Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: KxhwKNAIQ3YyTPmRn1z4gz7FQc8Kdba6gE62r6tclG8=
Subject key identifier: AA:61:90:9D:C6:21:A5:BC:8B:63:41:E5:92:C6:B7:08:12:58:87:EC
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 0194BB6034809EA5DBDF1D3A3619C5DC2087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 03C1
Signing time: Fri 31 Jan 2025 08:00:31 +0000
Manifest this update: Fri 31 Jan 2025 08:00:31 +0000
Manifest next update: Sat 01 Feb 2025 08:00:31 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: P/GsbCyuNQm7gAdl08tAQIvnYEse5Wa4vz4idE6fb4A=)
2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:34:80:9e:a5:db:df:1d:3a:36:19:c5:dc:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Jan 31 08:00:31 2025 GMT
Not After : Feb 1 08:00:31 2025 GMT
Subject: CN=aa61909dc621a5bc8b6341e592c6b708125887ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:29:b8:5a:1a:fc:a6:24:4d:e5:32:bb:50:
55:92:96:50:4d:5c:45:cd:a9:54:1d:28:a3:41:df:
9f:17:cb:5f:a1:d0:61:23:af:1a:98:24:f6:bd:2e:
74:88:b9:cf:de:07:2e:83:48:b7:01:e1:0d:36:57:
07:4e:a9:f7:20:c1:3e:a5:54:3e:94:52:a9:01:41:
5a:30:7b:8d:4b:c2:88:f7:43:80:40:5b:66:9d:76:
28:7b:fc:6d:e8:90:69:23:46:de:1f:4e:f0:ca:ab:
dc:10:97:eb:b1:be:4c:8b:21:69:2e:aa:1a:8e:8a:
d9:5b:4b:21:a7:09:16:5b:c6:aa:d7:a7:e2:7a:6f:
cc:5b:f6:ea:9e:c2:6f:53:15:d8:58:63:87:16:1b:
c7:c1:59:f5:20:94:80:07:16:66:aa:6c:e6:37:c8:
f6:dc:a0:26:7d:6b:88:11:ca:25:b0:97:1b:b9:4d:
ea:09:9d:de:40:a4:b1:98:b1:e7:a7:f7:26:b7:6c:
43:2d:90:dd:7b:dd:46:58:8a:ae:f3:b2:31:b3:1f:
a4:4e:d3:50:35:47:af:44:70:b0:8d:6b:07:01:4c:
e4:b0:4f:34:27:34:61:ab:d2:ad:57:19:08:d2:38:
89:9f:71:44:ce:e7:fc:a2:04:f6:94:22:61:4e:b2:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:61:90:9D:C6:21:A5:BC:8B:63:41:E5:92:C6:B7:08:12:58:87:EC
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:31:1f:f2:c4:3b:63:e6:6d:96:d6:ba:10:ca:65:8f:ba:13:
ed:b2:0d:c0:7d:c5:e6:cb:8e:1f:c9:cc:78:68:49:0d:43:de:
d0:26:e0:cd:74:41:bc:0b:04:90:bc:ae:4e:dd:ed:a5:4c:b2:
ba:ee:0d:5e:c7:30:b8:2b:3f:20:7a:5d:06:62:de:58:54:bc:
bf:79:01:cb:1b:45:60:ca:98:e1:6a:5e:e1:9a:61:f6:fc:67:
cb:6e:8e:56:04:88:3f:41:cd:06:97:76:26:dc:7f:e2:53:58:
b4:bb:3d:20:44:da:a1:dc:dc:d7:92:72:89:18:e8:f5:a6:51:
0e:d0:08:14:16:f3:ff:78:2b:19:45:40:d6:fd:ce:05:cf:75:
4a:11:cc:9c:eb:55:59:0b:a6:29:ea:67:d3:42:81:5b:34:a6:
aa:cc:76:ce:b5:28:bb:f3:83:50:1d:7e:4f:a8:f9:6f:02:4d:
44:2c:03:85:66:e4:de:d9:a2:54:71:ed:6a:0f:56:4c:40:2b:
00:94:b4:44:e0:e4:1a:8a:fa:83:95:4b:5b:98:a0:ea:b1:f8:
75:24:8f:2f:4f:a6:b6:ea:80:b9:35:b3:fd:9a:57:31:75:ea:
35:b9:ec:01:2a:c9:de:9f:90:49:4d:37:96:02:33:07:5f:33:
bc:36:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:46 2025 by rpki-client on console-fra.rpki-client.org