Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier: 1dA61xeNzq2Wx5Vo46MqI6K8mUKOV3tLozFSovlRjBQ=
Subject key identifier: DC:28:9B:2C:40:00:33:0B:3A:B4:1A:0B:FE:88:9F:1D:40:29:16:ED
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 0194C42C9C9B4CBB1F89C0785A974E9CE72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number: 0882
Signing time: Sun 02 Feb 2025 01:00:45 +0000
Manifest this update: Sun 02 Feb 2025 01:00:45 +0000
Manifest next update: Mon 03 Feb 2025 01:00:45 +0000
Files and hashes: 1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: cqmq2SghCcKBplPnOeea6RsmS2Aazos0nA5FTGYPbTY=)
2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:9c:9b:4c:bb:1f:89:c0:78:5a:97:4e:9c:e7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Feb 2 01:00:45 2025 GMT
Not After : Feb 3 01:00:45 2025 GMT
Subject: CN=dc289b2c4000330b3ab41a0bfe889f1d402916ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:02:0f:e8:82:52:88:f2:a3:a0:43:46:e4:
15:57:3a:58:e2:49:ab:6b:3b:fc:c3:85:03:01:63:
11:56:06:fd:43:62:ac:ca:f8:3b:34:ad:e0:2b:9d:
8d:ea:39:1a:30:70:b5:ff:f9:32:63:dc:f4:57:94:
76:b0:ba:80:8b:ee:11:4c:a7:e0:0c:0a:15:53:2f:
35:92:22:23:cd:da:f1:85:2a:d5:f5:19:33:11:45:
90:d9:43:4c:61:ab:50:de:dc:5b:f7:00:1e:82:2e:
c7:7a:07:92:ed:bc:21:32:18:1b:25:54:72:fb:96:
5a:77:ac:70:12:88:42:c1:6e:37:1d:90:16:20:11:
9c:2c:99:17:1b:57:69:05:12:09:1a:70:9a:9f:96:
16:f4:77:cd:86:16:33:13:39:a1:f7:a8:7d:19:fa:
0f:41:70:67:31:61:5c:75:66:9b:47:52:65:a2:be:
24:e3:5f:b9:e6:8c:12:52:6f:ff:ba:b7:2c:95:0c:
f9:ea:c9:85:d1:f2:7c:d5:3e:79:0a:72:49:7d:43:
67:07:a6:ce:94:ef:af:36:d4:4b:51:1e:6f:ea:dd:
72:62:9c:42:cc:3b:ef:c5:a6:5e:82:b9:46:4c:62:
c1:92:96:a7:24:54:5f:7d:a3:4d:24:71:2d:c9:7a:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:28:9B:2C:40:00:33:0B:3A:B4:1A:0B:FE:88:9F:1D:40:29:16:ED
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:df:36:91:b9:e4:ec:7a:df:ae:2f:0a:eb:56:e6:d7:22:0d:
66:69:b0:9f:e1:6d:c7:f0:ae:d7:f3:6f:ca:aa:c1:d0:0a:40:
8a:cd:44:62:66:f4:f4:ed:df:75:f9:53:c3:71:61:52:ab:ad:
50:ac:55:16:6d:34:9a:e5:5b:a7:73:e2:70:bb:b0:cc:86:98:
16:c6:a6:83:4e:3d:53:e9:4e:ca:27:6e:46:6e:72:74:c1:b7:
be:67:1e:e6:07:ee:b2:4a:fc:2b:96:2b:9c:07:1c:c0:02:89:
b7:5e:de:b3:29:ed:55:c1:ab:aa:d6:50:37:b0:81:cd:25:ee:
6e:8a:1b:9a:c1:e5:d7:80:f2:88:76:78:78:df:f2:63:4b:c9:
b0:39:97:6a:1c:eb:20:ee:40:30:1e:50:c0:13:ec:d3:db:c8:
35:33:65:09:53:bb:ee:7d:08:4e:bd:7b:b4:2b:6f:9a:af:97:
98:34:21:dc:e0:b7:59:ae:ce:4b:64:60:7d:8a:11:64:e6:f5:
76:b8:6a:02:57:65:4b:6a:f1:31:27:34:ef:23:46:3d:12:a5:
a2:1a:69:bf:ba:00:65:6e:9b:c0:90:c4:41:1d:c8:6c:dc:cb:
c8:c0:9e:5b:48:ca:81:3b:fe:6d:76:0c:98:e3:8a:2b:ed:8a:
0a:11:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:40 2025 by rpki-client