Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
File: LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft (raw, json)
Hash identifier: BrGCSFIqkov1Vol+Wlra4Vc1oY/NmI+3UhphOYEQF68=
Subject key identifier: 06:88:7D:E0:26:08:C9:D5:4F:7B:EC:19:4E:EF:0E:67:89:CD:D4:E0
Authority key identifier: 2D:0F:33:E0:25:4B:FA:03:93:89:CD:1B:2C:EE:89:EC:A1:DD:9A:60
Certificate issuer: /CN=2d0f33e0254bfa039389cd1b2cee89eca1dd9a60
Certificate serial: 0194C4D0DB826DF90A698D26696056F80ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
Manifest number: 03EC
Signing time: Sun 02 Feb 2025 04:00:09 +0000
Manifest this update: Sun 02 Feb 2025 04:00:09 +0000
Manifest next update: Mon 03 Feb 2025 04:00:09 +0000
Files and hashes: 1: LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl (hash: yHr0ciYvN/IrJxSjBzaWKRQEcy/ijqAC/Yj9USHG1Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:db:82:6d:f9:0a:69:8d:26:69:60:56:f8:0a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0f33e0254bfa039389cd1b2cee89eca1dd9a60
Validity
Not Before: Feb 2 04:00:09 2025 GMT
Not After : Feb 3 04:00:09 2025 GMT
Subject: CN=06887de02608c9d54f7bec194eef0e6789cdd4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:2b:0b:49:1c:be:d2:a2:ad:a6:3d:4c:59:
d5:41:99:7c:49:dc:e7:ba:2e:e8:12:96:0e:8e:44:
13:63:c2:36:b1:8d:11:7c:ea:00:59:7e:5f:89:77:
1e:95:81:64:92:5a:09:15:8a:c2:1c:9a:5c:e3:fc:
06:2f:45:04:13:35:3e:04:0f:af:46:d9:da:a7:0e:
f6:f4:7c:63:70:16:b1:78:53:8a:08:c0:a7:28:4d:
41:75:23:a7:1d:89:58:a8:c5:06:ac:52:9b:44:9e:
c7:91:e9:5f:51:ef:fa:a8:53:51:82:8c:63:e5:64:
be:3b:aa:ff:6f:e5:3d:d6:60:e4:d8:66:41:02:a0:
37:b0:3e:59:63:3b:83:dc:c1:b3:00:68:93:11:f1:
5c:23:6e:94:00:6d:ba:f1:a3:16:db:c6:5d:37:5e:
e1:09:60:25:01:c5:49:e3:2d:bf:0e:67:de:bd:c4:
9f:dd:ea:f9:af:5e:c9:17:9e:0c:2b:8e:10:4c:8e:
9c:63:89:79:dc:81:b4:06:8b:6c:c8:02:4a:1a:68:
d0:57:a4:3e:42:3b:9c:84:0d:ad:49:5b:aa:0a:e6:
e0:4a:36:bc:12:86:90:d8:ff:ac:48:24:d2:c4:76:
f9:73:11:41:62:6c:bb:64:3c:d2:09:67:d6:6f:cd:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:7D:E0:26:08:C9:D5:4F:7B:EC:19:4E:EF:0E:67:89:CD:D4:E0
X509v3 Authority Key Identifier:
keyid:2D:0F:33:E0:25:4B:FA:03:93:89:CD:1B:2C:EE:89:EC:A1:DD:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:df:a0:3f:b3:14:e7:b1:81:4b:2c:cd:c6:7f:b9:e5:e7:4a:
65:a6:43:50:76:32:17:cc:24:97:e8:d7:64:bf:83:bb:3b:7f:
