Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: 540pWoBCR+WdSPCx/rSojWMrhXJs5usHJL9YQ7sKQIg=
Subject key identifier: D7:FF:8C:D3:F8:4F:3C:10:D1:2B:A5:67:F7:D3:05:FB:E8:DC:E0:4C
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 0194BABB68939C7CA9E3C1B4D7D219DD3962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: RfC3ujY1VX0sxo5yyZecVinWVi2f1Cn2Drp6LAcgLdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:68:93:9c:7c:a9:e3:c1:b4:d7:d2:19:dd:39:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=d7ff8cd3f84f3c10d12ba567f7d305fbe8dce04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:a6:0d:64:93:8f:97:bc:07:d5:0d:7c:8a:
79:14:88:8a:8c:ad:ca:38:71:82:ba:ac:78:dd:2f:
69:be:75:c1:af:88:f3:31:46:05:59:a3:3f:ee:bb:
04:df:59:f6:f8:9c:a9:af:5a:b7:5d:60:93:e3:90:
66:7b:3a:8f:78:46:05:04:da:f3:74:c4:b0:9d:88:
42:fd:fa:14:77:0f:ac:8a:c3:c2:15:54:6d:4c:a5:
7b:7f:fd:18:c7:ef:1a:31:9c:39:67:26:5b:8d:ae:
e9:ff:5b:24:4e:30:ca:21:8c:cf:60:59:99:2f:91:
07:d8:b3:06:7a:e1:a8:ad:68:e2:7a:10:49:70:5d:
d5:20:e0:6d:10:ba:6e:2d:f4:05:4b:7e:f3:95:44:
6b:f9:1e:ab:4c:f3:66:53:2c:ab:a8:c3:24:b2:2b:
5a:d9:80:1a:2f:d8:6d:c5:3c:12:ed:da:e4:17:78:
71:bf:18:c0:9a:18:72:90:c7:2f:43:13:4d:0b:8d:
c5:7b:2d:8b:5c:d6:a2:8b:f2:0a:92:7a:a4:14:2a:
32:02:94:fd:6a:44:f8:a1:67:9e:f8:1c:c3:a3:00:
54:6d:25:f9:e8:f6:ab:48:e4:1a:be:27:a8:34:56:
89:5d:bb:e0:ea:75:90:20:4f:8b:c2:5f:2f:bd:b8:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:8C:D3:F8:4F:3C:10:D1:2B:A5:67:F7:D3:05:FB:E8:DC:E0:4C
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ab:35:2c:83:2e:b3:de:87:6a:46:d0:26:7d:f9:70:16:2d:
21:6c:40:3e:1f:da:11:1e:0c:6c:9a:e0:d4:df:fd:db:a1:70:
01:28:eb:d7:cd:44:43:f0:30:4b:46:07:cc:4d:db:8b:e8:b0:
40:c9:97:97:41:94:a5:e1:b0:75:8a:18:f2:00:b9:54:9f:72:
0f:79:b3:ec:10:07:17:48:b9:48:a5:2a:22:a4:eb:30:9d:6e:
00:fd:60:29:a6:e1:e3:26:c9:7b:08:7b:da:61:01:24:6c:74:
17:5c:42:14:da:90:df:80:e3:a0:37:3b:88:2f:30:dc:ae:d4:
83:0a:64:27:54:71:eb:34:df:f9:38:c0:58:ce:6f:9b:da:a9:
bd:bc:3b:37:42:66:ce:4e:5b:e3:de:14:20:9d:8e:6f:10:b1:
ab:46:2b:da:9d:95:9a:20:d9:e7:98:89:8e:4c:16:7d:e3:e6:
75:19:8c:cf:02:e2:fc:3a:d3:f2:0e:ed:65:21:93:e1:0e:70:
8e:87:aa:de:b5:a0:af:b8:6c:b9:79:b9:9e:dc:29:cc:c7:c2:
d6:63:5f:81:2f:65:2d:6d:01:d5:08:42:12:25:d4:76:6e:35:
33:b3:27:d7:af:40:e7:75:24:6f:10:58:0d:26:9f:e1:25:d1:
4e:b9:55:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u2iTnHyp48G019IZ3TliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTI5OTUwNThiM2RlOWFlZDIzYTYxZjdmYjdiNWI3YjE5
Mzk4NGEwHhcNMjUwMTMxMDUwMDMxWhcNMjUwMjAxMDUwMDMxWjAzMTEwLwYDVQQD
EyhkN2ZmOGNkM2Y4NGYzYzEwZDEyYmE1NjdmN2QzMDVmYmU4ZGNlMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j6mDWSTj5e8B9UNfIp5FIiKjK3K
OHGCuqx43S9pvnXBr4jzMUYFWaM/7rsE31n2+Jypr1q3XWCT45BmezqPeEYFBNrz
dMSwnYhC/foUdw+sisPCFVRtTKV7f/0Yx+8aMZw5ZyZbja7p/1skTjDKIYzPYFmZ
L5EH2LMGeuGorWjiehBJcF3VIOBtELpuLfQFS37zlURr+R6rTPNmUyyrqMMksita
2YAaL9htxTwS7drkF3hxvxjAmhhykMcvQxNNC43Fey2LXNaii/IKknqkFCoyApT9
akT4oWee+BzDowBUbSX56ParSOQavieoNFaJXbvg6nWQIE+Lwl8vvbhiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf/jNP4TzwQ0SulZ/fTBfvo3OBMMB8GA1UdIwQY
MBaAFCzimVBYs96a7SOmH3+3tbexk5hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYt
OGMxMzBlNjg0MWRiLzEvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kNTIwZGItYmRmOC00ZjI3LThkZmYtOGMxMzBlNjg0MWRi
LzEvTE9LWlVGaXozcHJ0STZZZmY3ZTF0N0dUbUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJas1LIMu
s96HakbQJn35cBYtIWxAPh/aER4MbJrg1N/926FwASjr181EQ/AwS0YHzE3bi+iw
QMmXl0GUpeGwdYoY8gC5VJ9yD3mz7BAHF0i5SKUqIqTrMJ1uAP1gKabh4ybJewh7
2mEBJGx0F1xCFNqQ34DjoDc7iC8w3K7UgwpkJ1Rx6zTf+TjAWM5vm9qpvbw7N0Jm
zk5b494UIJ2ObxCxq0Yr2p2VmiDZ55iJjkwWfePmdRmMzwLi/DrT8g7tZSGT4Q5w
joeq3rWgr7hsuXm5ntwpzMfC1mNfgS9lLW0B1QhCEiXUdm41M7Mn169A53UkbxBY
DSaf4SXRTrlVPA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:53 2025 by rpki-client on console-fra.rpki-client.org