Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File: LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier: TEuglIdunsjVGmj2D0F8zl42Xv8diKB8OMDOLWCDncU=
Subject key identifier: CD:CC:D7:CD:91:F9:A7:39:62:13:97:6C:A8:C7:B5:63:0D:CB:69:2D
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 0194BB5FE4B020C814A76BE1C471D353D97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 08:00:11 +0000
Manifest this update: Fri 31 Jan 2025 08:00:11 +0000
Manifest next update: Sat 01 Feb 2025 08:00:11 +0000
Files and hashes: 1: 1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa (hash: Ez8uNLSpiX9S8lz0pVk5NS7jK9ai+KC6g5pGfPW50c4=)
2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: JSSfFmd5MOvPKDLPbfLrNKOos3mlMEE5AN2hpOVxvtU=)
3: Tqry6ntz7b3kTeJ5OCnwPvloJIw.roa (hash: y/Hg2mPZLnUNHUkA7kXq+J0F+bsaFDCzyOC2OJvkyTk=)
4: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (hash: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=)
5: yGvOgFMZISJsfSPqCjNlOqtAHMM.roa (hash: Y4gEqzV+We8lCW3rGQRh7ia7nliYhdhTWgBtjF9WRdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e4:b0:20:c8:14:a7:6b:e1:c4:71:d3:53:d9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Jan 31 08:00:11 2025 GMT
Not After : Feb 1 08:00:11 2025 GMT
Subject: CN=cdccd7cd91f9a7396213976ca8c7b5630dcb692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:44:0b:40:7d:c0:fd:4e:e4:1f:03:3c:c9:
04:ff:79:40:2e:c3:7f:9a:9b:62:e9:71:23:90:39:
88:4c:21:66:c3:49:04:87:90:53:83:c5:5e:92:32:
c0:19:6f:2a:f6:51:44:1c:57:ac:5d:e3:a1:23:f8:
70:c9:bd:a6:87:a2:1b:0e:9f:02:83:4d:92:aa:2c:
2d:7e:a3:be:d7:7a:19:9e:63:8d:3e:87:b8:23:c1:
e8:e6:be:0d:1f:ca:a3:09:16:ee:42:47:4c:08:9c:
33:ee:36:7b:f0:59:d4:ff:02:0d:c9:51:58:df:16:
92:c8:13:37:c5:e0:9d:e6:c3:ee:5d:56:d2:30:eb:
af:60:e0:77:d7:7d:1f:4c:ff:b6:49:5a:0b:a9:12:
29:86:53:da:20:f8:28:5c:ad:9c:9b:69:7a:b5:9f:
a2:3d:f1:e5:b1:6c:ca:1b:41:00:01:98:84:d2:86:
c1:6f:01:aa:e4:ed:52:ff:64:90:b1:d9:95:0b:64:
d6:d2:c9:4f:67:4a:71:1b:23:8e:58:37:2a:c1:a4:
08:a5:24:1a:40:ac:c3:96:1c:2a:a1:0f:d2:50:6f:
c3:40:92:fa:5a:b4:ed:65:43:66:c2:2f:7f:6f:65:
6d:97:24:4a:c7:0a:67:a0:92:de:1e:66:d7:d8:fb:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:D7:CD:91:F9:A7:39:62:13:97:6C:A8:C7:B5:63:0D:CB:69:2D
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:af:59:31:a8:96:05:31:76:c0:a2:55:0a:2a:32:07:9f:0c:
79:3f:5f:e6:7c:44:2e:75:b9:96:2a:3f:b2:08:f7:1e:95:51:
93:c3:8f:ad:d9:2f:08:57:bf:ce:2a:52:92:7c:26:9a:83:b4:
89:5f:d9:5b:32:81:98:2f:2c:0c:3e:19:c0:7a:55:f5:b9:6f:
05:74:93:04:0f:c2:06:58:92:8b:1b:b1:f1:4d:c9:00:00:c8:
4a:cb:07:d8:55:f3:cb:92:40:10:de:b4:e5:79:6a:48:d1:f3:
78:2e:7f:5a:cf:b9:15:90:58:ef:19:82:02:a7:6d:3d:e5:bb:
a4:18:be:5e:9c:3a:cf:0f:f1:ba:d2:f7:2f:66:56:7c:f7:b1:
95:57:9a:96:43:9b:b1:27:65:3c:a9:86:35:2f:e2:a3:e9:77:
cd:b9:03:e0:27:8f:d2:b4:3b:1f:ea:52:b8:7e:99:78:eb:b4:
bb:04:0e:eb:be:8f:f9:fe:d1:0c:4e:55:53:da:99:66:6d:50:
07:16:be:52:e5:67:01:75:e9:65:f3:ec:6e:2b:cf:fa:9c:11:
7a:d4:01:7a:d9:8c:df:36:cc:c6:84:9d:4d:6e:e2:64:49:4e:
2c:1b:09:83:00:c7:3d:36:a2:49:56:03:47:27:42:3e:a5:40:
30:b2:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:21 2025 by rpki-client on console-fra.rpki-client.org