Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
File: lgxteH5rXrZCSN2aehBlsQU_dFg.mft (raw, json)
Hash identifier: wVepDm6E1G8p4KeJXAU4y407gZGxM51ImjVvh/S4r1Y=
Subject key identifier: A6:40:F9:E4:41:F9:03:4D:E6:D8:60:7E:47:27:03:F3:F9:B8:F6:2A
Authority key identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
Certificate issuer: /CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Certificate serial: 0194BB28F5ACC6566944C3603095FB432946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
Manifest number: 0B89
Signing time: Fri 31 Jan 2025 07:00:11 +0000
Manifest this update: Fri 31 Jan 2025 07:00:11 +0000
Manifest next update: Sat 01 Feb 2025 07:00:11 +0000
Files and hashes: 1: kBsht6KNIVIdqBo-LjM3rdj9_48.roa (hash: yvy0FENQOdTgUPrF3X0q20Rd17JBcuTbTmhNZ8raWkU=)
2: lgxteH5rXrZCSN2aehBlsQU_dFg.crl (hash: X9L/jFDf66ivW7QTzbp3Y5w9lEEOiaLe77Yvtfe7Deo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:f5:ac:c6:56:69:44:c3:60:30:95:fb:43:29:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Validity
Not Before: Jan 31 07:00:11 2025 GMT
Not After : Feb 1 07:00:11 2025 GMT
Subject: CN=a640f9e441f9034de6d8607e472703f3f9b8f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:04:21:20:72:fd:fc:83:3c:0b:24:fd:ae:
75:34:97:c3:0f:ae:43:97:48:2e:05:f3:b8:26:39:
1a:c7:33:0f:5e:a5:eb:1e:0f:e5:3f:4d:5b:27:01:
d8:fe:88:41:73:8f:f1:81:01:3d:4a:eb:a5:03:3a:
d1:84:c3:ef:f0:19:45:19:a2:11:a7:45:7c:30:ed:
4c:77:2e:32:4c:64:bd:d2:b0:06:5d:35:b1:90:bc:
f0:70:18:2c:2f:da:28:45:ca:1e:af:6e:69:db:92:
a3:93:e0:6a:7d:2a:25:09:b3:68:ef:13:38:d5:a2:
35:a4:69:fc:87:f0:a8:e0:c7:1b:9d:04:07:11:75:
83:52:a4:e8:e9:f1:56:42:dd:bc:75:06:f8:8b:df:
b4:0c:49:19:23:d8:9f:b2:91:a7:26:d2:41:23:44:
77:f9:09:c0:52:ee:4e:c5:13:db:ff:b6:cf:34:03:
97:06:30:e5:11:ae:25:45:b2:a6:4e:28:45:f1:33:
9d:fe:10:36:39:da:5b:49:13:9f:fb:62:5e:43:64:
8c:cc:c7:06:88:9c:8d:82:6b:00:ab:7a:23:73:7d:
ec:9a:46:a0:e0:04:54:ac:c6:fe:25:e5:9e:05:5c:
a2:f7:ee:b2:af:04:ce:05:4a:60:b6:47:8a:47:1a:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:F9:E4:41:F9:03:4D:E6:D8:60:7E:47:27:03:F3:F9:B8:F6:2A
X509v3 Authority Key Identifier:
keyid:96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:a8:98:06:1d:38:c2:2c:81:b5:91:f7:2b:ef:85:2e:b8:
66:95:bf:e7:47:76:dc:0b:bb:be:bf:be:43:dc:8d:da:6c:ac:
54:e2:de:c9:a7:bf:8c:d6:0f:53:5a:4d:c4:b0:59:d2:37:8e:
90:cb:d3:41:28:f9:e0:ef:52:89:28:21:a6:cd:91:35:5f:0c:
88:7c:68:c8:9f:01:9c:c4:bf:f6:32:5c:05:a6:5e:cd:cc:f2:
d3:41:48:e9:1c:17:d1:6d:91:4a:d3:3e:4a:4c:e9:d6:16:52:
80:cc:dc:b6:e5:f9:c2:23:79:60:0e:20:56:9f:cd:a0:28:95:
27:13:99:9b:d6:32:83:96:37:e1:cf:35:5c:0f:bd:60:88:30:
50:cf:0a:b0:8b:1d:ae:1e:7c:0c:a1:81:5f:98:dd:72:77:c1:
65:11:59:e6:8a:e3:48:5c:70:ac:6f:da:35:04:b8:9b:61:c3:
1d:82:88:6f:2e:2d:3e:45:55:c6:8c:ec:5a:8c:e7:fd:e2:29:
44:50:4e:70:ca:ee:4d:36:b1:8d:99:1e:12:db:13:f3:21:11:
6e:ee:ce:e6:cc:6c:f6:ae:29:26:a0:5b:5f:15:b5:f1:95:14:
0d:bc:c0:8c:33:bf:ce:55:8c:3a:a3:51:a1:24:05:24:01:f3:
bc:ec:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:26 2025 by rpki-client on console-fra.rpki-client.org