Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File: LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier: CYwlX22guekp5M0JEhulHdKpB13ZRmgQbT7QcDRx59k=
Subject key identifier: D5:A8:C9:58:C4:CA:27:E6:74:28:BA:14:88:AC:03:10:C8:D0:BA:90
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 0194BAF2872F30FDE66C6CECF97018FD5986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number: 11CF
Signing time: Fri 31 Jan 2025 06:00:43 +0000
Manifest this update: Fri 31 Jan 2025 06:00:43 +0000
Manifest next update: Sat 01 Feb 2025 06:00:43 +0000
Files and hashes: 1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=)
2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: cYU/9flhdbfud6rBBbTLbQ5UFNtznQADU6/8BiRwjZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:87:2f:30:fd:e6:6c:6c:ec:f9:70:18:fd:59:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Jan 31 06:00:43 2025 GMT
Not After : Feb 1 06:00:43 2025 GMT
Subject: CN=d5a8c958c4ca27e67428ba1488ac0310c8d0ba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:b1:c0:2d:3c:bd:ed:8d:a1:7c:39:ea:6d:
d1:ed:c9:5d:5d:8a:01:79:50:c3:26:37:af:8e:ef:
df:6c:c8:e4:33:7d:d2:47:09:bd:fc:d3:95:3f:0b:
25:c2:7a:2b:be:2a:f1:dd:e0:09:dd:08:0e:1e:a9:
3a:2b:fe:fb:72:7d:7e:31:fc:d1:d4:0d:16:0f:26:
d1:6a:7b:a9:98:e6:af:91:85:2a:b1:f7:47:aa:b8:
81:0a:75:e4:56:2d:4b:a4:fa:31:46:c4:eb:d9:b6:
d2:c6:11:9a:a3:b2:35:b2:09:69:11:eb:ff:b3:2c:
03:8b:37:ec:56:43:bf:86:d0:10:d1:b0:b2:4d:75:
d7:fb:c8:3d:b0:e1:3b:55:97:7d:8e:70:33:8d:3a:
ce:3e:d5:47:be:69:07:b6:ec:41:a2:85:f3:b5:ca:
5d:fb:7a:ba:c4:6a:5c:34:3d:4f:2a:45:a8:6c:f4:
e6:0a:e3:08:81:c0:33:73:7a:88:6c:c0:71:ad:27:
54:9b:3f:45:37:19:ba:ea:8e:58:54:36:c7:0b:52:
f3:0c:6c:86:a5:f7:cd:28:3d:0b:0c:23:81:4e:1b:
05:83:cf:73:9e:83:43:7e:ad:92:b5:c9:cd:12:1f:
b4:89:bd:7a:f0:bd:57:77:a3:e3:5d:db:7b:db:d1:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A8:C9:58:C4:CA:27:E6:74:28:BA:14:88:AC:03:10:C8:D0:BA:90
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ac:e3:77:67:bf:46:b6:a2:2c:97:48:03:64:21:68:55:ec:
97:15:1d:ab:58:4c:7b:64:c7:a8:50:1f:46:dc:58:3b:59:69:
1f:5c:6a:67:63:c1:ee:ed:b5:f8:b1:55:18:dc:8e:0b:32:84:
c7:5e:47:1b:ce:dc:cb:0c:17:8b:d0:07:51:fd:e4:ef:de:ed:
c1:87:c2:3d:eb:de:fb:d4:f6:c2:7b:db:69:00:20:99:92:31:
55:89:ab:df:2d:55:41:79:25:6b:8e:1c:66:2b:5f:93:5e:b2:
14:51:77:cb:7e:af:f0:f4:28:80:06:79:5e:91:5e:e3:ba:0e:
13:de:ee:17:87:94:3c:22:42:17:e7:0e:dd:df:14:7c:52:de:
4f:84:11:8b:72:31:5b:d3:71:7c:af:3b:fd:3a:01:68:69:cb:
75:15:f0:2a:af:16:75:dd:d6:17:90:0d:65:a3:15:b4:b4:e9:
66:86:cf:3f:57:c6:03:22:4d:45:f8:01:21:7a:ee:59:67:f6:
4f:47:83:00:f7:43:92:00:de:27:1c:74:05:fa:4a:c4:9b:5e:
2e:b9:d1:1e:8d:d8:27:c7:2c:ad:8b:67:cd:60:94:21:bf:e1:
19:ca:7a:b8:9a:a2:76:0c:a2:82:4f:77:ae:ca:12:5d:22:25:
55:63:37:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:33 2025 by rpki-client on console-fra.rpki-client.org