Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
File: LOuI0A5SCtZgtBbZIInGDVyPE-E.mft (raw, json)
Hash identifier: FKu39adSunDMV6p11bbWQnggil+OvI9x8UUoFpalIg0=
Subject key identifier: E2:BA:8B:92:8B:9E:52:1A:CF:08:D5:FA:90:EC:BD:B3:9D:F3:23:30
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Certificate issuer: /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial: 0194C463BAD5D79F92D1F8BC28390FF0313D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
Manifest number: 9F
Signing time: Sun 02 Feb 2025 02:00:57 +0000
Manifest this update: Sun 02 Feb 2025 02:00:57 +0000
Manifest next update: Mon 03 Feb 2025 02:00:57 +0000
Files and hashes: 1: LOuI0A5SCtZgtBbZIInGDVyPE-E.crl (hash: iRtWNrbrI5+rCfv9Wag35PtBxmZeqjxAR6Wey6P15ts=)
2: Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa (hash: x4bPgE4P0Zq2nwgUR4AjUuUSz6sm/lpYmxdn5ktx7oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:ba:d5:d7:9f:92:d1:f8:bc:28:39:0f:f0:31:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Validity
Not Before: Feb 2 02:00:57 2025 GMT
Not After : Feb 3 02:00:57 2025 GMT
Subject: CN=e2ba8b928b9e521acf08d5fa90ecbdb39df32330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:bf:2f:98:f3:cb:0e:4f:2d:61:23:22:1d:
9f:21:4f:a7:19:7c:58:7f:56:be:2a:55:9e:38:8c:
aa:67:04:66:8a:06:4c:fa:4d:da:9d:7b:1f:3b:58:
20:07:ac:ae:c1:aa:fa:5b:f6:23:97:e7:17:48:a1:
0a:69:ac:60:b1:92:cf:7d:31:21:1d:a1:b2:94:aa:
7f:40:f7:4d:2c:17:5c:c3:f3:27:33:3d:0d:b0:93:
74:74:b7:9e:58:22:b3:a4:60:ee:69:6e:5f:95:b2:
7e:a2:7d:65:bb:f5:64:02:82:63:3e:a4:f2:1f:3d:
18:43:d3:39:4a:fc:b0:da:55:18:18:39:e8:f1:8c:
eb:09:11:24:46:e7:98:55:a4:c7:10:aa:ae:1a:b1:
9b:e5:94:3f:77:e5:2d:f1:e2:15:71:94:0f:3d:9c:
ee:86:10:9c:37:0b:1a:9f:9e:12:9b:32:a4:4c:cc:
9b:1d:da:32:a3:60:8b:ff:15:55:da:22:e2:24:1b:
3b:b6:cc:17:08:14:64:44:bd:d5:09:36:36:68:9d:
71:82:de:d9:8c:6f:fb:c9:da:67:ee:23:3f:56:f2:
15:b6:b1:dc:a1:97:0c:83:5b:fc:2f:ab:a9:bc:71:
48:02:db:86:7e:fe:96:fd:aa:8b:62:c1:6e:91:c9:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BA:8B:92:8B:9E:52:1A:CF:08:D5:FA:90:EC:BD:B3:9D:F3:23:30
X509v3 Authority Key Identifier:
keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a8:3e:15:dc:ac:80:c5:2e:40:3e:7e:47:bc:f8:2d:59:d9:
e0:95:91:ec:3b:a0:19:59:40:e7:6b:7c:e7:a2:f9:91:bb:f6:
aa:1d:b6:2f:bc:72:b2:a4:63:ad:ac:3f:83:5d:15:61:fd:91:
c3:65:4d:e0:ed:4f:93:6e:f0:d1:e4:80:66:f9:f0:b7:af:7b:
28:9a:60:53:df:92:b5:12:36:50:22:f0:31:2f:84:80:92:d2:
42:24:ad:73:ca:b8:6c:0d:2d:93:9a:f2:49:16:3d:6a:da:92:
1e:f0:c6:0f:a4:e6:f5:30:c6:68:d5:82:4e:f0:4b:04:c7:50:
59:84:23:d5:24:46:35:39:f6:d6:16:8e:a0:bf:2a:cf:59:51:
83:36:2b:8f:e2:0d:56:b1:f7:ef:cc:87:81:d9:14:8b:19:84:
b6:07:71:5b:ed:d8:58:8c:45:46:78:85:d4:a9:d2:f9:43:35:
1d:6c:2f:fa:bb:da:55:cc:e9:21:5e:e6:69:04:47:4f:d4:49:
38:93:b7:44:16:a2:05:d8:45:f7:9d:48:56:fe:47:c5:bf:1f:
93:d8:d1:36:12:cd:31:b4:90:8a:39:c7:67:57:84:64:bb:0e:
15:7c:bd:7e:77:06:49:2a:da:cb:60:3c:ee:f4:df:e2:7b:58:
b3:3c:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:04:01 2025 by rpki-client