Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: f8m4cJvmZFfoEZOZiVHUp3Ave8DTFZ6fadBzaUg9uhc=
Subject key identifier: E5:6B:19:56:51:56:C5:45:48:4C:5B:ED:4B:E2:95:41:C7:71:F3:36
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 0194BB5FE1BE9E368E36F55E0569BC815100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:10 +0000
Manifest this update: Fri 31 Jan 2025 08:00:10 +0000
Manifest next update: Sat 01 Feb 2025 08:00:10 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: 9MqPaIbpvDent/yilVgvGpJfrANiV1gWLFuoRM88EPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e1:be:9e:36:8e:36:f5:5e:05:69:bc:81:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Jan 31 08:00:10 2025 GMT
Not After : Feb 1 08:00:10 2025 GMT
Subject: CN=e56b19565156c545484c5bed4be29541c771f336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:44:a8:33:b0:f2:f3:18:c2:ec:13:4a:e4:
06:de:75:62:1f:f6:a8:86:02:96:ed:ef:17:d5:85:
45:6f:3f:1b:4b:cb:d5:ed:8c:44:fd:4a:66:7a:71:
d9:db:64:f2:f8:88:2e:ec:00:7f:c3:12:10:d7:13:
2b:5a:d2:b9:81:e3:ea:76:02:51:a5:f3:03:33:7c:
53:7e:9c:b1:1b:3d:17:82:5a:1d:89:c7:7d:9b:8f:
36:ac:d2:bd:5f:36:38:16:ad:93:e3:23:c8:82:56:
a5:84:e5:63:7b:df:7b:91:1a:a7:68:05:94:5c:3b:
94:3f:ee:fa:f7:ed:a6:e7:88:87:b0:2c:1d:99:a4:
43:87:2b:ad:c2:c1:b3:c2:cc:a2:e2:c2:1d:d6:d7:
b9:5c:a0:1b:0a:76:ce:a8:d4:ca:5a:84:d2:03:f2:
5d:5e:94:88:91:78:93:32:d0:29:09:78:38:d6:50:
64:00:91:ae:ca:88:55:37:3a:df:22:61:a5:4c:14:
ca:23:a9:73:98:99:5e:4f:74:1b:b1:c3:62:20:d7:
d6:09:5d:4f:86:39:58:b1:9a:8a:96:0d:b3:da:b6:
64:f5:ba:4f:12:4b:2d:3c:96:4d:43:c3:69:57:07:
4d:77:e8:56:cd:19:2b:73:4e:ca:c2:65:ba:b8:ef:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:19:56:51:56:C5:45:48:4C:5B:ED:4B:E2:95:41:C7:71:F3:36
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:41:d1:24:84:49:d1:84:18:af:e4:9b:b9:f7:34:d7:ac:
c7:59:07:a3:c1:1d:d1:eb:fd:49:35:5f:07:60:43:50:43:7c:
f1:10:83:a0:4e:c3:64:57:c3:aa:3f:e6:26:85:8a:67:80:4c:
a5:bf:3e:0e:49:df:63:17:db:14:ec:3d:90:08:78:06:cb:ee:
0f:a4:ab:73:94:ca:70:7d:f5:d5:8a:0c:d4:86:1c:a8:2d:78:
63:d8:7d:77:dd:a3:11:e4:a5:22:b8:51:4c:04:db:7a:44:66:
bb:8a:5f:cc:e4:6a:45:b5:29:81:c1:7e:c7:2d:a0:e2:ea:ae:
1d:7d:6e:05:23:45:1c:85:6f:cd:6e:cc:07:1c:00:2f:85:eb:
61:b5:3f:5f:60:74:ac:25:b5:f1:15:c3:b0:2c:cf:09:e8:6e:
b6:3d:b9:78:bb:3d:4b:fb:03:2f:2b:a7:81:44:06:74:34:4a:
51:41:bf:8c:46:e7:ad:e5:f8:a5:55:32:5a:31:2b:b4:18:0f:
cb:b7:4f:11:72:d7:78:e7:ff:b9:3e:b1:b2:b3:0c:b9:d4:1b:
2e:56:5a:85:79:81:18:29:0c:80:9f:63:8e:1d:5a:1e:28:81:
37:ba:ff:01:e5:7c:d4:17:cb:f3:94:b9:a5:96:d8:68:66:51:
14:b1:8e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:40 2025 by rpki-client on console-fra.rpki-client.org