Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: vspRJM6cxUSX7+pvqCd8ErUSHxYOGAdWVaJ8TZuVWqw=
Subject key identifier: AF:F5:19:D3:31:91:D4:84:B1:F6:9E:96:07:F0:5E:25:63:36:0B:F1
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 0194BABBB5A4D07FC1D7E4B1C83F96F040B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 05:00:51 +0000
Manifest this update: Fri 31 Jan 2025 05:00:51 +0000
Manifest next update: Sat 01 Feb 2025 05:00:51 +0000
Files and hashes: 1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=)
2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: gP13Cn6yOL21QkIS4eFMXbElEeEpq/PaOoyerh2xxc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b5:a4:d0:7f:c1:d7:e4:b1:c8:3f:96:f0:40:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Jan 31 05:00:51 2025 GMT
Not After : Feb 1 05:00:51 2025 GMT
Subject: CN=aff519d33191d484b1f69e9607f05e2563360bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:3e:27:0c:60:1c:48:8e:43:16:e1:41:40:
11:36:32:18:cb:46:63:a9:a4:c4:d9:e7:19:ae:df:
2a:af:38:d5:2d:14:4c:37:90:1a:49:69:26:85:e0:
bf:25:d0:96:a8:e0:3b:b6:ae:be:c6:a5:ad:44:b3:
aa:9c:2f:55:b9:ea:db:2e:89:34:cc:55:f5:a7:8b:
24:86:47:29:4c:a8:d7:88:ab:af:b8:ff:e5:0f:1d:
1b:98:78:50:b0:87:45:7a:e1:ab:b5:ed:9b:31:7a:
b5:6f:53:8a:ee:e1:9b:71:50:aa:3d:86:47:42:22:
0f:2e:20:50:a6:c2:bf:b2:63:6a:7c:c0:4c:5c:48:
f5:37:18:81:16:3e:e5:29:a0:19:14:a2:85:6d:f4:
32:f4:e7:0c:61:53:20:a4:30:53:e0:be:d4:d2:b5:
40:9f:20:96:57:a7:31:cb:87:58:a9:ca:0e:db:3a:
8b:dd:ab:97:f6:a9:14:ce:7e:ba:c6:83:b8:99:a1:
31:81:4a:74:33:25:81:89:0c:af:19:2e:8d:f2:dd:
3d:7b:4a:08:ab:18:79:f4:8f:65:b0:e0:a0:90:63:
b9:ea:ef:a1:6f:64:29:53:9a:e9:6d:c0:a0:9e:b9:
8a:3c:ee:6e:6e:c1:04:df:cd:79:b4:c6:9e:6e:91:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F5:19:D3:31:91:D4:84:B1:F6:9E:96:07:F0:5E:25:63:36:0B:F1
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ab:19:78:e1:e9:dd:d3:bf:62:bf:fa:22:eb:ae:81:60:94:
8b:97:ee:50:92:aa:38:93:95:c6:d2:71:a6:97:de:83:fb:16:
6c:c4:09:b3:8d:09:9a:f8:59:22:b8:59:75:1d:ae:0d:30:6c:
4c:c0:05:06:a4:06:89:7f:2e:c0:01:55:ff:d1:6b:95:cc:c2:
32:21:4d:97:9f:b5:d4:f1:bc:9a:45:78:43:d5:66:37:81:f5:
6b:b2:c8:35:06:54:fd:24:43:b9:f8:76:41:e3:4b:24:77:7a:
11:97:7c:2b:aa:b4:3b:88:99:03:dd:67:4c:48:7c:19:c5:6a:
b0:a4:6f:85:28:68:61:b2:5a:e2:9c:3c:4c:d1:56:28:15:25:
a2:87:f3:b5:aa:45:81:c4:95:00:45:b9:1d:3b:29:ff:f7:54:
ac:70:ae:5c:59:df:fb:62:d3:91:e8:45:33:da:bd:d3:28:22:
f0:e1:53:ac:0c:d7:74:7e:f6:51:8a:62:08:91:2d:24:05:c6:
3a:71:c8:28:f8:8d:b5:43:4f:f7:5f:65:90:e1:53:50:2e:4a:
b3:97:dd:ac:71:3a:6e:fb:70:85:b6:c8:74:2f:77:1f:a4:2d:
43:6e:0a:b6:8c:cd:b2:2d:46:ba:82:4d:ea:4b:ad:da:f4:36:
34:16:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:17 2025 by rpki-client on console-fra.rpki-client.org