Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier: kBixQCWr0G/P1kp6/Uhu4aU7UhLehveF8JZUw5FwJO0=
Subject key identifier: 16:9F:42:DE:6D:88:01:6A:0C:1B:6A:F8:34:74:B6:0A:B0:E2:4C:7F
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial: 0194BABB8B38267DF543FB4495D47B0625E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number: 0337
Signing time: Fri 31 Jan 2025 05:00:40 +0000
Manifest this update: Fri 31 Jan 2025 05:00:40 +0000
Manifest next update: Sat 01 Feb 2025 05:00:40 +0000
Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: 0CX/1Grlsgjl40cOdvb95owjANcRYwTCawpWu4Qp1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8b:38:26:7d:f5:43:fb:44:95:d4:7b:06:25:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Validity
Not Before: Jan 31 05:00:40 2025 GMT
Not After : Feb 1 05:00:40 2025 GMT
Subject: CN=169f42de6d88016a0c1b6af83474b60ab0e24c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:34:64:a5:69:88:ca:1a:7f:66:e5:e3:a0:
35:19:bd:64:8e:43:d2:54:78:80:07:03:15:b7:cd:
d4:69:44:ab:2d:fa:83:59:0a:9f:4a:3d:b4:25:d0:
ee:fa:cb:d1:53:c4:39:0a:5e:92:18:06:a0:7d:57:
69:46:44:3e:f6:28:1f:18:9e:70:b5:b3:99:7a:db:
7c:0e:d6:c7:07:b4:bf:f4:5d:90:f2:25:51:0c:e4:
41:a6:b3:f0:21:a9:9d:cd:19:f3:2e:0b:01:f6:65:
da:e4:8a:ff:db:d7:44:02:c0:ea:32:6c:2c:f0:7e:
2f:5d:eb:ef:dc:28:56:6e:93:53:f0:34:de:e6:27:
89:15:cb:50:70:a7:d6:e1:7c:70:8a:dd:7d:8d:54:
ac:3f:25:04:5b:99:0c:7f:06:cd:dc:de:14:da:78:
64:05:36:04:e3:19:08:8a:c9:32:de:65:0e:c5:05:
0b:04:ff:b0:ff:26:c6:fd:7a:77:11:f8:33:2a:2f:
4e:35:73:e8:33:9f:13:95:fd:64:b4:f6:81:28:21:
bb:78:3d:96:e3:f6:8a:c6:33:c8:55:a8:cf:a2:e0:
04:63:4c:c6:43:5f:7f:88:b1:87:d5:b4:51:c3:b3:
77:40:ab:7b:b1:39:2e:85:c3:d0:a3:96:fc:20:ee:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:42:DE:6D:88:01:6A:0C:1B:6A:F8:34:74:B6:0A:B0:E2:4C:7F
X509v3 Authority Key Identifier:
keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:30:6d:ea:ab:bc:83:77:1d:93:14:00:38:0a:cf:a8:3f:ac:
33:46:c8:c1:01:0b:1f:a8:3c:b7:3b:79:5c:25:b3:8f:ae:1f:
32:3d:22:09:49:11:54:1a:36:6b:09:e8:14:1d:b6:41:82:4e:
0f:28:70:42:47:8e:76:48:96:00:db:d6:71:cb:db:a2:98:5e:
b0:81:e1:3b:af:d4:40:af:f3:90:30:60:b7:ad:24:03:50:79:
b2:0a:f7:f0:35:53:57:94:d9:21:bb:43:36:7c:ed:4c:b0:45:
7f:9b:3e:0b:15:52:d4:79:83:dc:ac:32:4d:4a:2d:55:b3:1f:
21:9f:0d:e4:17:d3:85:64:c4:ff:01:0a:fd:9b:ff:fb:0e:80:
05:50:c2:7b:0d:04:b2:b7:bb:e9:90:e6:ba:2f:e4:5c:dc:1a:
ba:ca:bd:51:ae:f4:a9:b7:d9:43:e8:1c:86:df:51:c1:74:63:
69:9e:d2:cd:c1:fd:6f:54:39:5c:5e:89:7c:cd:bd:0c:a7:5b:
a4:8b:8f:75:14:9e:c5:0e:d7:95:ae:21:14:73:58:71:c3:c4:
dd:34:87:97:f7:c9:39:84:51:e6:e6:f8:d7:b1:9d:57:1a:4c:
3a:85:82:b5:20:32:ad:40:b0:c7:37:45:ff:1b:91:0a:d4:65:
6f:ea:45:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:06 2025 by rpki-client on console-fra.rpki-client.org