Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: J7MrJPvkO3ZDQ64KK/AUUCKgc73y1dxrGwO+TLJqS3k=
Subject key identifier: 41:F5:0B:71:B8:E2:D3:1A:2B:5D:9C:9E:33:FF:8B:70:CF:84:38:D0
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 018F8E5D7A74A0A8BDC5C7631BDC550A631C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 0FC3
Signing time: Sun 19 May 2024 01:00:41 +0000
Manifest this update: Sun 19 May 2024 01:00:41 +0000
Manifest next update: Mon 20 May 2024 01:00:41 +0000
Files and hashes: 1: b4qh9xACOq5XZXxhw3kbpvXNMcY.roa (hash: JFLdZICpgQDfQhL52Lu4EoImLg5XPA6RJpZhQoLCIp0=)
2: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: /rdYc3PsuArie8/fS2ahp0BeFnEkbFNbjXchI9ZUoOs=)
3: z8wFHcF7NLSbEzwnisx-No4hVvc.roa (hash: +8Ni+4/M3cKKplKn4ugaR4kb6clVsf+wT7vTUwpP4R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8e:5d:7a:74:a0:a8:bd:c5:c7:63:1b:dc:55:0a:63:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: May 19 01:00:41 2024 GMT
Not After : May 20 01:00:41 2024 GMT
Subject: CN=41f50b71b8e2d31a2b5d9c9e33ff8b70cf8438d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:58:d7:af:97:fc:c0:ac:2d:78:8f:df:e4:
13:27:81:c6:57:3c:6a:32:80:ca:dc:d9:b5:94:8b:
c1:36:ea:80:6d:76:a6:d1:78:4e:58:13:9f:73:90:
6a:20:ba:ea:96:d0:da:e3:75:3b:bf:ab:9f:c5:76:
5f:78:0a:5a:81:e9:1f:ac:b5:f9:50:a0:a0:19:85:
a7:1d:bf:e1:8e:e5:0c:f1:5b:20:6a:54:55:b3:4c:
8c:66:ab:1e:77:7e:02:2b:77:07:1e:ba:f6:df:a9:
63:e9:e0:00:d6:29:93:a6:f5:f5:3f:3d:14:41:9e:
d3:de:70:8a:d4:e7:75:a6:ce:c6:c4:06:cb:83:33:
e3:10:15:9e:ee:45:31:84:2a:cd:10:c6:12:d1:b6:
3b:e7:a6:45:6a:37:b8:4c:e4:0d:0d:83:c3:36:a5:
80:66:73:13:5c:5b:fd:69:0c:fd:c6:59:69:77:0d:
f1:b1:57:66:ab:1f:d1:fc:c3:3b:db:a5:65:aa:bc:
31:9e:3b:cf:39:e5:95:9d:4d:1b:c7:57:e1:82:e1:
37:9c:c5:0c:cc:58:6e:5d:0b:a9:f9:44:c5:6c:c5:
95:3e:bc:fc:b6:ff:0f:fb:12:43:a5:a8:6d:ee:66:
6a:1b:65:5f:bc:f8:20:d7:d5:9c:c6:1f:24:54:33:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F5:0B:71:B8:E2:D3:1A:2B:5D:9C:9E:33:FF:8B:70:CF:84:38:D0
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b6:cf:4a:5d:4e:b0:d2:3f:b4:26:e5:56:e8:b6:c1:bc:70:
41:6f:ca:e6:50:6e:4c:d6:18:7d:44:32:d1:dc:49:8f:78:65:
3c:8a:b0:ec:3c:c3:0c:6a:0a:0d:5f:94:4b:3d:d1:dc:84:ff:
0d:a0:f9:cd:e3:f1:58:a3:5a:f1:c3:4c:07:c8:21:3b:16:dc:
eb:f8:64:77:6a:78:c5:d5:73:60:55:bc:0e:a3:ad:ec:82:f2:
e2:a9:e3:9f:56:a4:1b:22:41:28:3b:47:e6:65:5a:5c:67:42:
c7:ed:90:94:33:37:71:fd:9a:96:85:1b:08:39:c5:db:3f:63:
da:54:fa:58:2f:80:4f:3b:01:36:a1:95:e7:54:cd:18:bb:63:
5d:02:9c:f3:9d:a9:41:84:0e:ff:5f:73:10:2f:71:69:5b:76:
68:c2:3a:9f:54:64:2b:2f:9e:c9:fd:9a:74:03:16:24:23:14:
07:f1:bf:67:25:30:65:b8:7a:af:60:73:ec:0f:e7:de:6d:fc:
73:c0:6b:4b:2c:81:bb:b7:91:e9:38:ec:10:0c:db:e7:dd:11:
2a:f3:e8:2f:80:19:19:0b:cb:9c:38:a2:a7:07:ab:ad:5f:bf:
c8:cb:ae:17:7b:b4:71:7e:a8:2e:2a:0b:08:c4:e3:de:13:10:
1c:93:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:01:11 2024 by rpki-client on console-fra.rpki-client.org