Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: fTdlYZ/MGqbnKg25Zb1io7ExeHmIqnyOCJlQoY8ky/g=
Subject key identifier: 0C:A2:0E:3B:C5:83:07:0D:EF:9D:07:0D:B6:62:B8:49:A7:88:FF:8C
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 0194BB96F559AD9DC146E09A070691BE09D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 114C
Signing time: Fri 31 Jan 2025 09:00:19 +0000
Manifest this update: Fri 31 Jan 2025 09:00:19 +0000
Manifest next update: Sat 01 Feb 2025 09:00:19 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: 5P0r6tpv0uWTRfB4jBtaqzqBrSPBbdnWpLI/Eu1Y5tI=)
2: X5I9mHSu3KNC6L4o4SPIN2DTcIA.roa (hash: pA69W5L+1g5fXu0iB/SINFlaHI6HYNCsbZGjGuRKHrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f5:59:ad:9d:c1:46:e0:9a:07:06:91:be:09:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Jan 31 09:00:19 2025 GMT
Not After : Feb 1 09:00:19 2025 GMT
Subject: CN=0ca20e3bc583070def9d070db662b849a788ff8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:0a:8d:24:4e:7e:28:28:a5:47:40:9d:8b:
ae:43:a0:b6:fc:08:a3:40:8d:74:eb:ac:36:ec:74:
cb:26:7e:30:a9:49:4a:ee:33:b4:19:ea:15:3d:c8:
cf:91:5b:25:d2:12:59:cd:fc:31:52:0e:55:e0:45:
12:03:4b:7b:1a:7f:40:cc:18:0c:02:ee:45:8f:06:
78:7f:65:aa:bf:88:35:1b:e4:4a:c7:0e:44:d1:79:
bb:34:32:39:c1:cb:21:70:0f:46:04:1f:90:ff:8d:
9f:dd:b8:80:3d:e9:e4:9d:be:bb:17:59:47:b0:8a:
f7:de:3c:75:51:f6:65:9f:35:44:75:dc:cd:d7:04:
80:02:b2:34:0a:fa:f3:db:00:c7:c5:75:c3:ab:f2:
42:13:91:a4:cf:18:52:ba:10:8f:f2:9e:72:64:e6:
0f:c1:26:c3:dd:11:a4:6a:8e:0c:22:06:b4:93:ad:
96:1a:b3:d3:b6:25:01:c3:82:d6:f2:a3:fa:de:c2:
68:b7:8e:a8:0c:ff:23:14:c5:38:da:dd:64:5d:e2:
07:b6:43:b7:fb:e9:b4:bd:11:57:a4:89:48:69:15:
32:c0:55:85:75:72:7a:f5:91:7c:5c:60:91:a5:b9:
02:bb:38:2d:9f:db:69:ba:21:24:54:af:15:70:23:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A2:0E:3B:C5:83:07:0D:EF:9D:07:0D:B6:62:B8:49:A7:88:FF:8C
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:86:2c:cd:14:1d:2f:32:4d:d7:ee:4b:1f:16:f7:3a:ca:
47:f7:6e:3d:f2:bc:26:8b:aa:d7:9b:cc:dc:1d:ec:1f:e6:a8:
86:e3:e5:6a:a3:d7:32:01:4c:2d:d2:e5:29:19:98:a8:b9:45:
7e:e7:0f:03:54:9f:0e:e0:b6:d5:3b:fe:1c:b0:4a:1a:81:30:
19:04:77:bb:82:33:f2:fb:87:8f:c7:ec:c0:04:6d:b8:e0:0d:
c4:fb:28:37:e2:bc:21:88:ef:ea:d0:bc:9c:a1:77:50:94:81:
e4:cc:b5:ef:e8:4d:ad:0f:95:5f:42:ee:bd:26:32:de:ac:2c:
9b:3d:f3:31:10:29:20:68:ee:51:a9:f9:d6:ce:b7:3a:2b:0e:
28:6e:10:3f:88:1f:11:25:c3:1e:05:17:b5:db:3a:6c:aa:b8:
c4:f4:50:09:59:5a:05:46:8c:78:79:2c:91:e9:4e:f0:fc:24:
24:05:35:61:18:d6:83:d9:a8:00:59:1d:cc:e1:38:6a:e8:23:
57:7c:8b:e6:fc:53:8d:d1:a9:07:68:2f:f2:ec:7a:8c:86:d7:
98:bd:12:d5:e5:24:ca:09:fb:fb:b0:64:2f:27:02:c7:b1:41:
76:94:f9:5a:e5:02:2c:47:28:73:e5:78:be:01:ba:35:c3:9f:
88:f4:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:12 2025 by rpki-client on console-fra.rpki-client.org