
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
File: LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft (raw, json)
Hash identifier: GV6jX6AdI0RzPraQy8flZ77mY+N3YTmGjW38mKOEFAg=
Subject key identifier: BB:94:C5:F0:74:68:7D:82:87:70:07:F8:15:68:A8:01:DA:97:C9:98
Authority key identifier: 2E:39:D3:30:A5:F0:40:67:EF:F9:17:34:73:D6:70:88:AB:E9:19:6F
Certificate issuer: /CN=2e39d330a5f04067eff9173473d67088abe9196f
Certificate serial: 0194BB9740FAED86FF78F5BA8F5B40FEEAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
Manifest number: 099E
Signing time: Fri 31 Jan 2025 09:00:39 +0000
Manifest this update: Fri 31 Jan 2025 09:00:39 +0000
Manifest next update: Sat 01 Feb 2025 09:00:39 +0000
Files and hashes: 1: LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl (hash: fjNGI3CjufI+Of+BTlhaFMfHe39X8kSe2L/CCN7OU8s=)
2: Ne10b5rjlmDzddihe7gb6ocO2b0.roa (hash: ylaDgjgfTcWmf+Rg61sIK8UxE7w3h13qSpQ40+L4Ysw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:40:fa:ed:86:ff:78:f5:ba:8f:5b:40:fe:ea:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e39d330a5f04067eff9173473d67088abe9196f
Validity
Not Before: Jan 31 09:00:39 2025 GMT
Not After : Feb 1 09:00:39 2025 GMT
Subject: CN=bb94c5f074687d82877007f81568a801da97c998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:4a:33:35:5c:38:1d:37:61:2d:d7:32:33:
d7:2c:b7:ab:da:65:d8:d6:55:67:35:83:74:df:a5:
a9:7a:f1:63:83:14:0d:50:a6:5f:80:48:1d:4b:22:
80:73:7e:86:7a:8a:02:98:c7:99:64:42:68:09:4d:
b8:56:62:bb:c6:bb:57:b9:c8:34:a8:a7:74:5f:e5:
0f:9b:2a:4f:85:e8:ff:13:22:b6:fe:e7:58:1c:0c:
35:67:dd:ea:db:f7:b4:98:5c:07:61:ea:01:91:62:
7f:69:77:f0:a8:2b:aa:3e:6d:48:e5:ae:38:76:43:
38:82:fe:e0:e0:da:a8:74:0f:b3:54:a1:b3:11:f2:
57:07:2e:74:c0:fc:5d:7e:dd:22:04:60:02:8e:7f:
f5:cd:52:c9:c9:f4:33:04:1b:c1:ac:22:2c:f3:61:
20:18:60:39:b8:79:c3:0e:de:e9:a9:10:ec:8b:0f:
1e:43:78:90:49:ba:22:e4:e1:ae:b8:8f:44:1c:07:
3e:0a:30:3f:33:30:30:9e:c9:8c:87:01:4f:4c:8c:
a8:ea:b7:ba:03:77:28:d9:d8:f6:7d:49:f6:87:c6:
25:3d:32:02:76:34:b8:de:9c:9d:55:fb:64:75:54:
da:35:1f:c9:b2:ad:7f:4a:1a:96:82:e3:a8:84:9f:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:94:C5:F0:74:68:7D:82:87:70:07:F8:15:68:A8:01:DA:97:C9:98
X509v3 Authority Key Identifier:
keyid:2E:39:D3:30:A5:F0:40:67:EF:F9:17:34:73:D6:70:88:AB:E9:19:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1c347d-f1c9-4897-bf2c-ca3074cd9968/1/LjnTMKXwQGfv-Rc0c9ZwiKvpGW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ed:59:db:6a:db:fb:20:7a:57:b0:38:af:6e:ba:3e:8a:1e:
9f:31:a8:bf:1a:4d:ef:90:b3:fd:41:82:c9:6d:be:43:b4:c2:
09:54:6b:8a:5a:82:35:b3:2c:41:c2:1b:8f:42:b1:ec:06:f5:
33:c3:ed:7d:8a:47:f7:60:9c:52:6f:91:1c:31:77:af:ff:99:
0e:4d:e4:41:05:b8:85:ff:3b:dd:e5:8c:c2:be:f8:88:21:94:
73:47:f1:14:6b:88:be:f6:32:16:45:ef:97:30:fb:e3:62:33:
fa:7d:27:f7:8e:ce:43:57:61:23:09:88:47:cc:69:c6:e7:a4:
a2:f0:e1:0f:41:8a:a7:aa:b4:9f:b9:7a:24:e2:3c:b5:d6:ed:
e7:8e:b1:0f:fc:db:ac:67:92:df:85:fe:5e:38:56:66:d4:10:
8f:12:20:f9:52:06:f7:9e:01:50:39:18:06:38:14:ba:1c:a5:
f2:39:eb:8b:84:45:f9:2e:a2:43:8d:78:84:ec:79:60:cb:a5:
a1:b3:fc:ff:0b:eb:a0:c1:a6:67:53:a1:ed:6c:a2:6a:28:5c:
8e:63:88:07:07:7e:c0:6e:99:c9:c7:38:d5:25:53:4c:5e:6f:
47:95:d8:0e:32:2b:de:a9:67:33:aa:ac:af:85:91:e7:3d:86:
00:68:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:22 2025 by rpki-client on console-fra.rpki-client.org