Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: 5wJ5rstMOr1jQWXK80KuonsFCHpNLvJ81PPJytcG9v4=
Subject key identifier: 23:60:0F:5E:0F:06:0C:3F:24:F4:92:33:30:4D:B9:2E:5F:93:21:2E
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 0194BABB5E4A87AA3B03601CAD119BA4B4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:29 +0000
Manifest this update: Fri 31 Jan 2025 05:00:29 +0000
Manifest next update: Sat 01 Feb 2025 05:00:29 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: bPHq3cR6d2Y7iFpG15SjpZsPbIOT6DEpaMboVqj1ZrQ=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:5e:4a:87:aa:3b:03:60:1c:ad:11:9b:a4:b4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Jan 31 05:00:29 2025 GMT
Not After : Feb 1 05:00:29 2025 GMT
Subject: CN=23600f5e0f060c3f24f49233304db92e5f93212e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:b1:b9:ba:cc:1c:b8:e6:92:d1:66:f6:89:
db:7f:95:ec:d7:ff:7b:a0:cc:f9:ab:30:28:85:52:
46:a7:bf:a5:99:f1:23:dd:3b:10:9b:33:d0:2c:63:
87:2d:6f:15:ea:96:72:12:f2:21:87:ee:c4:94:44:
e1:c3:b6:d4:d4:11:a8:d1:29:be:e2:7d:e2:56:d7:
11:61:fc:72:7f:50:4d:db:ca:a3:9f:2b:c2:74:4c:
c9:77:3b:94:07:5f:24:d1:a3:86:40:ad:9a:89:c1:
b0:de:fd:73:3b:32:d2:9b:aa:2a:92:02:31:09:35:
0f:5a:67:f4:61:4b:1d:5b:af:6f:64:0f:75:42:39:
41:61:46:ba:a3:ea:c5:43:7f:b5:67:74:e7:30:e5:
3a:95:8c:c6:01:8d:27:f5:bc:5d:20:8c:12:7c:32:
7d:5b:09:52:d9:90:90:65:28:6e:42:8c:72:02:aa:
ec:90:3b:b1:52:d6:b7:72:f9:ed:f7:0c:44:e7:76:
08:e1:b1:70:52:a0:95:8d:5a:b0:04:4c:68:ce:9d:
90:0e:d8:9e:1c:ed:cd:ad:d9:99:16:6e:ab:cf:4d:
bd:66:63:26:00:ef:11:d4:8d:da:4c:9b:4a:25:19:
4d:4b:80:01:e7:b5:20:6e:37:d6:fd:1c:82:9e:6c:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:60:0F:5E:0F:06:0C:3F:24:F4:92:33:30:4D:B9:2E:5F:93:21:2E
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f0:0d:3e:60:77:3f:5b:77:c7:69:71:60:d1:7e:fe:22:d3:
ea:89:6d:88:7c:e2:f4:0f:f1:d1:74:59:da:25:d2:56:43:08:
3a:77:a5:f3:3a:df:21:b9:06:50:46:e8:5d:78:da:98:12:77:
76:f0:9b:ca:6f:94:f8:6c:69:b3:9c:0c:cd:b9:99:b0:4f:8f:
33:e4:49:ba:ad:41:dc:8c:8e:da:7c:8c:62:97:08:87:20:d3:
fb:59:bd:88:4c:cb:65:aa:5e:07:c6:80:3d:6b:11:e9:ea:01:
88:92:4a:22:f6:90:ff:e2:0c:2a:54:10:f0:ab:29:b1:35:f7:
54:38:04:00:b6:5b:77:41:73:02:97:65:5f:92:4f:d3:b9:b6:
df:fe:03:b8:26:e4:cf:49:d8:89:d0:d1:08:21:83:a1:5a:da:
a3:9b:18:08:55:19:fc:b0:48:f7:a5:64:c8:73:a9:00:94:cd:
c0:b9:ff:79:c6:0c:1f:7e:f7:94:ea:d3:83:96:4b:2d:9d:70:
c4:f5:b6:c6:94:54:bd:d1:33:c3:1c:ad:75:ed:46:6d:b0:b6:
ed:27:84:0d:f0:c1:13:b4:ad:45:23:35:b0:35:6c:f8:30:3e:
9b:e4:cf:f4:d4:05:f4:f9:2b:67:86:ec:36:8c:59:4d:79:26:
78:e2:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:04 2025 by rpki-client on console-fra.rpki-client.org