Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: a3+vcBknbLgdhlzFN0bfChILjT13GHPJxJ9M3g/DqXg=
Subject key identifier: D3:AA:9B:A1:2A:3C:DC:1C:08:9C:68:4A:B5:51:D4:2F:B9:8E:90:78
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 0195124718DAEAD8613CFA5D8BE2B6EC01FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 13E8
Signing time: Mon 17 Feb 2025 05:00:03 +0000
Manifest this update: Mon 17 Feb 2025 05:00:03 +0000
Manifest next update: Tue 18 Feb 2025 05:00:03 +0000
Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: D2mbh2ijNqx31+4CVKqxJzoGilmofc30RqTtMTYsCWQ=)
2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:18:da:ea:d8:61:3c:fa:5d:8b:e2:b6:ec:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Feb 17 05:00:03 2025 GMT
Not After : Feb 18 05:00:03 2025 GMT
Subject: CN=d3aa9ba12a3cdc1c089c684ab551d42fb98e9078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:6b:07:29:5a:17:23:31:bc:82:7e:8b:84:
40:32:e1:24:9c:e4:39:0b:68:ac:70:10:1f:cc:57:
af:d5:fd:a0:7c:4d:32:8d:87:4f:0a:67:e4:70:a4:
b5:c2:48:f0:ee:5c:fd:ec:24:b5:c1:0d:a3:31:39:
a9:ba:a1:e1:f4:5e:0c:74:ba:7f:7d:f8:1c:d7:7b:
e3:67:02:63:ce:1f:99:b9:f8:62:c1:b9:78:4f:de:
f1:ae:46:5f:8d:1b:c4:75:a4:84:7f:0e:2d:d3:33:
0c:bd:0e:9f:a8:8a:21:26:27:fa:e2:81:16:97:ef:
1d:2e:ab:46:c9:9a:58:2b:0d:b7:3e:ef:f7:5b:b2:
7f:20:bb:55:91:d5:eb:f5:a8:69:75:73:b1:6b:63:
83:7a:c1:96:c9:2c:4d:12:3a:48:6f:f4:ae:e7:b2:
e7:59:e0:37:2a:7e:7b:e8:18:8d:d8:5f:1c:1b:29:
53:23:42:ef:7a:37:9b:14:81:08:61:19:f3:8a:d5:
40:61:7d:92:48:9d:ea:15:ad:56:fb:7c:6d:2c:a4:
22:db:0a:83:9a:1e:66:6e:2d:5f:6c:d7:c2:3f:a0:
0e:38:50:cf:e4:a4:8a:e1:be:d5:3c:a4:33:78:c5:
72:31:3e:68:a5:8f:bc:1f:85:b6:fa:87:4c:30:6c:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AA:9B:A1:2A:3C:DC:1C:08:9C:68:4A:B5:51:D4:2F:B9:8E:90:78
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:aa:2a:48:34:3e:a1:8d:c5:03:1f:86:91:2d:5b:2f:eb:
95:ec:1b:f0:57:e9:46:b8:f4:25:49:62:33:40:dd:6e:98:19:
0d:93:14:6d:3a:cc:76:50:05:bb:8f:0a:59:e9:68:a1:66:8c:
8d:b7:37:02:3e:b6:37:11:68:22:89:a2:c6:c7:62:5c:ac:6d:
d4:d1:1d:6e:7a:fd:69:75:17:9c:13:10:2e:98:1b:2f:6a:9e:
d1:bd:aa:31:12:31:40:2d:08:b1:25:cb:2d:6b:ff:df:7c:e5:
9f:7d:fa:e0:b2:d0:6a:0c:0d:5b:89:ed:d7:86:25:99:c5:2d:
25:6e:74:bf:b5:b3:f2:61:a4:be:11:b0:f7:24:a2:95:c5:23:
85:51:9f:41:53:9e:a9:18:29:23:e4:91:75:d1:31:96:bb:13:
ac:24:75:74:74:27:29:65:12:62:ff:2c:f0:4c:d6:d4:98:40:
3e:21:ff:b0:ee:f8:48:40:5d:b8:d4:3f:00:47:71:c4:90:a6:
9c:82:20:bc:9c:77:e4:0e:ab:4d:b4:7d:eb:fb:e5:87:f1:ca:
8d:6a:6e:c8:52:e3:8b:90:28:09:4e:33:81:a7:b5:f5:f2:14:
45:8e:b6:65:4f:0b:fd:1f:24:30:2d:1d:62:11:46:e0:cf:d6:
8e:c6:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:10 2025 by rpki-client