Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: 0NM9cp2Pyj8pEY9F501EPcvZFfQB8VelxxmD1O/GvN4=
Subject key identifier: CA:1D:E7:29:1D:2D:18:CC:11:31:FE:3B:F7:6F:E3:1E:C7:30:D0:56
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 0194BABB28F1308DFEF21660D25297D361D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:15 +0000
Manifest this update: Fri 31 Jan 2025 05:00:15 +0000
Manifest next update: Sat 01 Feb 2025 05:00:15 +0000
Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: VgKDgeaswI9B1LF7afVVFtB/AsOgZvFpeuY16ShMcrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:28:f1:30:8d:fe:f2:16:60:d2:52:97:d3:61:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Jan 31 05:00:15 2025 GMT
Not After : Feb 1 05:00:15 2025 GMT
Subject: CN=ca1de7291d2d18cc1131fe3bf76fe31ec730d056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:be:b1:ce:1c:42:51:fb:6c:9b:7e:4f:f5:
40:ae:35:79:37:15:f5:3f:c2:3e:aa:4b:3a:95:da:
29:5e:09:1e:e0:2e:a2:5e:30:8e:33:3d:53:34:9c:
c9:8c:8d:80:bc:fa:da:c6:bf:47:c5:eb:8d:f9:5e:
3c:6b:bb:d3:40:87:47:03:4e:21:f8:a7:85:b6:48:
63:b4:d1:84:39:ff:74:82:f8:09:39:c5:ca:41:22:
5d:02:29:46:66:da:45:ec:0c:18:de:4b:ee:0f:4e:
30:75:ee:ea:bf:6a:b5:d6:32:eb:c9:ec:d2:e1:bd:
be:5c:20:06:11:7b:00:ea:e6:1e:8d:51:76:3d:62:
f3:2f:99:23:b8:75:fa:16:ee:c1:e0:2c:27:01:86:
40:da:e2:9a:f7:17:f8:bd:0e:b2:1b:31:60:03:ae:
0a:b4:ba:01:18:eb:a9:45:c1:af:e2:9f:fc:71:1d:
fd:a1:ab:cf:0a:35:88:fc:79:2a:fe:2e:03:98:5d:
b9:62:3f:5b:9c:44:32:f0:ab:09:ec:02:f7:e0:43:
f1:9a:db:82:d8:04:54:c6:b8:01:e8:72:bb:47:8c:
36:73:7b:76:66:ca:34:e4:ca:bf:9e:17:1e:37:0c:
5e:fa:11:c8:ee:ed:6d:f3:5d:19:d6:87:18:31:2b:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1D:E7:29:1D:2D:18:CC:11:31:FE:3B:F7:6F:E3:1E:C7:30:D0:56
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f5:6b:f3:51:2a:d2:b7:88:89:48:ad:cf:9e:2a:e1:9f:64:
aa:02:6d:0a:8d:eb:f2:e2:ef:f1:04:69:db:c0:2d:90:83:1f:
48:29:a9:5e:fe:18:8b:91:f1:a5:7f:69:32:67:e4:4b:0d:44:
94:99:56:2d:15:71:d0:51:b9:59:cb:78:8d:1e:7a:8d:b0:33:
3e:3d:50:ab:9f:14:c8:a7:36:0b:89:50:fc:9c:8a:40:16:c5:
ec:d4:69:80:11:60:44:42:cd:e4:9b:57:92:81:09:81:16:36:
e8:ef:03:73:bd:55:69:90:93:89:2e:28:8b:1a:12:ad:bd:8d:
ed:ec:00:98:da:29:8d:36:31:bc:4b:df:49:98:26:fa:03:3a:
c9:0d:f5:57:52:4e:45:78:4c:03:2f:8c:4d:db:74:3a:3b:3d:
0c:9b:30:09:b5:ad:47:df:e4:ed:d7:04:fd:0f:05:82:06:be:
fe:34:cf:af:e3:8f:6c:87:c2:0c:62:e5:b2:f2:7d:e9:38:12:
cb:a3:d0:4e:c2:d5:57:72:84:5c:eb:80:a2:0f:29:6d:8e:51:
85:29:d5:a0:93:ba:0b:7f:25:bd:bb:b7:9d:94:d1:a0:39:35:
42:47:7a:55:0c:3b:5e:29:51:5b:9f:aa:46:e3:a9:5d:99:09:
e5:9b:54:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:49 2025 by rpki-client on console-fra.rpki-client.org