Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier: qvVOWZjTxGSpSkUmB0mUHZLByXkAXnLnAz0tCQ32iss=
Subject key identifier: AF:9D:C3:58:09:74:D9:BB:ED:89:FB:A7:87:47:61:33:55:10:D9:9C
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 0194C4D0E1A6672C1C32BEF68CDC7DFC65DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number: 1225
Signing time: Sun 02 Feb 2025 04:00:11 +0000
Manifest this update: Sun 02 Feb 2025 04:00:11 +0000
Manifest next update: Mon 03 Feb 2025 04:00:11 +0000
Files and hashes: 1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: EFxnn7sriqNQfl3nGmbPTYmDatkoa/M2kUSj6k1iYbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:e1:a6:67:2c:1c:32:be:f6:8c:dc:7d:fc:65:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Feb 2 04:00:11 2025 GMT
Not After : Feb 3 04:00:11 2025 GMT
Subject: CN=af9dc3580974d9bbed89fba7874761335510d99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6f:2e:14:e7:0b:c3:54:74:be:ff:96:43:1f:
a5:7b:ba:75:55:d2:9f:fd:2f:33:fd:27:68:50:82:
53:6d:51:2a:db:97:a4:c2:8b:77:15:f2:f7:64:3b:
17:54:6f:85:97:6b:f1:77:e9:1d:a6:2d:ed:27:db:
e2:82:36:93:71:f1:83:13:64:35:8b:57:88:e8:cc:
b9:11:86:c5:36:0b:b7:21:18:c5:9b:37:0b:05:48:
99:5b:96:83:95:3c:89:ff:f6:df:6e:0e:e4:7e:6d:
b5:ae:92:fe:25:55:39:7e:64:45:31:d8:04:fc:f6:
09:10:dc:bd:00:fb:55:72:c4:45:89:18:65:98:0b:
d6:44:6b:4a:e0:cf:f8:25:0d:c1:1c:85:b6:05:f4:
14:65:12:56:ae:c9:2e:25:3a:b0:03:4f:d2:b7:33:
1b:30:91:9f:9a:0d:42:7b:ee:77:71:73:20:9a:69:
1f:a3:bd:36:76:45:52:fc:bf:cf:e6:be:6f:53:51:
7b:e9:45:92:d4:99:4b:74:93:ba:92:93:ca:86:f3:
e9:2b:95:af:64:07:9f:a1:0e:04:1d:cd:28:d2:b6:
ab:cb:4c:ab:f4:6f:a2:6d:6a:d3:e0:1f:5b:64:45:
e2:b8:81:86:6e:5b:bd:41:11:84:63:3e:32:37:94:
5a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:C3:58:09:74:D9:BB:ED:89:FB:A7:87:47:61:33:55:10:D9:9C
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:80:71:43:5e:3c:30:4a:4c:ca:16:a3:c5:cc:db:ea:18:65:
ff:28:52:ae:99:e7:ec:c5:d4:51:7c:e7:88:32:73:0f:a6:f2:
25:56:43:22:af:a1:00:84:a3:cc:15:37:8e:79:9e:dc:40:ea:
80:8b:00:bf:6e:99:8e:ee:53:be:8c:12:51:b7:51:7c:09:b9:
a5:f6:52:3e:d4:d8:c7:31:86:77:8c:a4:88:3a:21:f9:67:2f:
a1:4d:c7:f4:f4:e7:cf:1e:df:8c:f8:33:01:81:f9:d2:26:30:
1a:79:3b:0b:1b:90:ab:e4:77:cb:ca:aa:1f:80:a6:a4:ad:8c:
ff:d0:10:47:2c:3b:a3:bf:37:05:f0:0b:3e:4a:9d:f5:f4:93:
85:05:5c:d6:0e:ff:3f:25:61:e7:e0:23:d1:0c:d9:17:0f:df:
b6:82:44:3f:f7:07:ac:6b:ec:63:b4:12:55:3c:35:7d:56:1b:
a4:6e:66:93:ec:35:86:c4:03:70:3c:77:de:45:ed:56:b3:ad:
99:06:90:8e:32:5a:a5:69:73:05:53:d7:43:58:7c:da:32:77:
87:ff:45:d3:e2:8e:68:3d:af:d4:e9:77:33:e9:6f:c4:e7:c5:
28:87:e1:95:9f:fe:74:b9:f4:86:50:06:23:80:99:e9:60:c0:
ce:92:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:43 2025 by rpki-client