Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: 4IE8u98WqKL31yMQyLDuhfGlhyy5GbVdEHh7Gb9VxA8=
Subject key identifier: 70:74:24:60:06:26:C7:CC:D4:24:6A:3E:1D:6D:85:BD:CE:D8:73:9E
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 019511A26D8D8D12CEE57FCD546B8E632818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 02:00:12 +0000
Manifest this update: Mon 17 Feb 2025 02:00:12 +0000
Manifest next update: Tue 18 Feb 2025 02:00:12 +0000
Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: sP6ZVqOo+QZOVKjSa9xDYa0daKzsnpimB1RQROKH4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:6d:8d:8d:12:ce:e5:7f:cd:54:6b:8e:63:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Feb 17 02:00:12 2025 GMT
Not After : Feb 18 02:00:12 2025 GMT
Subject: CN=707424600626c7ccd4246a3e1d6d85bdced8739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:ed:1b:58:0e:3d:38:d8:c5:24:0e:a6:c6:
fd:3e:16:ce:c8:31:74:29:7d:fb:2b:27:a8:f5:6f:
77:c8:ec:df:c9:18:cd:c5:7a:e3:0b:b6:2d:01:5f:
e8:f8:0d:60:da:58:b3:61:ff:f7:e2:de:74:aa:c2:
be:d3:1f:97:b8:32:19:03:a5:78:c4:99:b0:36:53:
91:ce:2e:59:b4:0a:93:59:a6:1c:cb:6a:87:59:16:
35:31:fb:1f:83:5b:a1:19:42:9f:34:96:a4:95:9c:
0c:22:25:82:06:07:a0:a4:6b:c7:82:34:43:16:9b:
c1:a3:86:32:31:f5:49:7a:7b:c5:7f:5a:30:45:29:
a4:5b:02:40:92:21:30:0c:f9:80:c0:e8:0a:c1:4e:
c5:70:da:f0:e3:e8:1e:c0:0b:d0:42:d9:ea:de:39:
d5:f6:db:fa:3a:98:0b:01:f2:a9:07:5e:d7:b8:5d:
b5:f7:c1:63:22:bf:61:05:37:cf:94:a8:0f:9d:17:
d7:e0:91:7f:ba:2e:61:f4:a1:d9:74:5b:0d:1c:bb:
d0:0f:86:1a:6c:9c:44:b5:09:04:60:8b:fe:89:c6:
c1:a2:62:14:6c:bb:df:ed:8a:d6:b8:5d:d9:2c:59:
79:be:27:aa:1e:31:45:09:6e:d2:e0:5a:ab:80:05:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:24:60:06:26:C7:CC:D4:24:6A:3E:1D:6D:85:BD:CE:D8:73:9E
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:16:20:41:55:e5:2a:ae:94:85:b9:55:3b:70:9e:d4:03:51:
9b:3c:44:d3:19:16:35:f0:2a:f1:91:a3:d0:f5:34:ba:2d:6b:
c9:0a:63:65:fb:37:be:40:0a:34:ef:b6:bf:7e:c5:26:ea:3a:
a9:38:82:3f:06:1b:8d:2a:cb:60:9c:7f:c5:6c:4f:fc:b3:dd:
63:e0:84:7d:79:57:1f:0f:64:48:d0:ac:e5:f5:12:58:d5:3b:
3f:ff:6d:ac:1c:97:ad:e7:68:95:ce:12:ec:76:d3:15:72:86:
ed:52:74:f9:7e:e4:45:29:76:2e:8d:56:3b:05:0d:ad:a2:31:
25:3e:82:27:82:05:42:a0:ce:a6:64:a3:8a:16:e0:2e:65:c4:
9d:0c:57:ba:4c:6f:75:cb:dc:4d:53:1c:44:6d:19:d2:3a:bf:
f3:10:5f:f4:cd:a7:02:44:fc:6b:a6:de:1a:2d:83:fb:cf:8c:
3f:25:03:04:e5:38:08:e2:66:d6:99:05:99:c8:f2:83:36:05:
24:e8:ac:56:7d:aa:d6:3f:4f:cf:78:2f:46:e1:67:45:83:ef:
04:cd:1e:1a:9e:6f:f8:73:fb:e4:fe:3e:e4:81:31:14:80:17:
50:1e:f9:ae:e0:cd:ab:a2:e9:fd:20:04:26:15:c3:f7:ed:95:
87:b1:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:16 2025 by rpki-client