Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
File: LhBSUuEMtSELqyYdm8MiDKb7z3M.mft (raw, json)
Hash identifier: a3XRY9xJFDCA764m7ZAH5Vn72ethAm+AXDEDWwWgG6s=
Subject key identifier: 62:95:30:AC:48:43:31:C4:EC:0A:D4:28:E8:08:F3:D5:25:01:43:A5
Authority key identifier: 2E:10:52:52:E1:0C:B5:21:0B:AB:26:1D:9B:C3:22:0C:A6:FB:CF:73
Certificate issuer: /CN=2e105252e10cb5210bab261d9bc3220ca6fbcf73
Certificate serial: 0194BB2992A2F70C87F01D5CA057D1D8748D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhBSUuEMtSELqyYdm8MiDKb7z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
Manifest number: 13B3
Signing time: Fri 31 Jan 2025 07:00:51 +0000
Manifest this update: Fri 31 Jan 2025 07:00:51 +0000
Manifest next update: Sat 01 Feb 2025 07:00:51 +0000
Files and hashes: 1: LhBSUuEMtSELqyYdm8MiDKb7z3M.crl (hash: 8HsoXCWRrur5efdyPkdS6w1LvEELH2yFi6VgXZDuBic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhBSUuEMtSELqyYdm8MiDKb7z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:92:a2:f7:0c:87:f0:1d:5c:a0:57:d1:d8:74:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e105252e10cb5210bab261d9bc3220ca6fbcf73
Validity
Not Before: Jan 31 07:00:51 2025 GMT
Not After : Feb 1 07:00:51 2025 GMT
Subject: CN=629530ac484331c4ec0ad428e808f3d5250143a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:95:5a:a3:e8:8d:49:80:35:17:25:9b:42:
78:7b:37:0d:3f:94:58:9b:63:3f:24:d8:d2:c1:f5:
d6:37:ec:09:fb:9f:d2:cf:ca:4e:9f:48:04:43:0d:
fd:33:07:62:ab:c1:79:7f:55:da:c2:a7:d9:73:ca:
af:9b:31:ab:70:19:51:ca:0f:dc:02:7c:c1:84:26:
8e:74:4d:bc:69:da:16:f1:bd:3b:4a:d2:a6:7b:fa:
39:0e:8d:a0:83:52:f8:57:45:78:f7:a4:b8:8d:e0:
43:f9:3f:e9:64:ca:4b:dc:f2:3a:c7:9a:2d:f6:64:
c6:dd:c9:b2:c5:6d:ff:b6:ae:f7:37:b9:e4:7c:98:
9f:86:ca:04:0d:d0:18:71:26:39:30:da:99:b7:85:
c3:2d:e5:fe:47:f0:00:31:7e:6f:74:8d:4f:13:ce:
96:e1:27:a3:8d:61:51:4b:88:73:c1:5e:3e:e4:f3:
9f:2c:39:48:6f:39:c3:43:35:9f:fb:a8:a6:08:fa:
89:47:0c:ab:6a:0e:f7:05:95:d9:e1:f5:bd:0e:d8:
37:f5:e6:05:86:d0:82:f7:8a:ee:6c:f5:5b:1a:f7:
ab:19:3b:f9:0e:3f:85:7e:34:9e:e5:f8:9a:c6:85:
15:10:03:15:c9:bc:9b:d3:18:b0:7b:83:c0:ca:7f:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:30:AC:48:43:31:C4:EC:0A:D4:28:E8:08:F3:D5:25:01:43:A5
X509v3 Authority Key Identifier:
keyid:2E:10:52:52:E1:0C:B5:21:0B:AB:26:1D:9B:C3:22:0C:A6:FB:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhBSUuEMtSELqyYdm8MiDKb7z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6e:1d:27:38:d3:6a:8d:b0:ec:51:7c:c8:da:47:72:a2:63:
4c:5e:33:cb:d4:5f:8c:b1:21:22:01:11:84:ca:d1:f0:b5:a8:
8c:36:69:ad:a9:02:a0:90:49:f2:0c:5f:4e:06:90:80:b1:5a:
79:3d:be:c9:72:b9:22:4c:25:d5:a0:16:15:e1:b5:c8:93:b4:
06:77:49:61:a7:bb:d4:cd:3e:5e:14:df:a5:2f:b8:f7:a4:cc:
c5:49:19:20:e8:eb:a9:16:7f:01:96:cd:09:04:8e:9f:83:81:
5f:01:b2:32:44:ad:f5:c8:af:d4:47:fb:d0:cc:e7:af:47:74:
49:e5:96:d6:da:88:16:82:73:f8:46:bc:89:aa:f9:6b:ad:41:
58:e8:5e:69:64:d7:1c:93:a7:63:bf:16:ab:5a:3b:42:71:c7:
3a:1e:8e:fc:8d:b9:88:7b:85:9e:2d:2f:6b:ee:f7:52:53:c5:
39:5b:26:db:9d:11:f5:6e:21:78:3e:f2:c2:39:f7:13:b8:5b:
da:eb:62:c3:f7:fb:de:1c:cc:76:99:bb:6d:56:22:55:4b:c5:
a8:b0:97:78:ae:84:ad:e6:c3:22:31:88:b1:1d:75:f4:5c:07:
61:52:cf:fe:0b:90:46:8b:d5:76:6d:b5:9b:28:2d:fc:d5:44:
ad:f9:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:57 2025 by rpki-client on console-fra.rpki-client.org