Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json)
Hash identifier: 72LhWNEqpKWFLe1/hLCSDY9BJrLXNKaDC6A81Hp6px4=
Subject key identifier: A6:1F:7A:E6:4E:3B:81:B2:56:DB:AD:B5:65:2A:1E:7E:80:F3:39:75
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 018F93F142C42194FF82694EC0CBE48E8905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
Manifest number: 0967
Signing time: Mon 20 May 2024 03:00:13 +0000
Manifest this update: Mon 20 May 2024 03:00:13 +0000
Manifest next update: Tue 21 May 2024 03:00:13 +0000
Files and hashes: 1: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: 6BQQ1sgTCmXjok83hjBWYvryayJbLKijeKXTOESB844=)
2: m21UJ5TcR8SSRsgV3UXlQHQZ4eo.roa (hash: iwrjWiIHYOOpfPj1i/12XHLaKPt7c0IBsxWRXkAewa4=)
3: snrds9K052XRLwC3njP7KQcgIdw.roa (hash: kZEmBRYnlEOqPAKQ5NJuUL9XvJrKOuQyct1n7NY8VeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:93:f1:42:c4:21:94:ff:82:69:4e:c0:cb:e4:8e:89:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: May 20 03:00:13 2024 GMT
Not After : May 21 03:00:13 2024 GMT
Subject: CN=a61f7ae64e3b81b256dbadb5652a1e7e80f33975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:8c:28:71:eb:4f:2d:36:64:92:09:70:b6:
2f:94:f6:ba:aa:b5:da:20:e5:28:b3:62:fd:57:1a:
4e:40:c9:11:46:19:dd:c2:f8:f9:6d:c1:33:64:63:
e7:80:d9:e3:7b:cf:5a:35:ad:2b:8c:67:33:9c:bf:
36:12:b1:43:9b:fd:05:59:bc:b6:e4:1d:de:f2:38:
09:3b:fb:ac:c9:39:18:94:a7:ac:fc:94:c3:ab:04:
bb:33:7a:be:89:d4:3b:88:89:61:15:05:34:68:b8:
c0:d0:28:43:8d:bb:70:6a:34:0d:24:e9:7e:9d:85:
df:5b:0d:c9:da:ea:0a:27:8f:01:c6:40:3b:0e:f2:
a9:a0:93:52:31:74:a2:1a:09:4b:d2:89:00:47:37:
90:2f:54:90:53:2d:68:0b:c0:79:db:65:d1:78:99:
e2:da:bf:21:85:1f:ea:70:c6:27:29:d2:4d:e1:6f:
39:be:d8:19:c8:0a:fc:2a:d4:6e:df:ae:79:5e:7f:
ee:13:72:3b:ca:af:ef:31:64:42:2a:3f:cb:06:d4:
89:5c:80:7b:f2:64:c6:7a:ca:63:57:4a:be:06:dd:
02:44:b7:35:ec:7e:52:36:07:0f:4b:77:12:04:03:
e2:ac:31:7c:cb:f1:57:1a:66:50:31:27:eb:46:4c:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:7A:E6:4E:3B:81:B2:56:DB:AD:B5:65:2A:1E:7E:80:F3:39:75
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ec:fc:d1:82:97:2e:a1:88:74:67:21:5a:9b:d1:13:3b:2c:
f5:41:0f:94:b5:30:9f:9b:c1:74:41:80:ef:41:d3:cc:0b:80:
e5:f4:8b:de:85:e5:5a:35:53:ef:6f:0d:4f:6c:28:b9:26:26:
9a:7e:c3:21:28:9c:cd:10:74:80:4b:8b:47:6d:71:67:07:d8:
8f:53:9a:29:4e:bd:0a:f5:b5:d2:c2:84:88:46:93:3b:5f:20:
a5:ac:d0:ee:3e:56:1c:38:aa:a3:f4:ff:7a:12:d3:d0:0d:91:
47:d5:66:71:6d:18:45:46:1d:fc:17:6a:79:76:d9:73:f0:00:
ca:d2:24:4c:b2:85:b0:f7:9a:cb:2b:ff:ce:86:32:90:45:39:
0c:95:d1:1b:71:59:d1:ff:89:03:a0:1f:71:d6:fd:f5:29:73:
62:36:c9:15:95:eb:48:35:3d:13:a8:c1:1c:bb:e0:f1:55:39:
be:4e:06:45:5c:7f:28:d4:43:e4:c0:75:99:69:b0:34:bd:01:
d8:38:58:4c:ab:9f:0c:18:2e:16:5b:7a:76:d0:a9:13:fd:31:
ce:4b:b1:c1:df:be:c8:2e:35:20:cc:34:33:c8:d2:11:4f:e7:
f1:d9:3d:c5:5d:e0:ab:45:d0:52:ac:f2:c6:a1:b2:5c:67:da:
24:c8:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 10:19:45 2024 by rpki-client on console-ams.rpki-client.org