Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File: lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier: 9qbP09w/Ik/Lb/c1VTvwTWWE4eNSVNsLphjTck/2Ps4=
Subject key identifier: 53:A3:AF:55:30:E7:94:17:9C:06:B7:EA:0B:22:62:2F:03:CF:C8:8F
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 0194C4D0E3495A74BB001E8A5A2A137779A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number: 095F
Signing time: Sun 02 Feb 2025 04:00:11 +0000
Manifest this update: Sun 02 Feb 2025 04:00:11 +0000
Manifest next update: Mon 03 Feb 2025 04:00:11 +0000
Files and hashes: 1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: 2tJyMtmxFaJGxDVCGB9bEY9yE6r3nerLtbUeMnwzDdA=)
2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:e3:49:5a:74:bb:00:1e:8a:5a:2a:13:77:79:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Feb 2 04:00:11 2025 GMT
Not After : Feb 3 04:00:11 2025 GMT
Subject: CN=53a3af5530e794179c06b7ea0b22622f03cfc88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:4f:ea:04:0f:46:e3:8d:1a:34:8b:6a:f1:
63:0a:ab:3d:ab:e0:b0:cf:72:ee:54:bc:2d:9e:b5:
dd:f3:13:0b:b2:5c:e8:d3:40:60:47:ae:81:f3:3d:
9f:78:44:ff:c8:9e:ce:80:a9:44:2f:da:10:88:6d:
12:8b:c9:b0:55:71:bc:4f:72:d6:e9:c9:0f:fe:e5:
13:7a:7f:ba:d7:84:52:0f:29:e9:b0:92:e8:28:3e:
ca:42:da:05:d9:df:26:0e:92:a5:b5:71:c1:b2:ca:
f7:a3:44:5d:61:41:0b:1a:bb:4e:d1:50:51:6c:60:
44:c0:3c:76:99:26:74:a5:32:6e:5c:f0:d4:c5:56:
07:a5:64:fc:0e:15:27:28:e0:e6:d4:40:b4:c1:2c:
44:e4:fd:29:7a:d7:51:20:c9:88:08:8d:25:68:79:
bf:53:70:9c:18:a5:f5:1d:15:c4:c6:d2:f0:f0:7a:
dd:fe:5d:33:c1:ed:2d:ae:0c:94:dd:06:47:9e:6f:
84:26:29:e0:07:fc:ae:e1:c4:99:80:50:a1:34:ed:
7f:1a:ef:74:04:5e:26:7a:fc:63:e8:d6:18:44:3a:
4d:07:7c:fb:74:00:68:57:8d:ff:2c:e2:e7:2c:4f:
76:77:fe:cb:f1:0e:04:ec:fb:bc:85:a1:5f:3a:dd:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:AF:55:30:E7:94:17:9C:06:B7:EA:0B:22:62:2F:03:CF:C8:8F
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:10:89:20:64:28:2b:1f:dc:d1:00:a5:07:87:e1:cc:73:5c:
f0:4f:a1:17:75:58:22:e9:d6:7d:f2:68:98:4e:79:ec:35:13:
1b:48:67:27:4e:db:ac:6a:17:8e:32:16:ab:74:40:39:33:85:
59:96:11:4e:b8:2c:2f:54:e5:62:f0:d2:4e:aa:e1:57:42:17:
ee:6e:66:a8:0d:be:52:39:86:ca:85:0b:34:ce:10:77:34:8e:
41:ad:71:8e:9d:ca:02:09:c2:4d:87:d4:1d:94:36:b9:e3:53:
43:8d:b7:00:6a:10:e4:a1:d8:96:1b:8e:36:49:f0:e6:4c:26:
11:c9:66:09:ca:f2:79:0c:a5:c5:31:ad:d7:10:d3:08:2c:e4:
c6:d1:43:25:7a:21:fa:a8:d3:01:5b:e4:da:af:2e:52:ab:af:
a5:61:7f:9e:12:81:90:8d:af:6e:89:e2:bd:1b:f3:16:96:cd:
d4:d3:56:0c:0d:99:b0:a8:05:66:e8:2e:50:b8:48:c2:f5:22:
1b:51:c6:23:4b:b0:3c:52:c2:6a:ca:a5:15:62:8e:d8:08:fe:
3e:25:99:c7:52:66:c9:5b:51:05:40:7a:46:de:ba:27:f8:6d:
ed:ee:e6:3a:6d:40:ab:4a:43:8b:27:03:03:32:64:40:31:53:
08:d7:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:43 2025 by rpki-client