Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
File: LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft (raw, json)
Hash identifier: WqWcA42klbcGHc2wEF9cX7j28ZhgWaldxhuHwtbI2VM=
Subject key identifier: CC:7D:89:34:5F:C4:74:D3:F0:18:CA:A7:B6:56:56:E5:A9:72:66:18
Authority key identifier: 2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
Certificate issuer: /CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Certificate serial: 01951210969AE02DAB7523AFD2C3C5149B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
Manifest number: 141A
Signing time: Mon 17 Feb 2025 04:00:31 +0000
Manifest this update: Mon 17 Feb 2025 04:00:31 +0000
Manifest next update: Tue 18 Feb 2025 04:00:31 +0000
Files and hashes: 1: LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl (hash: NbPmrGYiROHu1CT4mZTTNcFG9Uun6xG3wRsbcV2zdfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:96:9a:e0:2d:ab:75:23:af:d2:c3:c5:14:9b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd04102c1996b53c88e171e5e4f8d1fa0a13084
Validity
Not Before: Feb 17 04:00:31 2025 GMT
Not After : Feb 18 04:00:31 2025 GMT
Subject: CN=cc7d89345fc474d3f018caa7b65656e5a9726618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:af:1e:9d:6e:e2:ae:03:b1:af:8d:26:22:
7f:b9:7b:04:46:16:bd:09:66:d1:a6:4e:1f:3f:04:
94:a4:34:44:94:bb:05:cf:28:4c:d4:4c:49:ae:d6:
af:c2:0e:18:ad:bb:18:d0:56:2c:3c:3f:e1:7f:c0:
07:c1:97:12:06:bf:7b:b8:b9:e8:18:15:f9:70:9b:
95:21:05:31:d5:fb:88:6e:c1:98:61:bf:5e:5d:a1:
15:a2:24:03:ef:6c:04:6a:31:31:35:ab:2d:2a:2f:
a5:a9:34:28:e6:07:0a:31:26:f7:cc:20:ea:70:5c:
4d:ca:9d:40:82:fe:66:ea:13:8e:41:65:f3:76:14:
15:7b:ff:fb:95:a2:11:91:68:b3:0f:41:af:23:5e:
8c:e7:56:c4:40:3d:9d:71:e4:33:38:b1:e6:b6:0c:
ec:32:2e:5b:47:6b:42:ac:c3:a9:91:0a:bb:17:49:
83:e5:20:90:b8:99:cc:e4:b3:06:07:3c:89:6b:c7:
00:1f:03:f0:76:f1:ae:48:2f:4a:d0:b0:72:45:eb:
20:ea:46:04:45:1a:49:f8:af:63:a9:95:f5:00:2e:
5a:ec:d6:75:1e:95:e4:91:24:c8:79:b7:65:52:fb:
f0:bd:25:8f:fc:ff:9c:c9:c7:7c:d2:67:c9:8b:9d:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:89:34:5F:C4:74:D3:F0:18:CA:A7:B6:56:56:E5:A9:72:66:18
X509v3 Authority Key Identifier:
keyid:2C:D0:41:02:C1:99:6B:53:C8:8E:17:1E:5E:4F:8D:1F:A0:A1:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNBBAsGZa1PIjhceXk-NH6ChMIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/200988-39db-44a3-9e49-5e047433b234/1/LNBBAsGZa1PIjhceXk-NH6ChMIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ff:a8:14:72:fa:c3:97:f5:c3:99:7a:e2:be:1e:dc:2a:cf:
bd:79:fa:76:aa:1c:31:ac:6a:d4:5d:5e:99:09:eb:28:ab:76:
70:6c:f1:61:2f:55:c4:82:d3:00:d7:ad:27:89:79:d8:0b:a0:
e1:c1:64:2e:1d:b9:a9:5a:30:e9:7c:6d:2f:d1:5a:35:a0:22:
12:fa:9e:86:f4:b0:a7:cf:a0:94:3d:e7:31:82:43:fc:33:56:
1a:6b:91:e6:f4:0e:83:14:39:b0:31:e6:97:21:9b:01:00:a7:
4f:46:ed:f6:0e:26:0f:8f:c7:93:bc:40:7f:d1:3f:18:b0:1f:
2d:0f:87:9f:d0:ee:eb:ee:43:1e:ea:cf:9d:55:67:de:45:61:
b4:a1:d6:08:36:9e:41:d0:f1:e1:1f:80:ab:af:4a:1f:bd:de:
82:b0:a0:f6:12:2e:04:4e:c7:7f:80:d5:17:6e:10:7a:ce:2f:
f2:2c:77:bb:45:a3:7f:df:26:fc:55:0d:87:07:51:aa:3b:c7:
a7:2c:06:d9:1a:a1:ab:fa:e4:6d:37:28:8e:90:00:95:98:11:
71:80:da:be:63:40:1e:c6:1c:a4:7e:bd:2e:16:d5:b8:d6:00:
15:71:b8:82:e0:d4:cc:ed:58:31:13:48:fe:c9:e4:37:56:ad:
34:4f:26:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEJaa4C2rdSOv0sPFFJsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDA0MTAyYzE5OTZiNTNjODhlMTcxZTVlNGY4ZDFmYTBh
MTMwODQwHhcNMjUwMjE3MDQwMDMxWhcNMjUwMjE4MDQwMDMxWjAzMTEwLwYDVQQD
EyhjYzdkODkzNDVmYzQ3NGQzZjAxOGNhYTdiNjU2NTZlNWE5NzI2NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmryvHp1u4q4Dsa+NJiJ/uXsERha9
CWbRpk4fPwSUpDRElLsFzyhM1ExJrtavwg4YrbsY0FYsPD/hf8AHwZcSBr97uLno
GBX5cJuVIQUx1fuIbsGYYb9eXaEVoiQD72wEajExNastKi+lqTQo5gcKMSb3zCDq
cFxNyp1Agv5m6hOOQWXzdhQVe//7laIRkWizD0GvI16M51bEQD2dceQzOLHmtgzs
Mi5bR2tCrMOpkQq7F0mD5SCQuJnM5LMGBzyJa8cAHwPwdvGuSC9K0LByResg6kYE
RRpJ+K9jqZX1AC5a7NZ1HpXkkSTIebdlUvvwvSWP/P+cycd80mfJi522TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx9iTRfxHTT8BjKp7ZWVuWpcmYYMB8GA1UdIwQY
MBaAFCzQQQLBmWtTyI4XHl5PjR+goTCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDkt
NWUwNDc0MzNiMjM0LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yMDA5ODgtMzlkYi00NGEzLTllNDktNWUwNDc0MzNiMjM0
LzEvTE5CQkFzR1phMVBJamhjZVhrLU5INkNoTUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/+oFHL6
w5f1w5l64r4e3CrPvXn6dqocMaxq1F1emQnrKKt2cGzxYS9VxILTANetJ4l52Aug
4cFkLh25qVow6XxtL9FaNaAiEvqehvSwp8+glD3nMYJD/DNWGmuR5vQOgxQ5sDHm
lyGbAQCnT0bt9g4mD4/Hk7xAf9E/GLAfLQ+Hn9Du6+5DHurPnVVn3kVhtKHWCDae
QdDx4R+Aq69KH73egrCg9hIuBE7Hf4DVF24Qes4v8ix3u0Wjf98m/FUNhwdRqjvH
pywG2Rqhq/rkbTcojpAAlZgRcYDavmNAHsYcpH69LhbVuNYAFXG4guDUzO1YMRNI
/snkN1atNE8mYg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:55 2025 by rpki-client