Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: v5pnqr0t0YlVADrjC9pC8NimBmzbFdlUXSTAw7QqYZ4=
Subject key identifier: A7:4F:AD:3B:52:1F:62:DF:4C:6E:8A:B5:0F:40:9D:22:F2:A8:E7:1D
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 019368C5E3FFC8364EA6C2CA010D9236016C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 0428
Signing time: Tue 26 Nov 2024 14:00:19 +0000
Manifest this update: Tue 26 Nov 2024 14:00:19 +0000
Manifest next update: Wed 27 Nov 2024 14:00:19 +0000
Files and hashes: 1: T0Bv2pW93Mp_YLMNRvJf2DGA2_g.roa (hash: 1x3QRoS/B2y3v2T/IK813WigskHWOsnWtPLgEq1DsAQ=)
2: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: MWWVPdU+etc/H3dlwdNJGbLaesabqeCDEVFN9fy+v/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c5:e3:ff:c8:36:4e:a6:c2:ca:01:0d:92:36:01:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Nov 26 14:00:19 2024 GMT
Not After : Nov 27 14:00:19 2024 GMT
Subject: CN=a74fad3b521f62df4c6e8ab50f409d22f2a8e71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:d3:8a:3f:25:90:4b:f3:98:a2:1a:98:4b:
ad:6f:63:bc:67:10:dd:d3:98:87:41:9e:76:a6:80:
03:13:c8:aa:f4:5e:10:13:e8:c2:c3:a6:2b:8a:65:
1e:e4:01:a4:76:e5:cd:f9:1c:2b:6d:ae:46:4e:93:
52:ce:6b:46:e0:81:8e:56:4c:2b:21:a0:68:2b:d5:
07:4d:95:fe:84:06:22:95:65:00:19:1a:71:02:9a:
c0:55:4b:32:a2:59:c8:4f:ae:c8:ea:01:ac:9a:09:
32:f1:90:67:2e:ab:e0:0d:aa:02:18:31:1b:8f:9a:
eb:e5:28:53:e5:ce:98:00:6a:89:aa:ed:38:e4:75:
5c:e0:1d:10:97:30:d9:94:e2:90:db:b6:60:89:24:
8f:c2:42:38:63:8b:5a:51:fb:89:1f:36:80:4c:e0:
32:e9:7a:c7:51:14:b5:53:c0:2d:ff:99:3f:12:41:
15:b0:de:15:12:eb:15:d4:44:75:8f:f6:7a:6b:0c:
80:d2:6e:01:62:17:32:18:6a:52:28:81:b7:52:c8:
31:80:e1:f5:b1:99:a2:a7:a9:86:bb:f0:86:54:91:
c1:c3:f5:66:51:ff:a8:d0:0c:2d:34:74:81:4a:d4:
1b:34:73:76:80:c7:c9:a0:cd:ee:8b:d2:c1:07:53:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4F:AD:3B:52:1F:62:DF:4C:6E:8A:B5:0F:40:9D:22:F2:A8:E7:1D
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a3:38:9b:cb:6f:43:4a:e8:8f:e6:85:e0:22:89:c5:ea:b5:
8e:71:83:40:18:4e:20:18:57:d6:7f:b8:e4:a1:6b:df:dd:75:
04:63:52:5e:f3:aa:da:77:3d:bf:91:8f:b5:d5:f8:83:3d:08:
be:1e:2d:ff:8b:ab:d1:33:a5:3b:23:77:87:9f:d1:b0:44:23:
2b:5f:92:42:e9:5a:f5:45:0d:b8:84:bf:da:bb:7f:98:51:33:
bf:27:d6:bf:d3:1e:36:54:fe:49:de:42:48:16:0a:d5:81:1d:
90:72:4b:eb:47:ff:0c:de:cf:33:76:67:2f:eb:99:8d:f7:61:
07:59:92:0e:68:08:2b:5b:77:81:bd:7b:bc:73:21:a4:b1:54:
ac:c4:48:6e:fc:67:13:f5:0e:7d:64:86:f8:47:4a:7f:c3:36:
23:c7:80:48:a0:82:3f:8b:05:df:a4:f6:97:60:a1:62:c7:bd:
f1:56:db:7e:e1:63:8f:9d:e8:97:50:3d:b9:6e:e6:d9:df:ce:
76:71:78:56:e8:ac:07:24:3c:a0:81:30:69:6e:ad:b5:fb:43:
8e:35:31:29:35:bb:bb:a4:56:5b:d5:5e:d9:08:0f:2b:25:2e:
84:49:c6:52:4a:97:84:5a:0b:26:ac:e6:1e:c4:a7:b9:5a:b7:
36:e0:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:21:54 2024 by rpki-client on console-fra.rpki-client.org