Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: rE93h0h9Khs3j1F7WFkHef1baWzmO9ygEYj5/rw1aCQ=
Subject key identifier: EA:01:70:93:3F:A3:33:B5:94:1F:E1:CF:07:B0:AB:31:65:28:20:76
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 0194C3BE71594FCB98BC764561CDC0DB73AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 01A5
Signing time: Sat 01 Feb 2025 23:00:25 +0000
Manifest this update: Sat 01 Feb 2025 23:00:25 +0000
Manifest next update: Sun 02 Feb 2025 23:00:25 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: opFouFgq8hsqIw+Y6jYOrQTQrg+PXe/j+RKzeiDHdjc=)
2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:71:59:4f:cb:98:bc:76:45:61:cd:c0:db:73:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Feb 1 23:00:25 2025 GMT
Not After : Feb 2 23:00:25 2025 GMT
Subject: CN=ea0170933fa333b5941fe1cf07b0ab3165282076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:68:bc:1a:8a:ee:88:ed:82:e8:c8:f3:bd:
5e:02:ee:ec:41:55:db:e8:5e:e6:24:bf:bd:ae:5a:
e6:ad:5a:27:2e:0d:de:2b:13:6d:1e:c8:33:aa:b5:
d3:3a:b4:cd:79:e0:22:87:99:90:64:e9:0b:ff:55:
47:dc:e6:30:04:e3:73:d0:78:30:4e:2e:8c:d0:0b:
fe:b6:a1:09:0c:1d:c8:0d:35:be:13:68:98:83:11:
0d:1d:3a:22:64:9d:3b:6d:5a:58:3d:d8:1e:c0:a4:
24:ef:fb:e2:d2:e5:b8:b3:df:00:22:0f:21:9a:59:
17:28:ae:90:b8:47:7b:46:06:d7:d6:64:83:5b:38:
48:ce:37:c9:1c:df:93:4a:01:a8:d7:f0:8f:56:a4:
af:b3:a7:75:56:63:40:5b:0a:4d:18:c6:e9:72:a9:
33:51:84:c3:90:ae:63:03:16:3b:ce:ad:b8:a9:bd:
83:69:f0:71:7f:07:8b:b8:c0:e5:ae:29:0d:64:53:
6e:f3:f0:88:6f:db:2f:d9:7f:e7:1d:b4:b6:65:ef:
ae:69:b2:75:2f:56:1d:20:03:dc:2f:16:92:76:1d:
31:55:f7:d8:4a:5d:9a:1d:35:c9:53:11:3f:1e:3b:
99:dc:62:dc:12:a8:ea:84:4c:15:02:b1:f8:5d:66:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:01:70:93:3F:A3:33:B5:94:1F:E1:CF:07:B0:AB:31:65:28:20:76
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cf:1c:cd:fc:c9:03:cb:7b:10:81:cb:5f:41:a4:d1:cb:4a:
4a:12:72:38:1a:06:29:a9:9c:61:7d:32:b1:43:85:4b:94:fd:
22:bf:89:12:ee:f4:c8:f7:4f:91:3a:38:ce:a3:93:ba:38:fa:
0d:c5:37:2e:55:05:45:0d:f6:0e:5d:c6:e7:80:eb:92:fc:fe:
a6:79:7f:cd:5a:1b:d0:60:d1:3a:1f:6c:8c:73:d2:56:2b:ee:
f6:55:03:a4:83:c7:05:70:23:51:1d:6c:30:0b:ab:30:03:ad:
21:cb:fc:95:57:62:7a:86:91:ad:95:f6:57:17:bb:c3:c1:be:
cc:a9:18:85:f2:96:fb:e0:ca:1d:f0:a2:5d:06:99:a5:25:60:
98:cd:95:de:6e:9a:32:eb:22:08:5e:1c:d7:97:c8:09:76:66:
33:3c:54:e4:65:a5:95:32:a5:1a:c9:c0:b1:79:36:1c:a7:e8:
6e:78:00:e7:f7:86:73:9e:9b:88:a8:0d:92:09:96:e1:10:15:
e3:ed:8b:1b:da:dc:34:ca:7b:d8:d6:b0:2d:37:60:fa:29:e6:
da:ba:95:15:1c:02:92:51:0c:b2:1b:e5:89:5c:75:f0:d0:dd:
36:1e:0d:1b:79:f6:d4:50:18:19:bd:1f:a9:6b:2e:7a:6f:8d:
c2:19:d3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:05 2025 by rpki-client