Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: QOLlBARH/2i16sgHL8neTwUhkTtv/G1E3coWdJN0VSE=
Subject key identifier: 23:6E:BB:0B:84:E9:82:F7:04:E7:02:E3:07:51:33:E3:86:61:C9:15
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 0195121046A9D57A006202F2AFEA70F702A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 0BD2
Signing time: Mon 17 Feb 2025 04:00:11 +0000
Manifest this update: Mon 17 Feb 2025 04:00:11 +0000
Manifest next update: Tue 18 Feb 2025 04:00:11 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: RvUZNM62/JduYcN7W1FV0AQdDY3HCh3iajJDp5dDAk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:46:a9:d5:7a:00:62:02:f2:af:ea:70:f7:02:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Feb 17 04:00:11 2025 GMT
Not After : Feb 18 04:00:11 2025 GMT
Subject: CN=236ebb0b84e982f704e702e3075133e38661c915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:4a:61:99:a0:9d:c9:ff:85:cf:19:06:11:
35:17:5b:df:41:26:3a:a0:bd:e1:56:0a:62:41:f0:
54:0d:04:1c:3a:2e:ef:df:08:7e:71:fd:b3:b4:ef:
bb:2c:0b:83:26:ed:c6:68:45:63:31:c5:3c:02:69:
2c:67:9c:d1:88:df:a2:9b:80:fc:2b:af:70:97:4e:
22:b8:92:30:0b:d4:d0:59:e6:b3:24:c2:b5:99:f9:
94:d6:5c:ae:47:59:0b:ed:82:e9:c6:01:69:65:b6:
87:74:d6:3f:64:9c:b1:55:6f:73:f8:f8:68:45:9c:
c4:dc:31:4b:4f:48:e1:e2:93:51:8e:fb:cb:fb:d8:
50:f0:ea:ca:4c:0d:cf:43:4a:33:a3:5f:7a:aa:84:
cd:dc:79:14:17:99:97:62:8c:0c:46:67:69:34:63:
49:d9:0a:1d:49:c4:a7:6d:f5:ce:7b:44:f1:93:b3:
4c:93:8d:06:78:aa:3d:bb:3a:ce:83:6c:2d:87:2e:
0a:8d:4e:70:71:8d:ba:07:51:95:4c:61:0c:1e:20:
6f:5e:24:9e:58:29:02:a0:0d:48:fe:ef:93:36:59:
fd:36:00:70:ab:c4:10:13:65:55:b9:5f:f5:cc:ba:
74:83:79:08:a6:f7:1d:97:1d:0a:b5:b4:fa:06:b4:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:BB:0B:84:E9:82:F7:04:E7:02:E3:07:51:33:E3:86:61:C9:15
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8d:92:e4:f5:b0:13:2c:42:4a:5c:10:f3:56:80:07:38:bf:
bf:ad:e4:ad:b6:2a:25:9d:73:dc:8b:57:bc:94:d4:ea:53:8f:
35:7c:6d:e7:75:e5:7b:8d:6a:9d:32:a0:a3:3b:69:52:40:13:
5d:88:6d:05:22:4b:c3:95:59:15:11:cd:d8:76:87:0b:85:f0:
c0:fd:19:6e:82:9a:c3:bc:74:1a:dc:f0:0c:74:84:1d:1b:13:
e2:8d:33:f6:8f:9d:ab:8a:5d:36:07:26:66:1f:dc:83:68:eb:
98:26:db:c7:57:ce:7a:ab:04:64:15:18:00:99:1e:62:c6:88:
da:62:a9:8b:30:63:af:bb:9c:08:73:fc:20:81:7c:2c:f0:31:
22:21:95:91:33:3a:27:2e:ca:65:2d:e6:91:8d:de:07:fe:c5:
8c:75:24:04:34:87:79:fb:0f:36:32:49:16:6d:85:bf:81:52:
15:34:14:05:c0:00:51:47:85:72:35:98:d8:64:23:57:d1:c1:
32:f4:ce:43:73:5c:91:61:fd:d9:ad:e7:da:66:5c:5c:82:49:
65:c6:65:42:25:97:ad:bc:dc:d6:bd:02:31:6d:85:46:35:80:
8a:d2:63:2b:c7:bf:7d:70:03:72:dd:5d:86:e4:54:b9:f3:6c:
83:5a:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:52 2025 by rpki-client