Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: WxB6FLBmSY6QhS8C2k89nGsG+i4RZa8I/WuCLKv4GaM=
Subject key identifier: E3:39:CC:B2:76:2C:2D:B2:14:6B:86:D1:76:87:57:4D:34:6A:A3:D2
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 01965A5E223203C258032278543A0A69BFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 0799
Signing time: Mon 21 Apr 2025 22:00:40 +0000
Manifest this update: Mon 21 Apr 2025 22:00:40 +0000
Manifest next update: Tue 22 Apr 2025 22:00:40 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: bBB/5E4nm2xEYOiovdnYJsxtSBa6Cg0npJ8l2QvLXII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:22:32:03:c2:58:03:22:78:54:3a:0a:69:bf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Apr 21 22:00:40 2025 GMT
Not After : Apr 22 22:00:40 2025 GMT
Subject: CN=e339ccb2762c2db2146b86d17687574d346aa3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:67:93:6d:5b:68:64:9c:94:fc:b4:20:f5:
ab:09:24:17:c6:81:25:87:82:97:aa:f0:5a:38:04:
07:65:ad:5f:db:b3:78:f5:19:f9:bf:ac:1c:b3:93:
f6:5d:0f:65:89:f4:b8:e8:6e:a2:4e:7d:6f:f6:cc:
24:ac:c7:c2:76:38:c6:16:f9:65:46:42:3c:bb:67:
89:ea:bc:a1:06:01:cc:58:c0:8a:15:fa:23:ea:2a:
13:de:2a:1e:4f:00:7e:0a:8f:78:16:f7:a4:23:ab:
0f:b1:cd:cc:a4:13:a4:7d:64:aa:a9:bf:d2:5d:4b:
e8:e0:25:0a:b5:26:d1:a4:ad:f9:a1:f3:c2:ca:71:
02:95:e7:3f:57:a6:5a:8c:2d:ef:59:f8:7d:ae:a2:
83:0e:1a:48:7f:53:b7:d4:bf:e4:cc:8a:98:4b:55:
81:0f:da:f0:f7:fe:da:80:97:37:be:70:f0:0f:b4:
45:e5:d2:38:7c:f3:05:e1:85:55:cd:1b:48:1d:bd:
54:b9:52:bf:24:4e:06:5d:7e:1e:34:f4:a4:58:a7:
41:19:63:1c:a7:7a:65:66:d8:fa:c8:9c:c3:49:02:
b5:15:d7:3a:e5:86:ca:f5:d3:5c:d0:56:d8:24:d8:
b3:8e:77:d0:61:57:f9:3a:40:11:de:ef:f8:ff:8e:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:39:CC:B2:76:2C:2D:B2:14:6B:86:D1:76:87:57:4D:34:6A:A3:D2
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:30:85:c8:bc:b9:18:4a:7c:de:13:8d:ad:fc:22:02:73:
77:75:6c:6c:ea:a2:f0:6f:b1:82:13:e0:a1:25:9c:c2:9f:80:
25:b5:8a:f4:b7:0f:24:0d:4f:ef:58:57:51:a6:d4:f8:2f:01:
50:52:d2:c0:4a:67:15:65:b9:72:7f:a8:2b:85:0d:b5:fa:06:
07:22:ab:55:70:fd:51:1e:27:0d:26:20:58:28:c8:a9:66:21:
7f:b5:69:20:74:28:9e:8c:05:2f:3b:c3:2e:9d:12:2f:79:31:
01:30:d3:68:28:f8:3f:1f:66:37:13:d0:35:3a:5b:7d:e5:50:
d8:30:2f:53:3d:95:4b:33:ab:37:a5:f3:ae:0b:4c:8a:e8:88:
25:fb:88:39:50:7a:18:aa:74:01:4e:56:85:20:93:d3:7a:eb:
02:2e:13:5d:30:a4:8a:d8:52:69:6a:37:22:7d:b0:d2:55:11:
48:76:49:06:00:f0:3d:0e:84:45:c2:55:3b:ff:99:1a:95:d3:
47:39:60:de:be:75:2e:9f:f2:fc:1d:ad:f5:28:66:b7:4d:f4:
ed:84:ad:47:63:f5:ed:87:30:7b:07:c0:b9:c4:b0:cc:f4:e3:
99:fc:8c:6e:47:e7:9e:bd:97:f4:6c:c3:51:0a:93:63:0c:98:
c4:03:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:29:22 2025 by rpki-client