Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: Be15qe623h/xQKeqbN+U1p7qNWUvXRAqr9DRAn9C3k4=
Subject key identifier: AA:0F:12:48:74:39:24:3F:42:10:D7:69:7A:9B:50:85:05:D8:5D:E1
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 0194BBCE487CF84B0E5D88D4635839C088DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 1056
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=)
2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=)
3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=)
4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=)
5: SzIYNPUoEL2lNgHPu6Cv9-8A3NQ.roa (hash: L9MrT1ApDR9Zu3Mt30XmDFK5d0LlyrmWV2EUjKDxz5E=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: i9yDppPe1cBdAwxyPLyiBmhkgjMl82gXq2AfVGUbMMU=)
7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:7c:f8:4b:0e:5d:88:d4:63:58:39:c0:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=aa0f12487439243f4210d7697a9b508505d85de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:2a:a8:8c:30:58:42:cc:56:a3:42:2a:da:
82:65:b2:e3:2c:1e:22:64:2a:b2:08:ac:e5:7b:e8:
d9:47:0e:cb:4e:df:f2:3e:1c:0f:ce:91:f4:c5:53:
68:10:e9:a3:10:76:0c:80:7c:bb:d8:b3:23:88:e4:
15:99:cf:31:d1:95:50:42:c5:34:ae:9f:bc:dc:d8:
89:37:81:05:8e:11:01:04:30:97:19:fe:d8:39:de:
c1:9b:3b:f0:8d:b5:4f:e8:f4:34:7d:2a:64:6a:66:
08:a0:90:07:c7:a8:cd:a2:7d:3f:12:e6:00:98:12:
83:0e:0d:d8:4c:42:05:14:a7:c9:7e:a7:ef:dc:b4:
42:87:fc:d7:5c:44:65:3d:b9:49:3d:af:10:02:3f:
5e:6f:f8:0b:8f:9f:5d:23:eb:0f:da:ce:8e:33:fb:
cb:81:f6:85:f8:5f:87:a8:92:c9:d6:c7:4e:47:69:
f6:3e:9d:02:43:30:cd:6f:70:3d:4c:c8:b2:c8:5f:
ba:09:37:83:d6:08:22:80:9e:64:92:e0:42:60:e6:
95:85:82:eb:fc:6e:6e:ae:25:55:17:01:0f:74:f6:
c7:59:4a:f1:a2:4d:0d:f4:e3:f5:97:3a:a4:30:39:
1e:1c:b1:7c:e5:fe:31:5b:82:60:70:69:68:a8:6c:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:12:48:74:39:24:3F:42:10:D7:69:7A:9B:50:85:05:D8:5D:E1
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:37:a3:fc:15:f7:61:b1:13:c3:74:80:94:c7:73:d9:37:d5:
fb:a0:99:b8:86:a6:e5:aa:95:8a:ea:26:ba:2c:6f:9e:c5:2c:
d9:ee:16:62:4b:e3:b3:00:bc:fa:6c:31:f9:56:f5:b4:60:cd:
f2:ca:42:34:b2:15:d6:9a:a6:00:87:ea:b0:cc:ef:ad:b5:04:
39:92:cf:88:fc:97:ff:7e:12:91:50:5e:27:98:a9:0a:e8:c8:
2d:dd:d5:d6:1c:7d:3d:43:19:31:58:8d:58:5e:fb:6d:ea:f9:
cc:ca:31:f4:63:a0:8f:16:db:f1:09:c9:31:f2:08:ba:e2:5c:
4c:19:8a:76:1c:10:a0:18:28:10:4b:ec:80:a9:7e:8b:b4:c9:
0a:55:1c:8f:1a:78:14:f5:6f:da:0e:fe:3b:92:c9:d3:31:6d:
07:c3:e3:55:de:9f:f5:0f:ec:27:28:6f:c1:de:c1:8c:93:f1:
9c:13:30:0f:25:ac:b4:6d:a8:33:6e:60:fb:c5:f2:de:19:0d:
92:c6:95:bc:41:ba:53:9a:ae:e5:8f:d2:03:6f:80:f1:b0:3f:
53:d3:a1:79:c8:9e:b9:46:1e:66:2e:60:2d:9f:95:e4:09:7d:
6a:a2:ec:d5:16:42:b5:3e:6d:21:fa:09:6f:3c:2f:26:3e:fa:
06:4c:0a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:56 2025 by rpki-client on console-fra.rpki-client.org