Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
File: LhznvOx_18KfCYu64NMSte46NF4.mft (raw, json)
Hash identifier: 4Tu95WVXLmSd3OJCTxKLqWDfrr2/QTfjQLzrlw0tBx4=
Subject key identifier: B3:87:F4:4E:50:9A:E0:69:AC:2D:1E:E6:C1:E6:73:59:AE:17:20:CE
Authority key identifier: 2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
Certificate issuer: /CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Certificate serial: 0194C3510B346D439980669A5F13CDF452E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
Manifest number: B2
Signing time: Sat 01 Feb 2025 21:00:55 +0000
Manifest this update: Sat 01 Feb 2025 21:00:55 +0000
Manifest next update: Sun 02 Feb 2025 21:00:55 +0000
Files and hashes: 1: LhznvOx_18KfCYu64NMSte46NF4.crl (hash: TZheznlZFHF7UnsE6VusaPGKL2VIg8/JlYraOzs9NM0=)
2: dGGMhhLDaoWkDWmK8o4AcoqcFuc.roa (hash: +aGKRXgqkoPg+9wbbAijk/9YLBVcGbYOuDtpc/CsaCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:0b:34:6d:43:99:80:66:9a:5f:13:cd:f4:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Validity
Not Before: Feb 1 21:00:55 2025 GMT
Not After : Feb 2 21:00:55 2025 GMT
Subject: CN=b387f44e509ae069ac2d1ee6c1e67359ae1720ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:f1:d7:22:42:aa:ca:4b:8e:c1:08:4f:ec:
32:07:9c:d7:da:e5:b3:fa:b2:86:51:a1:25:b6:73:
cb:ef:dd:d7:93:fa:a1:75:fa:37:a5:e8:97:32:a9:
ce:37:b4:75:02:b3:80:8e:88:d0:4e:7c:a5:22:f0:
06:8a:e0:63:3b:d9:1b:68:d5:23:58:97:fb:71:a2:
3f:2d:a2:6d:fd:4e:58:a1:27:bd:9b:96:80:77:21:
c5:88:4e:62:a8:48:5f:52:41:0d:86:d0:62:e8:bb:
26:04:87:7c:e3:61:aa:39:0e:d5:c3:07:7c:c1:26:
a6:2b:de:0b:4c:83:de:fa:71:a1:40:8b:2a:13:3a:
d1:bd:82:3a:1d:9a:51:63:2b:58:62:5b:5d:ee:85:
10:e1:69:84:a2:6c:a3:43:c6:8e:ea:47:4a:a0:f5:
1f:1a:dc:15:be:23:06:65:f3:3c:29:c9:72:57:b9:
2b:d9:5b:72:2f:e9:b8:2e:97:c6:50:55:07:24:4a:
d8:7a:99:09:9e:11:a5:55:8b:89:86:00:e4:a5:94:
41:5a:83:93:ec:39:f6:7f:1d:4f:06:4f:a5:aa:0c:
e0:13:45:ed:72:43:fb:aa:85:b3:e1:d1:f5:39:bb:
18:e8:00:71:86:8e:0a:59:aa:e1:37:51:b2:ee:df:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:87:F4:4E:50:9A:E0:69:AC:2D:1E:E6:C1:E6:73:59:AE:17:20:CE
X509v3 Authority Key Identifier:
keyid:2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0f:c6:24:e8:6a:69:da:da:8f:e6:b1:3e:10:d6:a1:fd:58:
ad:65:f4:a0:a0:d9:2d:40:b1:f2:5c:5a:9b:d7:28:0a:a0:d8:
24:73:8d:46:1b:0b:cb:c7:e7:6e:e6:0e:91:05:0c:95:d5:dc:
8b:5d:d5:7f:a7:26:39:9e:97:a0:90:c7:7f:f9:86:6d:06:2b:
c4:26:0c:67:e6:ae:19:27:c8:90:53:4a:3c:76:3e:4c:7e:4f:
71:13:dc:79:92:d4:bd:55:5a:d4:e9:d3:39:1b:58:d6:55:36:
79:17:ce:7e:04:0c:27:a4:07:e1:44:7c:5b:96:29:b8:9f:f7:
b4:c6:d6:97:57:0c:35:9e:ae:50:ea:d3:66:d7:1e:8b:58:f5:
a0:7f:dc:36:80:5a:60:72:c2:6e:44:d8:d6:a4:9d:85:b5:40:
58:7f:8a:d8:a0:05:29:70:20:f7:45:96:9e:18:98:5d:21:9c:
b9:d6:28:14:e3:51:70:b3:59:bf:80:d7:76:e6:af:3a:d0:5a:
f0:17:89:30:ca:ac:df:aa:1c:dd:ae:38:77:e6:c6:9a:6e:99:
28:51:49:f0:27:87:59:b9:62:29:2b:39:4c:39:b5:04:aa:9d:
17:b4:59:3d:d6:3d:59:89:b2:f3:fc:63:2c:6e:db:db:d9:4c:
1d:81:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:51 2025 by rpki-client