Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: hMQhMcnVYPjv1de5QGxdnFRmCS6v5d3N+W/WCSD56SQ=
Subject key identifier: 45:58:2A:AB:7D:E0:62:62:33:37:8A:D1:F9:92:01:70:E3:09:3C:5C
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 0194C49A38D1920C63CCF24BBBEC4A656A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 03B4
Signing time: Sun 02 Feb 2025 03:00:28 +0000
Manifest this update: Sun 02 Feb 2025 03:00:28 +0000
Manifest next update: Mon 03 Feb 2025 03:00:28 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: UYesYL3iSd7ECefatNHDhokkUMmgfsU+wBR+SDubw20=)
2: mYh-qCmaZDKpRaEP5mJEDlY8uOo.roa (hash: n/GDBDbA1t8MPsRWLpJVKlD7pNNzCkXSyPdnuFSxeus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:38:d1:92:0c:63:cc:f2:4b:bb:ec:4a:65:6a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Feb 2 03:00:28 2025 GMT
Not After : Feb 3 03:00:28 2025 GMT
Subject: CN=45582aab7de0626233378ad1f9920170e3093c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:dd:45:d6:5c:bb:46:7e:f9:54:cf:83:89:
80:ca:cc:ca:7f:71:f8:6a:a8:fe:b7:98:fd:ea:93:
5a:a3:c6:05:b1:c2:32:f1:9b:27:e3:11:0d:29:3b:
05:c4:b5:c5:d8:83:9d:8b:96:72:b0:2f:fd:31:a3:
4e:c6:85:3a:db:0b:6c:04:15:93:16:99:d8:84:2e:
a5:6f:90:9e:ae:c2:08:e3:e9:fc:a0:ea:41:cb:1d:
3e:2a:7c:4c:23:89:c6:f3:47:50:7a:8b:f9:ca:ab:
3a:88:c0:87:0a:e3:c2:36:5d:21:37:57:7a:67:29:
b6:a2:e6:29:c9:82:70:52:d2:67:79:89:a6:dd:2c:
e5:f9:6b:0b:03:56:60:e1:b2:42:2e:36:2a:48:a9:
cd:0a:f7:e9:75:11:10:a3:5f:b1:1d:54:86:fe:93:
85:15:f9:3f:5c:60:e6:10:fb:c0:d3:d7:9c:cd:1f:
e3:e2:4e:54:b9:35:4e:41:54:6a:83:31:1b:d9:ef:
2b:44:4f:12:ed:7c:9c:a5:3a:34:fd:a0:18:18:62:
08:de:da:07:8e:f2:92:08:ed:d0:ee:38:c2:68:96:
a9:35:02:87:38:f3:62:eb:98:de:a8:09:1d:6d:ae:
f2:35:bc:f5:6f:87:a5:86:c6:ca:3f:bd:d7:f9:22:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:58:2A:AB:7D:E0:62:62:33:37:8A:D1:F9:92:01:70:E3:09:3C:5C
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c6:92:70:ac:12:dd:61:d8:95:87:60:cd:50:fc:b7:4c:ee:
ff:1a:1d:3e:b4:93:dc:cb:8d:cf:91:f3:bd:cf:9d:ff:66:9c:
d6:bb:c4:f0:a3:a0:ab:35:35:55:e0:b9:95:ba:aa:75:0c:af:
3b:86:f4:37:5e:7e:ff:b9:c0:1d:07:07:61:36:1a:4e:7c:e1:
64:ff:a6:11:f5:0d:05:27:c2:a9:62:24:ec:11:c2:b7:da:c3:
32:14:a9:c9:fb:f0:b8:9b:7f:d2:c7:51:14:35:7b:a6:0b:a0:
99:f8:13:89:67:a4:1b:1d:a4:dc:5f:0f:18:8f:ab:11:df:9f:
96:d2:e9:3e:a2:fa:74:07:38:d8:85:0a:f0:49:ce:57:53:c8:
cf:87:4e:96:c5:ec:02:41:86:5b:61:98:3a:3a:ff:53:dc:9f:
33:94:21:52:3f:19:2f:81:d4:10:a7:00:b6:08:bb:64:cd:3f:
f1:5f:9e:5e:ce:34:5a:36:03:2f:11:5b:76:07:68:13:7d:22:
2c:00:00:84:98:98:22:8d:6e:2c:1f:c7:ae:e4:86:ee:39:87:
22:df:13:c2:5a:ad:4e:b4:c3:bd:5a:48:5b:10:49:ca:6f:41:
c8:6d:87:28:20:b8:4f:01:1f:0b:f3:e3:32:62:27:f6:13:97:
f3:b4:11:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmjjRkgxjzPJLu+xKZWp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOWU0OTk2MjA3M2Y5ZWZiNjZhNGIzMDM1MDZkYTYzNDE1
Njc0NTAwHhcNMjUwMjAyMDMwMDI4WhcNMjUwMjAzMDMwMDI4WjAzMTEwLwYDVQQD
Eyg0NTU4MmFhYjdkZTA2MjYyMzMzNzhhZDFmOTkyMDE3MGUzMDkzYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW7dRdZcu0Z++VTPg4mAyszKf3H4
aqj+t5j96pNao8YFscIy8Zsn4xENKTsFxLXF2IOdi5ZysC/9MaNOxoU62wtsBBWT
FpnYhC6lb5CersII4+n8oOpByx0+KnxMI4nG80dQeov5yqs6iMCHCuPCNl0hN1d6
Zym2ouYpyYJwUtJneYmm3Szl+WsLA1Zg4bJCLjYqSKnNCvfpdREQo1+xHVSG/pOF
Ffk/XGDmEPvA09eczR/j4k5UuTVOQVRqgzEb2e8rRE8S7XycpTo0/aAYGGII3toH
jvKSCO3Q7jjCaJapNQKHOPNi65jeqAkdba7yNbz1b4elhsbKP73X+SKkRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVYKqt94GJiMzeK0fmSAXDjCTxcMB8GA1UdIwQY
MBaAFCyeSZYgc/nvtmpLMDUG2mNBVnRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEt
MjFjZDI5MGMwM2YzLzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEtMjFjZDI5MGMwM2Yz
LzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsaScKwS
3WHYlYdgzVD8t0zu/xodPrST3MuNz5Hzvc+d/2ac1rvE8KOgqzU1VeC5lbqqdQyv
O4b0N15+/7nAHQcHYTYaTnzhZP+mEfUNBSfCqWIk7BHCt9rDMhSpyfvwuJt/0sdR
FDV7pgugmfgTiWekGx2k3F8PGI+rEd+fltLpPqL6dAc42IUK8EnOV1PIz4dOlsXs
AkGGW2GYOjr/U9yfM5QhUj8ZL4HUEKcAtgi7ZM0/8V+eXs40WjYDLxFbdgdoE30i
LAAAhJiYIo1uLB/HruSG7jmHIt8TwlqtTrTDvVpIWxBJym9ByG2HKCC4TwEfC/Pj
MmIn9hOX87QRFA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:40 2025 by rpki-client