Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: hspOk+eWrUX8uE0RP6PlPtZH189omqhXc7HsjiLFh7Y=
Subject key identifier: B4:68:7D:04:67:C8:78:78:8B:CD:D9:CF:3F:E8:7F:B5:C5:01:A5:E4
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 0191FA7E1427BC8D858AB51B98D13497F881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 0107
Signing time: Mon 16 Sep 2024 11:00:52 +0000
Manifest this update: Mon 16 Sep 2024 11:00:52 +0000
Manifest next update: Tue 17 Sep 2024 11:00:52 +0000
Files and hashes: 1: 1H9a_NsJYlDNpL-kDVigsOd3Kqk.roa (hash: Mqe8p0moQp03tsWwi0Vls56Jg6XlS9PrCWPPDIS3VvY=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: hi8PdHDW3C7zrEW4BVP/JXAruErhZfHFGdF9ediixPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:7e:14:27:bc:8d:85:8a:b5:1b:98:d1:34:97:f8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Sep 16 11:00:52 2024 GMT
Not After : Sep 17 11:00:52 2024 GMT
Subject: CN=b4687d0467c878788bcdd9cf3fe87fb5c501a5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:89:af:55:b8:e7:49:5f:df:05:f6:64:62:
c6:ca:ac:34:60:3b:cf:11:06:f6:e9:fa:fe:a1:67:
2d:64:e3:df:89:0c:39:8a:82:db:80:fa:9a:ae:fa:
fe:ea:fa:78:d1:3b:5c:6a:75:16:44:80:02:6a:aa:
bf:3b:67:a0:39:07:64:5b:99:d7:0b:ed:0e:07:40:
18:bd:d2:ac:6c:a1:f4:0c:ed:40:b1:ef:15:38:e6:
ce:85:18:c8:91:d4:b2:b0:e0:d3:31:f9:d6:77:db:
42:b2:a6:53:fb:ae:c1:6c:ea:b6:af:9f:28:b6:45:
fc:4f:ae:11:61:2b:89:e8:06:a2:61:da:3a:a9:64:
15:3f:27:28:c8:27:e5:e0:56:92:79:16:6d:67:e1:
50:70:df:c6:af:f5:5a:61:cb:e3:bf:44:80:0d:1e:
da:8e:e2:24:96:ab:74:2e:df:af:a1:50:04:e7:2b:
01:7f:b2:c4:9a:b6:4c:88:81:53:20:e9:3f:37:5b:
fa:63:17:3e:ff:88:7e:f0:fd:ac:df:74:d5:29:e0:
0d:b5:e8:56:20:97:f7:2d:47:fe:1c:38:a3:14:26:
f4:af:d1:2c:f5:87:5f:1c:09:66:60:00:39:3e:dd:
13:81:0d:b3:07:fd:a0:db:60:5d:67:2a:c3:32:71:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:7D:04:67:C8:78:78:8B:CD:D9:CF:3F:E8:7F:B5:C5:01:A5:E4
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ad:70:af:2a:05:99:d0:ba:51:59:ca:e3:76:c8:f3:36:ba:
86:ad:48:c7:fd:d5:ff:a4:68:4f:3f:c6:0f:af:5e:be:aa:c0:
38:a8:97:15:a5:a1:3f:8c:7a:7d:d8:5a:72:08:b5:35:02:a9:
cc:28:36:a8:17:3f:5d:a8:c0:99:c4:22:04:2d:fc:fa:46:e9:
b4:80:e1:2c:12:d8:84:bf:7a:e6:48:da:0e:7c:34:f9:ad:a2:
f6:fc:34:de:dc:fc:bf:97:c0:a0:2a:6c:59:7a:eb:01:50:a6:
53:6c:f5:c8:f3:51:a5:1d:f0:d3:97:55:0e:f1:eb:06:3e:f0:
a5:dd:33:58:d4:fd:19:21:50:1b:44:9c:30:9c:68:a2:32:35:
91:2f:e1:16:dc:48:85:f4:9e:7c:b9:46:bd:61:7f:70:33:2f:
42:a8:65:47:a4:a6:cc:4c:2d:c7:27:ef:20:aa:51:aa:fa:b2:
9d:5f:c8:41:bf:47:67:53:5c:c7:ff:38:b6:23:6a:ac:1b:12:
da:b3:24:da:c6:37:70:a1:33:95:38:80:92:a9:47:04:8e:1c:
60:ad:4f:57:cb:f6:5a:7d:e4:26:59:49:c5:21:2b:18:17:b8:
c4:c4:18:d8:7e:db:f5:09:8a:2e:df:f2:4d:ed:1f:ef:5f:d3:
8e:cf:7f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:54 2024 by rpki-client on console-ams.rpki-client.org