2d:63:8e:5f:0c:bc:b5:c3:11:97:45:98:fd:29:c7:84:16:27:
94:06:75:fa:d0:0c:09:1c:c8:a7:ca:eb:f5:27:e9:ae:9a:66:
75:e5:8d:06:ad:6a:39:f6:6b:1f:fb:04:da:e1:c2:86:9b:20:
8b:ef:63:0d:2b:b2:43:16:64:86:cd:4b:30:1b:ea:9f:8b:a2:
38:4d:33:ad:30:3f:e3:eb:11:4e:69:24:11:83:e2:70:27:9d:
f1:bf:e0:10:40:a5:04:5e:c9:e1:55:68:5c:79:4e:19:d7:33:
75:3c:2c:86:86:da:be:f4:13:2f:d7:f4:53:12:0f:76:e2:6d:
70:ee:0d:0f:2b:d4:a0:39:e0:23:ee:d7:e9:83:9e:9b:a7:05:
1f:b8:6b:d0:5f:9c:4e:82:b4:1a:1e:71:29:14:de:37:09:36:
7a:9c:2c:4a:dc:4f:c5:5f:75:d8:8f:47:6e:82:d5:37:f0:45:
73:c9:f7:4d:1b:e7:7a:01:6d:e9:2a:f1:ec:03:c4:1b:1e:cb:
c1:a2:ef:4b:44:da:af:3e:9a:d7:0c:b0:e6:29:4d:92:8c:be:
79:79:b8:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0NuCbfkKaY0maWBW+Aq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGYzM2UwMjU0YmZhMDM5Mzg5Y2QxYjJjZWU4OWVjYTFk
ZDlhNjAwHhcNMjUwMjAyMDQwMDA5WhcNMjUwMjAzMDQwMDA5WjAzMTEwLwYDVQQD
EygwNjg4N2RlMDI2MDhjOWQ1NGY3YmVjMTk0ZWVmMGU2Nzg5Y2RkNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqwrC0kcvtKiraY9TFnVQZl8Sdzn
ui7oEpYOjkQTY8I2sY0RfOoAWX5fiXcelYFkkloJFYrCHJpc4/wGL0UEEzU+BA+v
Rtnapw729HxjcBaxeFOKCMCnKE1BdSOnHYlYqMUGrFKbRJ7HkelfUe/6qFNRgoxj
5WS+O6r/b+U91mDk2GZBAqA3sD5ZYzuD3MGzAGiTEfFcI26UAG268aMW28ZdN17h
CWAlAcVJ4y2/DmfevcSf3er5r17JF54MK44QTI6cY4l53IG0BotsyAJKGmjQV6Q+
QjuchA2tSVuqCubgSja8EoaQ2P+sSCTSxHb5cxFBYmy7ZDzSCWfWb83YYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaIfeAmCMnVT3vsGU7vDmeJzdTgMB8GA1UdIwQY
MBaAFC0PM+AlS/oDk4nNGyzuieyh3ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFE4ejRDVkwtZ09UaWMwYkxPNko3S0hkbW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iZDA2YzQtZDkzNy00ZGM2LWIxNDkt
MTBkZThjMGY5MmM4LzEvTFE4ejRDVkwtZ09UaWMwYkxPNko3S0hkbW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iZDA2YzQtZDkzNy00ZGM2LWIxNDktMTBkZThjMGY5MmM4
LzEvTFE4ejRDVkwtZ09UaWMwYkxPNko3S0hkbW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9+gP7MU
57GBSyzNxn+55edKZaZDUHYyF8wkl+jXZL+Duzt/LWOOXwy8tcMRl0WY/SnHhBYn
lAZ1+tAMCRzIp8rr9SfprppmdeWNBq1qOfZrH/sE2uHChpsgi+9jDSuyQxZkhs1L
MBvqn4uiOE0zrTA/4+sRTmkkEYPicCed8b/gEEClBF7J4VVoXHlOGdczdTwshoba
vvQTL9f0UxIPduJtcO4NDyvUoDngI+7X6YOem6cFH7hr0F+cToK0Gh5xKRTeNwk2
epwsStxPxV912I9HboLVN/BFc8n3TRvnegFt6Srx7APEGx7LwaLvS0Tarz6a1wyw
5ilNkoy+eXm40g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:26 2025 by rpki-client