Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: WN77kXhW58DZT+GDDgZ+TYoZL5fNDArKTTKMPBaRPsM=
Subject key identifier: 71:60:55:04:73:C9:D7:12:8B:40:F0:7D:65:0E:C8:F6:02:5E:FB:D6
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 019511A2AE018EC35416E5FA2BFAD18128C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1452
Signing time: Mon 17 Feb 2025 02:00:28 +0000
Manifest this update: Mon 17 Feb 2025 02:00:28 +0000
Manifest next update: Tue 18 Feb 2025 02:00:28 +0000
Files and hashes: 1: Cb_VZxWIl2cY2o2ZBTucsnEEWjg.roa (hash: /SsWz/hUvU9SGekEx+HWP4EztqAG6V0iTZmAGxcY5SU=)
2: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: oEaQ6/xBuWhC/nmC/2fK7uANK4nrFneZk5hCSe6oXrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ae:01:8e:c3:54:16:e5:fa:2b:fa:d1:81:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Feb 17 02:00:28 2025 GMT
Not After : Feb 18 02:00:28 2025 GMT
Subject: CN=7160550473c9d7128b40f07d650ec8f6025efbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:45:bd:b7:b4:f4:39:56:01:10:ce:39:12:
10:9f:8e:53:72:d5:e4:df:d3:12:1a:1e:fa:e1:d8:
04:e3:b7:a0:53:b3:a4:c2:1c:8a:52:e4:87:31:64:
25:8b:4b:64:72:ea:db:02:7e:2e:b3:ce:84:d4:b8:
52:1f:42:b7:9a:26:69:c7:10:39:df:19:bd:61:b9:
f9:fb:65:f6:0c:4e:d2:9c:4b:01:80:90:0a:83:14:
38:b5:b1:59:b6:d3:ce:c0:5b:16:53:ce:54:5d:87:
e1:98:db:37:f3:e0:33:dc:a7:6e:24:b9:14:f3:fc:
af:b2:65:58:66:b8:49:00:48:33:7c:ee:83:d4:e9:
a6:81:1a:5f:42:a7:bd:c0:fb:24:32:79:25:68:e2:
d2:67:e8:aa:e5:b7:07:1d:96:3e:5b:eb:1c:1e:59:
6e:18:73:a1:96:5f:ab:0d:0f:ce:d4:8f:91:9a:40:
cd:a0:72:59:d9:8c:20:91:85:dd:31:55:90:6a:24:
ce:0a:73:89:06:eb:eb:da:25:09:c1:fc:88:1d:91:
7e:26:19:52:27:04:6d:49:0f:2a:d0:c0:56:73:6e:
d6:3f:65:17:91:6c:5a:93:3a:00:2a:14:f6:29:7c:
5c:1e:5c:04:26:e0:39:33:4c:c1:61:fd:14:42:d7:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:55:04:73:C9:D7:12:8B:40:F0:7D:65:0E:C8:F6:02:5E:FB:D6
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cb:b4:c4:04:47:13:1f:85:a9:d7:6c:22:1d:56:18:4f:6e:
ad:c0:e9:32:06:4b:7d:c0:19:38:ec:71:c7:d7:9d:5c:62:a0:
dd:82:05:dd:22:31:52:be:31:74:a9:f0:dc:1a:ad:f1:42:9b:
03:03:d8:30:81:b9:01:48:40:15:14:3c:b7:0d:3d:1a:49:50:
43:b6:1d:15:2f:04:19:ef:22:8a:c1:0b:67:a8:93:11:7c:30:
b7:6a:ad:19:ea:0b:8f:6e:d8:8b:80:1a:4f:de:12:c5:fc:0d:
f3:99:ad:f3:02:48:ae:4f:f8:a9:7a:61:8f:75:d3:f5:34:11:
d5:bd:92:5a:b0:5a:fa:9f:db:85:04:7e:5e:12:5c:0e:b5:0c:
18:35:eb:53:00:6e:92:6d:9e:ea:80:66:58:f5:4b:fc:37:4e:
8e:08:a1:cd:a6:b7:a6:b6:c9:2c:d0:11:70:fc:29:51:0f:1e:
ff:ac:8e:f5:de:36:68:25:fe:0f:da:1b:7b:53:f3:4f:68:a0:
d2:c2:98:49:fa:3d:07:e4:e8:e1:2b:03:69:7a:aa:91:6b:15:
52:82:88:5c:c8:57:65:0e:c8:0a:43:be:cf:56:0b:c8:a2:58:
37:2e:9a:22:76:1c:21:c5:7c:f1:51:4d:f1:d0:34:1f:08:b5:
03:76:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:23 2025 by rpki-client