Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: 2O60/3BMKXU6BAC9plwDn6ETgccq1Kaj91X3FoMv/GA=
Subject key identifier: 36:9F:7B:13:38:21:EF:37:CF:FA:29:FA:4B:22:AF:38:19:E5:99:00
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 0194C3884B190EEE9ED24E0908C66AC0358C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1430
Signing time: Sat 01 Feb 2025 22:01:16 +0000
Manifest this update: Sat 01 Feb 2025 22:01:16 +0000
Manifest next update: Sun 02 Feb 2025 22:01:16 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: s7ZiK+OvQ5UvWh7k8bCO4tILUM1C/QFjgOqulg4lUzw=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:4b:19:0e:ee:9e:d2:4e:09:08:c6:6a:c0:35:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Feb 1 22:01:16 2025 GMT
Not After : Feb 2 22:01:16 2025 GMT
Subject: CN=369f7b133821ef37cffa29fa4b22af3819e59900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:44:04:22:06:5f:27:a1:3c:e7:8a:44:cf:
85:69:7b:e5:56:7d:4c:52:ff:93:fd:09:35:50:98:
f2:77:f1:a7:d5:e2:34:ab:e7:70:f9:e9:d1:ca:cd:
e2:3d:17:f9:4f:13:79:3b:c2:83:18:96:d6:86:72:
1d:ef:d0:ec:7d:50:75:0a:a4:b8:74:65:46:f1:d5:
8a:23:ab:52:27:46:3c:a8:ef:54:7b:0a:1d:62:db:
53:1c:73:89:64:44:9d:b4:0e:ee:79:50:25:7e:74:
c1:0b:1f:df:01:57:83:55:79:d5:ed:db:03:31:e3:
4d:77:13:89:f8:ca:f5:f1:92:85:cb:d9:26:66:e9:
7b:fc:2d:98:c8:ac:0b:ef:48:64:e4:9e:4c:e6:b2:
2f:cf:52:be:3e:1c:fd:ea:d5:9e:4d:4f:87:6b:41:
bc:80:64:b8:20:d1:a1:8c:60:5e:7c:3b:77:f4:41:
21:1e:ee:b0:d8:07:04:3c:de:e4:68:bf:ec:0d:f1:
dd:6c:c3:a3:a9:24:c7:15:91:29:cb:af:15:4c:e9:
91:99:bc:23:b2:00:38:48:ff:59:54:bd:8d:ed:9f:
fe:48:88:a8:2c:50:b5:6f:4d:ad:bf:22:2a:73:6d:
b5:e2:65:0a:84:32:4f:cd:e0:b6:e3:7d:c6:92:28:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9F:7B:13:38:21:EF:37:CF:FA:29:FA:4B:22:AF:38:19:E5:99:00
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:27:0a:22:d5:4c:d8:8f:2b:73:af:ee:e7:9b:c7:04:30:0b:
dd:f7:00:b9:a0:03:8c:51:a7:ac:6a:73:1f:21:8d:cf:c9:bc:
88:db:66:6e:4c:99:ce:46:99:ca:d7:36:b1:9f:f9:56:23:a4:
e4:75:84:e6:b3:93:d9:83:e7:5d:71:1d:7d:45:46:7f:51:26:
88:06:13:c8:a8:42:69:7e:6e:4d:bd:f4:01:e9:b6:b6:e7:df:
5f:1f:02:36:f0:88:61:b1:08:8b:56:de:44:25:38:3b:80:e4:
92:78:73:e5:64:ce:1b:39:77:c9:15:17:68:28:9e:58:56:80:
0d:99:34:9d:cc:b4:8a:98:cc:b2:51:11:eb:35:f0:c8:6d:5b:
3b:d7:67:0e:7f:c5:66:e6:1e:ea:86:16:38:96:d0:f2:66:24:
7b:f5:bf:18:cd:5a:be:17:84:be:f7:31:60:4b:45:66:b0:c6:
14:2f:78:23:50:05:d1:45:d9:fd:8d:30:dc:97:f3:25:bf:a2:
fe:c6:d9:4c:0a:f4:d2:a6:39:96:d0:71:a8:33:bb:77:c8:42:
85:99:f5:ab:f5:71:7f:4c:15:b7:d5:40:04:c0:68:2a:06:87:
81:01:06:8c:d4:8c:8c:5e:c9:5d:d2:9c:0d:ec:99:39:dd:65:
6a:b0:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:43 2025 by rpki-client