Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: IYUomLEi2MTz9xNmsBFFes9k55+KEofQKBmEkM7zqBg=
Subject key identifier: B2:8B:68:E6:DE:92:ED:EB:3B:84:1F:4B:FE:54:0A:B2:9A:51:AE:A1
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 0195116C0A39CFE034185FA6D4075F41734B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 038A
Signing time: Mon 17 Feb 2025 01:00:47 +0000
Manifest this update: Mon 17 Feb 2025 01:00:47 +0000
Manifest next update: Tue 18 Feb 2025 01:00:47 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: x/dRkqVvnsHzXfSt8ux15KYTvGAxAFjMrqpTEpsgWSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:0a:39:cf:e0:34:18:5f:a6:d4:07:5f:41:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Feb 17 01:00:47 2025 GMT
Not After : Feb 18 01:00:47 2025 GMT
Subject: CN=b28b68e6de92edeb3b841f4bfe540ab29a51aea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:09:c9:45:af:3c:c9:4a:c5:60:b9:2b:67:
4f:56:88:ed:f4:d5:bd:c8:2c:b5:e9:12:95:b3:37:
bb:cc:9b:00:d8:80:3c:2c:28:38:f7:df:a9:6e:8b:
bc:93:a7:f7:9d:31:47:93:ba:ab:9d:4b:41:a5:69:
71:20:c7:97:a1:9d:fe:ed:2f:77:f0:22:93:2d:d2:
e9:cb:65:92:99:54:49:14:02:52:be:04:7d:92:92:
ad:1a:f9:82:3c:38:0e:64:83:d4:a5:94:2f:72:58:
0f:eb:77:82:fb:85:f0:56:9a:64:6d:30:a3:7d:a2:
4b:3a:8e:18:6d:9b:9c:89:dd:93:0a:38:52:bd:1e:
72:06:e8:94:77:5e:cd:87:68:2c:e1:e7:a8:15:a5:
9d:e4:dc:9e:1d:f7:ca:25:6d:f7:bc:88:32:f5:41:
d8:6f:1a:d0:68:c4:1d:2a:6c:2f:b1:4e:5f:5e:b7:
b5:ac:04:7a:8b:5a:d1:39:21:fd:3c:ba:15:d8:62:
83:58:36:fe:e3:61:fc:73:c0:81:cd:01:ee:1f:ec:
9e:44:26:ec:3a:8e:20:5f:6f:aa:f3:eb:4e:b6:27:
d2:99:6f:d3:d4:b9:97:f0:96:5a:4e:d3:cc:79:07:
bc:1d:ee:4f:ea:41:a0:4d:6a:81:39:24:bc:f6:01:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8B:68:E6:DE:92:ED:EB:3B:84:1F:4B:FE:54:0A:B2:9A:51:AE:A1
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d1:b6:c4:95:ad:b2:40:7b:d2:70:da:0e:ad:ea:9a:bf:02:
1e:5a:cb:ec:60:d6:e1:56:db:14:9e:da:ac:72:70:30:67:91:
5f:27:6f:80:3d:30:78:4d:0c:18:a4:26:99:5f:49:c8:db:c2:
44:cb:74:b0:40:35:92:df:c1:bc:97:02:c8:b8:1f:01:6a:f8:
31:be:35:59:e9:da:da:ce:2b:94:34:2d:45:d1:7a:d4:b6:aa:
ed:a8:6b:2d:27:41:b5:79:b9:dd:74:6d:74:ac:9b:87:e8:d9:
ab:fd:d6:d7:1e:aa:78:cd:aa:47:60:89:84:24:0f:92:69:01:
b5:1d:76:f2:c1:52:bb:6e:2f:ec:03:e7:a9:15:8d:79:10:80:
bf:ee:7c:9d:27:79:94:e1:1d:14:c8:4f:66:e1:1f:0d:3e:1d:
0f:f9:76:f1:a6:c6:0e:a9:fc:65:ca:08:0c:19:13:0e:c8:33:
0b:53:e4:ec:35:f2:b1:23:6e:ac:91:07:d1:bd:12:3d:b5:86:
7a:f1:d9:8e:7b:00:9d:79:15:b3:cd:2c:ea:5b:60:e3:ea:09:
40:6e:1f:f3:94:ad:3d:59:3e:3a:91:4f:cb:80:7e:c3:c9:56:
cd:33:cf:92:2c:ae:2c:49:b5:ce:67:4f:c8:36:79:23:27:78:
6e:77:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:45 2025 by rpki-client