Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: pptAK8q8FGJEY716wr+uBoXWwDzOZn/yhRWTjknwfA0=
Subject key identifier: 29:25:01:83:F6:69:20:53:03:34:04:BC:22:F5:E8:22:5C:8C:09:0B
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 0194C4633B51A2DDF9E37663AE62B0AE5107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 11B4
Signing time: Sun 02 Feb 2025 02:00:25 +0000
Manifest this update: Sun 02 Feb 2025 02:00:25 +0000
Manifest next update: Mon 03 Feb 2025 02:00:25 +0000
Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: pLXttuHVRn+YGMv8d3Vlbn5LFfMDW/s8y3UqbqasZQQ=)
2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:3b:51:a2:dd:f9:e3:76:63:ae:62:b0:ae:51:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Feb 2 02:00:25 2025 GMT
Not After : Feb 3 02:00:25 2025 GMT
Subject: CN=29250183f6692053033404bc22f5e8225c8c090b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:29:ac:b0:8c:44:5f:f5:68:c5:dc:48:e1:
65:6b:ee:15:e9:8a:5a:ae:26:e9:2a:a7:3a:f8:a0:
45:6c:f0:a8:6d:4b:37:8c:04:e3:86:52:46:ee:c5:
2d:f4:78:63:ad:7a:c4:04:62:f7:40:66:7c:4d:ca:
ab:02:88:06:03:82:88:08:9b:24:42:61:e3:80:a6:
79:8f:90:1e:66:c4:f8:23:df:dd:66:9a:9f:a5:e8:
af:fc:eb:b8:ab:b1:fb:bd:4a:ad:ee:1c:02:af:c5:
6c:71:6d:3a:83:92:1a:09:e3:79:b9:7e:83:b2:9b:
a0:19:e5:45:c1:06:46:13:7a:ba:aa:98:49:63:6e:
c7:d6:cc:67:b9:81:b5:e3:85:2f:73:9f:54:36:ce:
0c:0c:e0:25:a6:7f:60:39:d6:52:8a:30:73:39:eb:
8a:9e:67:d8:f0:40:f6:fc:d5:58:5f:e5:02:bd:37:
32:61:78:e2:ed:a9:61:4b:40:c2:12:52:6d:d6:13:
5e:96:9a:c5:4e:76:82:7f:6a:25:71:d7:52:cd:6d:
e7:7d:5b:fc:46:8c:32:b9:dc:01:7e:b2:4d:62:09:
5c:6a:31:11:50:8c:65:88:2f:91:44:18:ae:ee:cc:
36:05:94:10:c7:ef:75:c3:e8:dc:ed:34:57:76:1a:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:25:01:83:F6:69:20:53:03:34:04:BC:22:F5:E8:22:5C:8C:09:0B
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:ec:e2:37:a7:ab:a2:d5:87:7e:0d:ec:8c:f9:c8:f5:92:
6c:6c:00:ee:d9:18:d0:c0:e1:6d:46:32:c7:23:8a:ca:b8:5c:
52:7a:a5:c3:ee:66:9e:8c:c5:6c:36:c4:ed:b9:e9:03:de:06:
55:fe:8c:41:65:5e:e2:30:38:47:37:8f:35:e7:48:cc:8d:12:
83:44:fa:7e:72:cb:ae:ca:b9:75:35:a8:dd:83:81:58:42:86:
88:92:e4:af:bc:d2:43:8e:39:a3:34:04:68:55:b4:43:e0:30:
08:42:34:22:e5:5a:38:ac:ce:d0:4d:bf:e8:b9:9b:07:86:da:
b5:75:c7:85:df:6b:c1:ba:78:0b:0b:cf:0b:84:bd:9e:5f:e8:
cb:2f:b3:b0:2e:4d:02:2a:c3:31:bc:06:28:3f:9b:15:f8:48:
84:06:0f:ba:9b:7d:58:03:9f:73:cc:d7:32:12:ff:c8:94:43:
85:c3:2a:37:da:cc:e9:92:92:03:95:f2:06:50:f2:a4:1c:9f:
72:d7:e0:14:7e:ed:a3:34:cb:f4:20:97:f2:2c:af:f9:2c:e3:
03:01:5e:3d:2b:23:bf:1f:58:07:4f:f6:1e:a2:ae:e3:61:98:
93:49:04:7d:1e:f4:aa:64:ee:0c:62:e6:31:be:02:63:77:4a:
33:f7:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:58 2025 by rpki-client