Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft
File: LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft (raw, json)
Hash identifier: K5ZrktbziFVEcq/asGOPZQJtxPWNJVpLI9TDx6hntdo=
Subject key identifier: D3:06:46:05:E2:FE:98:B3:CC:43:C9:C8:BB:A1:F2:7E:37:B7:A8:12
Authority key identifier: 2F:08:31:85:7D:3E:D8:B8:7E:72:87:D9:FE:AA:95:28:5B:98:3E:6B
Certificate issuer: /CN=2f0831857d3ed8b87e7287d9feaa95285b983e6b
Certificate serial: 0193568AFEB1717C75B7216007DE2067DAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwgxhX0-2Lh-cofZ_qqVKFuYPms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft
Manifest number: 11E4
Signing time: Sat 23 Nov 2024 01:02:49 +0000
Manifest this update: Sat 23 Nov 2024 01:02:49 +0000
Manifest next update: Sun 24 Nov 2024 01:02:49 +0000
Files and hashes: 1: LwgxhX0-2Lh-cofZ_qqVKFuYPms.crl (hash: cTphpn9AW8gEnxyzt5oXlFCoTq7QvazxNvjfAcYhrsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwgxhX0-2Lh-cofZ_qqVKFuYPms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:fe:b1:71:7c:75:b7:21:60:07:de:20:67:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0831857d3ed8b87e7287d9feaa95285b983e6b
Validity
Not Before: Nov 23 01:02:49 2024 GMT
Not After : Nov 24 01:02:49 2024 GMT
Subject: CN=d3064605e2fe98b3cc43c9c8bba1f27e37b7a812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:8d:b8:af:f0:96:d2:9f:6e:2c:bb:cf:a8:
d4:48:3c:db:b6:aa:6a:6c:5f:d2:30:aa:e2:a9:3c:
ee:53:ce:cd:0c:33:33:38:5a:f3:2e:ff:47:42:61:
fe:cd:cb:1d:46:d9:4d:31:51:15:45:bf:79:ca:f3:
4c:68:58:75:92:79:24:4b:52:49:64:02:e9:4e:f0:
f9:c1:53:99:31:ca:c0:68:03:04:dd:18:b3:03:cf:
28:d8:43:e6:ff:c1:8a:1e:6d:ba:78:4a:4a:98:7c:
3b:58:3c:2f:80:98:a5:e9:6e:ff:58:27:96:78:cd:
72:f9:d6:db:9f:39:76:5a:2a:5e:8a:74:05:5b:b4:
51:2b:91:ad:f7:ee:05:af:c1:8f:f1:58:24:f2:78:
bf:c5:b5:3a:8a:17:7a:f7:51:b8:91:94:2e:cc:77:
7e:2d:a2:f4:0c:3f:4a:59:9b:40:45:d5:5f:84:fb:
59:45:1c:87:17:19:b8:59:c9:ff:bd:ca:7c:6c:b3:
2a:d4:8a:f3:f5:dc:2f:af:bc:6f:95:4e:81:63:8f:
6b:d8:f1:49:76:c1:5d:4c:1e:e5:15:55:db:b5:ea:
b6:31:9a:c1:ff:29:09:86:84:b6:19:34:c8:72:ae:
7f:dc:fc:fb:9f:b6:a2:2a:41:73:07:f1:5d:8e:c7:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:46:05:E2:FE:98:B3:CC:43:C9:C8:BB:A1:F2:7E:37:B7:A8:12
X509v3 Authority Key Identifier:
keyid:2F:08:31:85:7D:3E:D8:B8:7E:72:87:D9:FE:AA:95:28:5B:98:3E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwgxhX0-2Lh-cofZ_qqVKFuYPms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f0:e3:98:11:8e:e5:b9:58:ae:ce:aa:4f:77:bd:ed:ad:ef:
f7:7b:d0:c8:63:ff:f6:0b:22:98:56:58:92:f1:2b:36:ed:ef:
ce:30:c9:f8:c4:a3:57:66:78:96:a9:a7:2c:68:93:27:09:2b:
9d:e4:a9:53:12:38:85:e1:0f:ef:b7:47:ac:54:3e:c8:44:ac:
93:08:dc:03:0f:f9:13:b5:bb:85:32:1d:d3:37:2d:c7:2c:60:
ad:b7:8a:6f:04:be:61:c9:04:44:63:79:8b:2a:f5:00:41:fb:
16:5e:ab:2e:b4:4b:5a:1c:6c:12:f0:02:73:85:b8:a3:00:03:
29:95:68:e1:18:2d:e6:66:a6:c2:22:98:f7:ee:03:9f:49:6c:
47:87:d3:2b:d0:aa:f7:bd:2f:57:3e:9d:93:37:60:2a:32:23:
5a:57:60:09:a3:94:7a:4e:53:17:65:5d:22:a7:83:67:bb:98:
28:68:cf:c3:02:a3:f5:6c:39:28:1a:bf:57:94:d3:0b:37:f3:
52:e0:a3:9c:49:ae:97:84:01:a3:f5:d8:f1:1c:2f:33:5a:4b:
ce:33:88:51:d0:0a:03:ec:d1:b1:59:54:e9:bf:01:90:6b:61:
85:64:e5:0e:48:cb:ae:52:5b:89:43:70:c9:ce:bb:42:10:f4:
6b:13:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:53 2024 by rpki-client on console-fra.rpki-client.org