Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: naui1WjM1cNiUr6zTHFJN6k7lXnniBP5IUSmAmFnWFE=
Subject key identifier: E2:4E:D6:BF:5D:D1:A5:B1:3E:B2:5F:1C:00:2D:AB:B1:56:25:69:3D
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 0194BB29B18E5BAF4CC20BF6C14FD057AF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 06C2
Signing time: Fri 31 Jan 2025 07:00:59 +0000
Manifest this update: Fri 31 Jan 2025 07:00:59 +0000
Manifest next update: Sat 01 Feb 2025 07:00:59 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: GlGvo6thsqakxgAFtk0H3aD5UmtEQY7E6TYmH06lfv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:b1:8e:5b:af:4c:c2:0b:f6:c1:4f:d0:57:af:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Jan 31 07:00:59 2025 GMT
Not After : Feb 1 07:00:59 2025 GMT
Subject: CN=e24ed6bf5dd1a5b13eb25f1c002dabb15625693d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:4a:dc:5f:54:93:34:14:75:3d:5c:d2:6d:f0:
03:2c:75:2a:dc:7f:5f:9b:73:27:44:18:98:b3:40:
aa:42:e6:d1:e9:dc:e0:a9:ad:73:d2:10:d2:e0:e3:
07:c2:70:fd:b9:7f:30:e5:1b:22:1c:17:80:49:4c:
eb:ef:b1:01:fa:6a:c6:be:e4:3a:a2:3b:c9:cd:46:
3e:f5:c5:5a:e3:c4:3c:75:16:02:2c:87:2a:a9:78:
5d:4d:30:83:cd:c3:0d:0a:9b:2f:05:34:e3:69:35:
bc:38:aa:43:d3:b3:5b:e4:4f:f8:3a:2f:ad:e1:eb:
62:f2:c7:60:96:1e:47:5f:0b:9a:1b:d0:76:49:86:
e0:fe:17:ee:fd:28:1c:fc:84:d5:94:b3:c0:92:a6:
14:61:b8:71:e8:e5:5a:1c:c6:3d:89:dc:8c:e5:93:
d6:27:77:3f:21:56:e4:fa:cd:20:de:b4:82:3d:aa:
15:10:3d:ae:55:83:16:4b:49:4e:28:e2:99:e4:08:
c9:a2:41:25:7f:9c:3d:be:f9:e9:da:e7:94:b2:00:
3b:ea:28:03:d3:16:3f:d4:af:cd:8c:eb:36:5c:59:
3d:81:92:7c:aa:91:7d:92:3b:da:01:28:b4:64:f8:
d6:7f:3c:c6:8d:03:0a:38:5c:d5:60:e0:ed:54:6f:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:D6:BF:5D:D1:A5:B1:3E:B2:5F:1C:00:2D:AB:B1:56:25:69:3D
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:92:8f:7b:d0:44:8c:21:29:0d:18:eb:1b:4f:c9:6e:a1:fa:
08:24:b0:2e:fa:7b:01:a2:40:61:b2:2f:87:37:77:91:84:5e:
06:f7:34:4e:be:12:5e:d1:f8:95:43:e5:3d:30:84:97:15:78:
81:55:56:a4:f4:69:d5:95:59:a0:61:70:c6:1e:b9:4f:ff:22:
a4:91:85:e7:3c:e8:7d:d6:9b:5e:e7:33:55:00:79:01:1d:27:
40:45:a1:01:d4:92:da:a8:da:24:af:7e:66:8b:d1:8f:f8:52:
fb:f3:ff:6f:83:4e:ee:33:43:35:81:d2:d8:a2:47:b2:44:8a:
16:72:89:68:58:6c:4a:84:c1:67:cc:0f:cf:d2:cc:32:b4:91:
c3:5f:1e:8c:b8:71:68:de:a0:2d:25:93:1f:2b:dd:40:6a:81:
04:8d:f3:ed:ae:41:e3:8e:bf:9e:3d:6e:6e:fd:8d:76:3c:28:
64:b8:5a:a9:a0:3e:ef:e5:0c:0e:56:8e:fa:59:97:e4:cc:28:
38:0e:38:f8:95:87:32:99:09:54:95:41:fd:47:bc:51:da:de:
d1:14:13:82:e4:c9:ff:e0:9c:08:45:7a:aa:b6:76:51:22:82:
20:61:ed:58:f7:c5:7f:e4:40:7b:d0:5a:24:7e:5c:02:6e:b8:
75:5d:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:26 2025 by rpki-client on console-fra.rpki-client.org