Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: kILSZiezgcV0gygXk095gwRmZH9C0qjM9+1iEzIgOwU=
Subject key identifier: 5C:A0:F6:FE:A6:6B:61:D8:54:AB:22:2B:DE:2D:74:6D:0F:55:11:4E
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 019365FE27A9BAEB558E53BB91747300EE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 0F06
Signing time: Tue 26 Nov 2024 01:02:55 +0000
Manifest this update: Tue 26 Nov 2024 01:02:55 +0000
Manifest next update: Wed 27 Nov 2024 01:02:55 +0000
Files and hashes: 1: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: 8i+EBb6+2c/8xTBJfy1qTubpJCx9nLu77oKoadBYWxQ=)
2: vePyqbStWivJobjj1oVuVxnD0vI.roa (hash: eUSSXm08ep0EQYGw2J1+acsDCabZSz+FGBz4Cj1zFfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fe:27:a9:ba:eb:55:8e:53:bb:91:74:73:00:ee:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Nov 26 01:02:55 2024 GMT
Not After : Nov 27 01:02:55 2024 GMT
Subject: CN=5ca0f6fea66b61d854ab222bde2d746d0f55114e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:90:8f:3d:3d:87:3c:0e:08:c5:16:2b:58:
ab:3c:d1:a6:0a:f8:a5:a7:b9:01:43:3d:d5:e8:63:
4e:25:53:45:2f:8c:6d:ff:af:22:cd:57:8a:91:4a:
64:f1:51:06:0a:9c:bd:8b:14:90:29:3a:5e:a0:1a:
69:a1:2c:0e:5e:69:40:41:0d:1c:b6:88:39:5d:df:
01:a5:30:b2:cd:7a:2e:8a:64:c2:cf:8a:e4:b6:ba:
67:46:9c:fa:7e:df:3f:2a:f9:3f:d9:10:21:b8:f6:
56:49:49:dc:e6:3a:0d:2c:e4:0e:99:af:42:6f:69:
7a:3c:a3:2b:36:e3:dc:84:0c:ba:e7:f1:13:80:83:
e3:88:b5:0d:62:50:b1:13:2e:7f:29:b9:7d:6f:e5:
48:d5:9b:88:2d:ba:22:2f:6a:96:10:a0:37:7b:b5:
25:6a:6d:17:95:b3:29:b4:30:16:ce:da:b0:22:41:
76:50:4a:6a:c8:8e:41:56:fb:72:f7:2c:58:35:30:
51:be:9c:26:4e:f7:52:a5:29:5a:e0:75:d4:dc:f0:
7e:55:e7:fe:df:9a:b9:97:cd:f9:06:2c:8b:5f:ac:
09:9c:f1:83:92:88:1b:b8:60:74:8b:7f:fd:c6:6d:
20:82:fa:ea:76:a2:da:f4:8b:68:3e:3c:24:47:a7:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:F6:FE:A6:6B:61:D8:54:AB:22:2B:DE:2D:74:6D:0F:55:11:4E
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e7:d9:d6:98:2b:57:65:39:05:46:fb:c2:ff:20:9f:2d:3e:
a4:92:f5:b0:e6:85:1d:1f:07:ac:36:9b:6d:71:54:b9:c7:4d:
6d:82:da:1d:21:61:65:0a:d4:32:97:6e:4a:e2:ec:56:f2:31:
9a:3a:c9:0f:ed:20:e1:f9:a9:41:f0:e9:06:4c:2d:0b:b6:eb:
7d:3b:ee:16:0a:c1:34:b5:ea:28:3f:e1:56:c5:5f:7f:fc:85:
cf:5c:b6:d0:80:98:e8:2f:63:a7:e3:23:fd:98:db:4d:5c:13:
7d:c2:87:8a:4e:50:a2:66:bf:4f:29:82:dc:6d:a1:76:0f:1f:
ed:c6:28:ce:6f:13:7c:77:ec:d2:8c:1e:29:1f:b3:50:23:1a:
5f:99:96:e1:aa:09:05:56:94:e9:fc:f8:ac:4a:46:c3:a0:01:
7a:ed:fd:03:7d:47:24:08:d4:a1:13:d5:60:c7:b7:25:cc:6a:
a6:c2:21:de:0b:6e:37:1d:e1:d8:02:71:cb:db:05:e0:fa:d8:
ca:e5:30:b4:77:66:8e:59:47:00:df:b5:a3:4d:10:de:57:81:
ca:1c:cf:08:73:ac:40:27:39:a3:56:19:76:fe:37:0c:2d:d6:
88:04:04:be:29:08:b9:78:60:03:11:fd:4c:0b:02:f2:fa:eb:
9e:28:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:35:39 2024 by rpki-client on console-fra.rpki-client.org