Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: j9zpmsAic8k8+/HNKkhDrgsuYHgDYbFp7w4QHe3vk0A=
Subject key identifier: D8:64:AB:3F:1A:7D:9D:5F:1D:5A:D8:93:DA:6C:4B:61:F5:4F:FC:0E
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 0194C3BEAAF819B32EF526660C26DCC0D8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 23:00:40 +0000
Manifest this update: Sat 01 Feb 2025 23:00:40 +0000
Manifest next update: Sun 02 Feb 2025 23:00:40 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: le3vqz02FirqHZTIqx0gi9wcQ3UPVApw7YuTdO74Dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:aa:f8:19:b3:2e:f5:26:66:0c:26:dc:c0:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Feb 1 23:00:40 2025 GMT
Not After : Feb 2 23:00:40 2025 GMT
Subject: CN=d864ab3f1a7d9d5f1d5ad893da6c4b61f54ffc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:d5:8e:6d:7d:0d:a3:8a:bc:d7:cf:98:b9:
0b:9f:61:30:69:c3:b4:1c:51:b6:93:27:b9:b5:b4:
a7:d9:c0:34:15:7a:b0:3d:d1:19:ee:f8:26:57:77:
f5:14:b0:3f:d6:9d:46:c9:4e:50:bf:08:ff:fa:34:
eb:dc:f5:54:2d:a5:e8:7c:72:1a:4e:90:b0:ba:9f:
bd:2e:f1:9d:e1:01:94:a8:2f:f6:c4:c6:89:97:27:
91:e6:f7:3f:33:30:ac:06:91:67:2d:da:f7:e3:05:
9e:a8:4f:a1:80:5a:56:9e:8e:71:34:01:63:a7:fa:
c1:18:76:9f:d6:be:1b:c6:da:df:f2:43:e6:93:4a:
b6:20:2c:6c:72:ec:78:71:b8:fa:b6:f9:84:6e:d5:
a0:2d:62:3b:32:56:66:20:b7:83:ff:bb:25:df:50:
03:15:16:3a:16:6f:74:2a:6d:4f:67:7d:b7:16:b9:
ad:73:6b:d7:a4:47:95:31:2b:43:78:2c:fc:42:d3:
03:27:4f:6e:b8:ef:4c:33:d6:9f:d3:ba:4f:a9:b4:
1a:18:58:52:18:23:b6:9a:9a:0a:73:a7:bb:00:e4:
4e:18:7d:53:1e:09:cf:b3:96:d4:d1:60:19:25:1c:
7b:fa:b0:43:69:82:e1:46:cd:d2:d3:55:f4:67:26:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:64:AB:3F:1A:7D:9D:5F:1D:5A:D8:93:DA:6C:4B:61:F5:4F:FC:0E
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e1:4d:00:95:ad:8d:02:af:6f:5c:6a:5e:27:b6:6e:81:ad:
39:0e:61:7c:89:bb:d8:f8:42:c2:d3:85:4a:f1:20:84:37:85:
33:6c:b7:4a:09:9e:93:54:0f:e0:a2:5e:f3:26:63:f0:22:8c:
82:c3:fd:f4:4b:74:33:0d:0a:73:4e:6d:da:b1:52:80:26:55:
85:23:8a:a9:d1:38:0e:f0:ae:80:9a:f9:03:46:84:31:b5:05:
0f:86:ac:5c:0b:6d:81:af:d1:a6:ac:01:e7:7e:05:2e:6a:0f:
80:0c:33:fb:52:bf:ea:73:cb:b5:21:a6:4a:ed:76:18:16:67:
f8:9c:47:f3:4c:a7:e0:90:b1:c8:98:1c:aa:1a:21:7e:a5:47:
99:48:b6:34:9f:41:ae:88:23:bd:da:8e:b9:59:d7:c0:60:2f:
2d:82:7e:fe:60:69:ed:46:32:e6:40:70:c3:4d:34:c9:68:18:
c5:01:dc:4b:c4:96:b8:90:af:dd:1e:7b:d9:95:1e:4e:f3:47:
f2:82:93:8e:71:ea:07:bd:f3:8d:0b:6a:36:87:c7:78:22:28:
c3:90:e4:f7:f0:dc:80:f9:a2:10:98:fe:4a:d1:a5:5a:08:ae:
70:23:c1:06:27:c5:fd:7b:e2:b9:e1:3d:72:a4:69:32:56:12:
7b:a5:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:02:06 2025 by rpki-client