Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
File: LSdW5QjQEzSbJE4wfX8jliafJwg.mft (raw, json)
Hash identifier: sEVAVoy14CGxIr++rTqxsF98/emEUPnsh9EInMFq0VE=
Subject key identifier: 22:CB:E2:F7:1F:F2:FE:3E:C0:A9:57:E4:25:5D:A6:41:88:E1:62:F8
Authority key identifier: 2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
Certificate issuer: /CN=2d2756e508d013349b244e307d7f2396269f2708
Certificate serial: 0194BB2944623E99E888F3F606FFA71AD081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
Manifest number: 10BA
Signing time: Fri 31 Jan 2025 07:00:31 +0000
Manifest this update: Fri 31 Jan 2025 07:00:31 +0000
Manifest next update: Sat 01 Feb 2025 07:00:31 +0000
Files and hashes: 1: LSdW5QjQEzSbJE4wfX8jliafJwg.crl (hash: sNtQ46OiqyOabZtAn0rsdprJ0CRnbtboFAMPcbe7ilo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:44:62:3e:99:e8:88:f3:f6:06:ff:a7:1a:d0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2756e508d013349b244e307d7f2396269f2708
Validity
Not Before: Jan 31 07:00:31 2025 GMT
Not After : Feb 1 07:00:31 2025 GMT
Subject: CN=22cbe2f71ff2fe3ec0a957e4255da64188e162f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:0f:76:58:9d:8b:7b:bb:96:06:6b:5d:84:
e8:dc:73:76:d0:04:1e:e2:01:3c:23:d8:fe:6b:4e:
11:c1:35:ce:44:ab:e3:e2:43:5c:2b:c8:c8:d8:3a:
a8:1b:a6:5f:32:c4:59:e0:78:a1:07:5e:97:bc:14:
2b:bc:4a:c4:d8:f4:b3:3f:80:d4:e1:69:71:39:99:
e1:62:e2:b2:b4:69:0d:73:b4:eb:59:c0:72:cb:db:
df:b8:a3:b7:e7:67:8b:ff:5f:9e:5b:c5:a9:d2:38:
18:dc:77:4c:9c:5b:67:74:0f:3a:3b:42:3f:b1:19:
16:e1:1b:d3:26:bb:91:48:12:38:b5:74:b8:b9:2b:
9b:de:16:8e:af:8c:87:65:bf:d7:85:41:af:f8:e9:
b5:f4:8b:b0:55:66:8a:76:02:5c:d8:5a:fd:3a:22:
f9:fa:f2:6d:9a:8d:f8:31:7b:74:9f:dd:b0:bf:64:
f7:d8:eb:50:2f:83:c8:7e:b4:23:fe:c7:fd:11:64:
3b:2b:f3:bd:e6:bd:81:37:69:89:68:b2:d7:68:1a:
91:d8:f1:89:d8:77:c2:67:19:af:5f:d1:dc:3f:0b:
e7:04:6f:47:cf:90:dc:fe:b4:4e:de:0d:1b:bf:18:
e5:d5:83:ee:80:54:a5:56:78:b4:c0:2d:a3:8f:47:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:E2:F7:1F:F2:FE:3E:C0:A9:57:E4:25:5D:A6:41:88:E1:62:F8
X509v3 Authority Key Identifier:
keyid:2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:67:68:db:b4:7b:b9:0f:6f:c5:45:36:33:37:0b:1c:cd:c4:
94:17:6d:29:00:4f:0e:ac:09:b6:7e:d7:ec:f2:fb:f1:a6:a5:
30:e0:13:83:13:a2:9a:11:eb:9f:19:05:02:16:b2:ee:03:6c:
72:23:f2:5c:af:91:e5:b6:30:9d:e3:cb:94:b2:ff:17:72:35:
13:2f:eb:ce:01:af:bb:1e:79:fb:f1:1f:b5:f7:8d:5e:90:80:
1c:70:f5:55:31:e4:7a:66:f5:35:91:98:66:bd:ff:83:38:16:
57:6b:87:72:7a:ea:16:35:0a:86:75:b4:6b:54:73:54:3c:47:
a2:88:30:2c:48:8c:b3:de:13:f2:bc:d5:af:4f:27:21:11:ae:
e5:d0:1c:9b:7e:f7:82:01:2d:73:24:c2:29:29:20:81:19:29:
76:6a:34:78:5c:bc:e5:78:15:da:4c:42:e9:00:b8:d7:3e:3a:
52:2c:f5:42:a9:91:c9:12:a0:43:e3:2a:19:e0:71:34:9c:3a:
29:86:e3:ac:5a:98:ef:5c:31:7c:bb:54:66:63:aa:db:c4:27:
f5:52:bb:04:15:5e:0b:e7:46:28:9a:8d:06:21:ef:30:71:e7:
aa:2e:ca:2d:38:4a:83:59:89:26:b9:b2:f7:d6:fc:a2:71:ef:
a7:ed:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:46 2025 by rpki-client on console-fra.rpki-client.org