Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: c0qODfbL9g4d6Sk0LAiNNcbbm1nbjlsl+4i1qJoEaB8=
Subject key identifier: FF:60:27:13:E2:96:45:8A:DD:47:43:F6:DE:01:C1:39:AA:32:01:36
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 0194C507F96D8CC97A15585A3E18FA25EAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 037D
Signing time: Sun 02 Feb 2025 05:00:21 +0000
Manifest this update: Sun 02 Feb 2025 05:00:21 +0000
Manifest next update: Mon 03 Feb 2025 05:00:21 +0000
Files and hashes: 1: 1-CqksZEngiad9GJ1laZb9kmUhDs.roa (hash: RFGoumzL1Ot9LozFC8/pBRuEEMi1Nkwj8cBdnCtnZ+Y=)
2: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: 6d5yDNrJHyuhkiuKAiGN1ccRQINspHhr9SfCyeOzYFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:f9:6d:8c:c9:7a:15:58:5a:3e:18:fa:25:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Feb 2 05:00:21 2025 GMT
Not After : Feb 3 05:00:21 2025 GMT
Subject: CN=ff602713e296458add4743f6de01c139aa320136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:86:b7:d3:ca:67:a7:c3:f9:49:9f:85:b7:
36:d5:0c:a9:e5:61:4c:19:0c:24:47:1b:2f:d6:1c:
9f:ed:62:06:57:18:a6:2d:77:00:77:b4:b5:d9:2f:
95:7f:3d:fc:f6:62:5d:ba:63:4a:a2:80:04:12:05:
4f:6e:c5:8d:83:0d:ee:f0:30:56:3f:44:7e:3e:d5:
e6:d8:f8:f4:a1:4d:9d:79:bc:49:f7:df:fe:6f:94:
4c:76:59:04:bc:3d:f9:cf:d6:f2:c2:b4:a1:4f:71:
2c:b2:d5:a5:b5:ea:d2:26:5e:69:b1:93:de:55:8c:
ee:d5:01:2b:74:35:e6:69:69:86:44:cf:b9:a3:d0:
db:b6:c6:a2:22:ad:80:66:d3:cd:f7:11:14:95:97:
18:8e:b2:62:de:52:bd:fd:d0:1d:02:e0:4e:01:de:
71:9e:a9:ac:ab:ad:ca:88:31:09:fa:2b:14:8e:43:
f4:13:4e:78:fc:3f:b7:a3:96:b0:db:b6:79:d6:77:
e3:e4:92:f9:0b:e1:9e:d1:95:6f:7f:1a:55:64:3b:
03:8d:c6:00:8b:96:7c:aa:53:bd:b1:41:8a:05:2d:
2e:b9:e7:21:c4:1c:7d:60:38:e7:2d:d4:06:51:55:
a4:e5:02:b0:e1:93:f4:37:2b:88:4f:b6:97:5d:0b:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:27:13:E2:96:45:8A:DD:47:43:F6:DE:01:C1:39:AA:32:01:36
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:aa:7e:5a:b1:45:2b:9f:6e:de:3a:c9:db:6b:71:91:2f:9e:
39:f2:94:55:d7:df:54:f4:4d:fe:4f:cf:fa:fd:9b:78:1d:3b:
25:cc:14:b4:91:5b:b6:66:c2:89:fa:71:97:3b:49:f9:c7:63:
66:7f:c5:4d:86:64:10:f0:ca:c2:14:41:94:06:8f:50:1a:1a:
3d:42:64:7a:1f:74:6a:fa:c5:f4:28:be:86:45:8d:a8:bf:bc:
3d:b7:24:31:e7:fe:2d:bd:3b:17:c1:1e:cb:a2:cb:65:a9:74:
b0:ba:c9:97:d6:b2:f7:ea:b7:f0:18:b8:30:b6:83:ea:2d:e7:
2e:49:f3:fc:e0:c8:66:1e:62:ef:d4:2d:ec:42:0b:56:8d:0f:
87:61:03:da:ba:09:a5:01:98:71:94:2c:bd:de:65:73:bf:68:
74:90:96:5b:2e:5e:6a:93:ed:97:78:0d:c8:72:f0:ba:8b:16:
b5:1f:a8:f5:96:bb:ab:cd:da:df:e3:7b:15:59:75:7b:c3:01:
e4:f8:60:1c:d1:ad:8b:25:1b:6d:63:45:c7:cb:e4:02:15:93:
be:b3:33:5f:f9:2d:db:2d:88:f9:91:71:c7:5f:9a:e1:de:71:
41:23:8e:2f:d9:38:81:11:25:8a:ab:7a:0b:23:66:f7:7a:48:
ba:76:61:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFB/ltjMl6FVhaPhj6JeqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx
M2QwOTYwHhcNMjUwMjAyMDUwMDIxWhcNMjUwMjAzMDUwMDIxWjAzMTEwLwYDVQQD
EyhmZjYwMjcxM2UyOTY0NThhZGQ0NzQzZjZkZTAxYzEzOWFhMzIwMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKqGt9PKZ6fD+Umfhbc21Qyp5WFM
GQwkRxsv1hyf7WIGVximLXcAd7S12S+Vfz389mJdumNKooAEEgVPbsWNgw3u8DBW
P0R+PtXm2Pj0oU2debxJ99/+b5RMdlkEvD35z9bywrShT3EsstWlterSJl5psZPe
VYzu1QErdDXmaWmGRM+5o9DbtsaiIq2AZtPN9xEUlZcYjrJi3lK9/dAdAuBOAd5x
nqmsq63KiDEJ+isUjkP0E054/D+3o5aw27Z51nfj5JL5C+Ge0ZVvfxpVZDsDjcYA
i5Z8qlO9sUGKBS0uuechxBx9YDjnLdQGUVWk5QKw4ZP0NyuIT7aXXQuacQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9gJxPilkWK3UdD9t4BwTmqMgE2MB8GA1UdIwQY
MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct
NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw
LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA26p+WrFF
K59u3jrJ22txkS+eOfKUVdffVPRN/k/P+v2beB07JcwUtJFbtmbCifpxlztJ+cdj
Zn/FTYZkEPDKwhRBlAaPUBoaPUJkeh90avrF9Ci+hkWNqL+8PbckMef+Lb07F8Ee
y6LLZal0sLrJl9ay9+q38Bi4MLaD6i3nLknz/ODIZh5i79Qt7EILVo0Ph2ED2roJ
pQGYcZQsvd5lc79odJCWWy5eapPtl3gNyHLwuosWtR+o9Za7q83a3+N7FVl1e8MB
5PhgHNGtiyUbbWNFx8vkAhWTvrMzX/kt2y2I+ZFxx1+a4d5xQSOOL9k4gREliqt6
CyNm93pIunZhpQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:59 2025 by rpki-client