Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
File: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft (raw, json)
Hash identifier: ucZgvizQ4TvJ/9HUc2O3whBxteJylXnaSnBclhxg6Fo=
Subject key identifier: 63:90:99:49:5B:63:13:FD:02:6D:0A:39:8E:48:EB:61:E8:66:1F:04
Authority key identifier: 94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
Certificate issuer: /CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Certificate serial: 0194BB9751F682D08F3245772922F1D53A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
Manifest number: 03D2
Signing time: Fri 31 Jan 2025 09:00:43 +0000
Manifest this update: Fri 31 Jan 2025 09:00:43 +0000
Manifest next update: Sat 01 Feb 2025 09:00:43 +0000
Files and hashes: 1: BsjKxlyhr1xJt-_B7RFdha2dw34.roa (hash: DZrrLtviTY8IeT2xTa11fcFFAO4I1PCCgwnVwmVsFaU=)
2: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl (hash: YoyYwW5VvQ7g0I9lPu8WrdjwVS1/6MXbp0HD6HArEXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:51:f6:82:d0:8f:32:45:77:29:22:f1:d5:3a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Validity
Not Before: Jan 31 09:00:43 2025 GMT
Not After : Feb 1 09:00:43 2025 GMT
Subject: CN=639099495b6313fd026d0a398e48eb61e8661f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:66:4a:6f:b9:d4:5f:c1:0a:6c:f1:5e:5a:
db:fa:bb:a6:1b:25:79:a5:59:43:dc:61:31:0b:d6:
56:a0:67:d3:f4:e5:d1:92:40:9a:17:2b:8c:f3:ea:
4c:9b:70:bc:dd:6c:33:b0:03:1e:ba:e1:96:72:18:
04:fb:e7:74:8b:d0:40:33:7e:76:7d:df:54:36:60:
a7:82:7b:09:4b:bc:19:9d:db:8d:eb:83:f6:7e:79:
e1:6c:55:0d:bf:60:bd:e0:e4:1a:68:62:2d:c3:93:
98:05:dd:11:f6:bc:ef:94:c6:d8:de:56:90:c0:da:
22:fc:ad:b5:fd:e3:ab:24:b8:8d:2a:2c:66:7a:7d:
5b:f8:3f:ac:7b:51:d3:b7:d3:0d:07:bf:36:17:70:
12:87:73:95:6f:8b:65:69:65:91:3a:dc:fd:29:83:
08:16:37:bd:53:ee:c6:40:43:44:61:49:e0:9b:d3:
21:73:76:eb:9b:1f:9b:de:bb:da:b6:1f:64:44:f7:
62:48:ac:2c:00:83:fd:0d:2b:5c:22:75:82:5c:a1:
eb:d7:77:bc:e6:b4:f8:4c:22:c5:a7:73:61:ca:8e:
e2:fe:0e:40:14:0b:d1:91:fc:18:87:24:c7:c8:e7:
1f:ce:d6:28:b2:0e:a4:e5:8d:ed:7e:8b:5c:ee:9b:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:99:49:5B:63:13:FD:02:6D:0A:39:8E:48:EB:61:E8:66:1F:04
X509v3 Authority Key Identifier:
keyid:94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c7:d8:98:38:80:79:16:6f:6b:6a:d1:dd:2a:b7:b2:d5:69:
e3:72:a4:a5:b4:b7:8c:0a:35:64:1d:72:2e:35:2b:0f:4b:8e:
62:69:83:b2:71:19:ad:aa:a1:b6:48:77:8f:8a:90:df:19:81:
48:ca:a1:5e:c6:5a:bb:32:51:aa:39:fd:ad:26:27:c1:9c:30:
9b:27:f6:4c:f7:93:86:2f:fb:a5:61:c6:6a:86:8c:fd:3f:b9:
a6:b8:b3:af:f2:42:5d:3b:06:c3:3c:57:e9:65:c0:b5:1d:80:
dd:9d:6a:e8:40:4e:ec:92:91:41:be:1d:c1:0a:9b:f2:ab:86:
52:82:3e:ef:a8:b3:a8:5a:04:8b:70:a4:dc:a0:e1:41:85:a8:
79:75:12:b8:fa:19:7a:bd:fa:24:5f:47:13:cc:1a:2d:2e:93:
81:dd:9e:7d:1d:4f:61:e7:24:9b:29:88:b4:82:4c:3c:fd:9b:
a3:d2:b6:29:13:31:6e:38:73:bb:99:23:ee:2f:66:f4:a1:3b:
3d:1b:7b:99:7f:68:bc:3d:93:ef:00:e6:36:40:93:c0:ea:30:
de:be:61:27:3f:16:d4:9c:4f:a8:27:fe:9c:cf:86:34:72:e5:
18:21:a8:cf:1e:ed:0c:15:c4:9b:e7:1d:b7:9a:b2:11:37:17:
1b:97:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:47 2025 by rpki-client on console-fra.rpki-client.org