Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: 65hP03Gbob4b3sYLLqwBGWxzQQsZ1Ung48UPEWNtsH0=
Subject key identifier: 5A:08:97:2F:1D:CC:92:73:E3:04:0A:81:26:37:7A:CC:48:99:77:10
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 0194BB298C5F866E943DFA90681E7BA9EA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 033F
Signing time: Fri 31 Jan 2025 07:00:49 +0000
Manifest this update: Fri 31 Jan 2025 07:00:49 +0000
Manifest next update: Sat 01 Feb 2025 07:00:49 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: K8ha7O8WBKBlLCacV1Ec8OflrnPCqrb2p/KYolmrwXQ=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:8c:5f:86:6e:94:3d:fa:90:68:1e:7b:a9:ea:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Jan 31 07:00:49 2025 GMT
Not After : Feb 1 07:00:49 2025 GMT
Subject: CN=5a08972f1dcc9273e3040a8126377acc48997710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:15:7f:82:dc:50:59:c9:12:0e:73:10:e3:
6e:2d:1c:3d:21:71:83:bc:16:0b:05:f5:eb:49:b1:
a7:a7:58:e1:8b:0b:e6:17:88:6a:dc:8e:f9:4f:06:
83:0a:1d:5a:9c:ea:fa:9a:1f:0c:85:40:04:e9:50:
48:7d:5e:ab:b9:96:a1:23:02:dc:05:f4:1f:e5:74:
ab:1a:f0:7e:7c:d9:50:71:68:66:0e:33:88:8f:95:
1d:41:e1:69:83:df:57:77:cf:ab:08:9d:bd:f8:b4:
9a:15:8f:59:19:c7:e3:d8:b6:52:c5:4c:b2:fd:ff:
26:ef:fb:3c:5c:e3:d2:8b:df:9d:00:0b:e3:2b:fb:
1a:81:f4:83:af:11:aa:a8:78:f2:1b:c4:ff:ff:01:
9e:ab:54:fb:78:91:f0:59:8c:df:e1:9c:a2:a4:35:
34:fa:60:69:3c:0e:a9:87:8a:1d:8a:7c:44:ce:45:
f0:ae:55:e7:5f:f4:d6:d6:3e:11:5a:82:ad:25:55:
d6:b0:3f:0b:8f:bc:f6:1a:e9:84:ea:6f:25:9e:a4:
6c:d1:8c:b7:2d:c0:bc:d9:2b:ce:e3:e4:75:7e:d6:
1b:36:64:13:5a:2e:b1:06:52:25:92:8c:23:7e:fe:
a2:02:fe:2f:4a:5b:a5:0a:10:33:a0:46:28:f7:45:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:97:2F:1D:CC:92:73:E3:04:0A:81:26:37:7A:CC:48:99:77:10
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7f:1b:a0:eb:37:93:80:6f:b8:0a:73:bb:75:56:69:42:80:
0b:1f:ff:63:37:3c:af:c3:e6:52:40:fa:05:5e:d9:8f:91:8d:
c9:17:da:31:b5:ab:1b:b7:ee:2a:a4:33:74:18:33:47:87:6a:
ae:1c:99:06:8f:e3:89:4d:b4:b5:cf:5d:cd:6a:8e:12:ca:ce:
f6:6c:88:e8:5d:2d:cd:23:35:f8:37:79:8b:f5:7b:07:46:14:
5d:ef:b8:9c:e8:0a:89:2d:66:51:83:c8:f6:d4:e6:95:cc:38:
ed:db:10:ce:eb:98:e9:e7:cb:61:8b:ce:be:c6:3f:61:47:8f:
88:60:e4:c2:f5:b0:61:35:9b:d8:0f:f5:5a:68:3d:7a:e4:dd:
8c:08:88:ac:cb:fd:f2:39:eb:41:ea:15:30:fe:e4:a3:fb:8a:
0e:c2:d5:31:a4:57:69:0b:ad:11:b9:b7:4c:2c:c7:cd:14:57:
44:76:fd:a4:4c:6c:81:6f:2f:b9:cf:85:5b:f6:f2:72:b0:4a:
c3:10:54:0b:62:d1:bd:6a:d2:f3:2c:a9:d1:2b:86:4a:68:eb:
f4:aa:2e:80:c6:c3:17:01:3e:d5:0c:57:b2:64:01:ae:c9:fd:
6d:23:a4:3b:8e:c2:cc:ea:c5:b8:26:14:7c:16:73:03:94:9b:
a1:ca:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:27 2025 by rpki-client on console-fra.rpki-client.org