26:95:44:23:76:8e:8c:
4a:70:3a:a6:12:de:68:ea:05:b4:36:8f:fa:71:b1:82:64:0c:
f3:9f:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:30 2025 by rpki-client