Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: R4SuUqNQjBfxvxgnIKG/JHut4/QFpPBUmhYyPzcumo0=
Subject key identifier: 7D:4D:5E:83:11:3B:FF:03:E8:3E:71:13:0E:68:E2:1B:F5:C3:73:FE
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 0196556ECD900A28D4A7F75ECFBCAE0DF9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0867
Signing time: Sun 20 Apr 2025 23:00:47 +0000
Manifest this update: Sun 20 Apr 2025 23:00:47 +0000
Manifest next update: Mon 21 Apr 2025 23:00:47 +0000
Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: JwESebnVHrOm84xr2p19yCjK+rxgSxOImWPUEf7ExbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:cd:90:0a:28:d4:a7:f7:5e:cf:bc:ae:0d:f9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Apr 20 23:00:47 2025 GMT
Not After : Apr 21 23:00:47 2025 GMT
Subject: CN=7d4d5e83113bff03e83e71130e68e21bf5c373fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:27:96:12:c9:83:a6:35:ef:11:0e:d2:d9:
15:ef:01:88:b4:42:33:d5:12:bf:0d:fc:e6:e8:92:
9f:d6:01:77:4c:06:ba:17:71:0d:ef:1a:09:42:d9:
fd:19:23:9a:00:04:45:ed:ce:dd:bc:f6:88:4f:26:
17:32:33:7d:52:20:55:62:3c:e4:ef:03:1b:0a:4d:
f3:58:53:9b:80:af:31:fd:3b:f4:cf:cd:12:b3:80:
56:40:ad:2f:ea:a3:62:44:e8:e8:72:1e:56:23:16:
37:cb:3b:25:39:35:e0:96:f3:70:39:a7:97:17:25:
89:9b:00:c0:69:38:51:38:8b:d5:5c:96:26:a7:6f:
4a:25:cb:fc:32:de:aa:34:a9:f9:49:15:94:f4:d2:
06:df:5e:56:15:6d:0e:30:a9:d7:9f:69:f7:9f:e2:
2b:28:cd:e0:1d:08:af:c7:2f:d5:b1:c8:92:29:b9:
90:9f:23:6e:ea:c9:f5:c4:b6:2e:0a:1c:ca:ed:b1:
73:f7:40:a0:07:2c:10:e4:5d:51:a7:fa:1e:82:aa:
0e:5a:62:0f:2a:c1:42:b2:f0:0c:2a:fb:8d:8a:6b:
25:ad:0e:39:a9:d6:13:70:8e:1a:6b:f1:13:72:63:
d9:3d:81:62:d3:15:21:86:99:74:89:a2:05:41:6b:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:5E:83:11:3B:FF:03:E8:3E:71:13:0E:68:E2:1B:F5:C3:73:FE
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5a:55:b0:81:ab:3f:f4:e9:bf:38:35:dd:96:d6:67:18:f6:
0a:de:5f:35:a1:c1:3c:70:cb:de:70:2d:fa:f3:bd:c6:09:db:
fe:21:7f:50:e9:c2:72:c8:1b:ea:d2:c4:d3:bc:aa:0f:cb:59:
93:a7:83:23:85:61:ce:b7:b7:ad:f6:76:f0:ef:64:fa:e1:e7:
56:72:b6:25:a9:26:93:6d:7e:5a:6f:80:7c:09:27:cc:37:6a:
5d:fa:60:c6:55:32:10:f3:7b:c4:b1:6f:2a:05:06:e6:ba:73:
f8:46:6f:45:6e:ac:7c:e0:c8:3b:c5:bb:58:b1:0d:13:70:39:
d6:48:06:2f:a8:b5:10:f5:7d:0a:2f:2f:ba:ca:d2:4e:3c:d5:
39:36:59:ae:2f:70:dc:8e:48:1e:38:55:7c:2e:a0:07:c8:32:
b2:86:d4:31:e6:e7:3c:ae:d7:d5:a3:e2:35:a1:ba:94:82:95:
e1:0f:ec:ad:62:40:6e:4c:d5:92:12:ac:3a:0b:f2:f9:0c:15:
66:fd:a0:7a:a8:d7:b0:a4:e8:8d:bc:e7:f2:9d:df:4a:f2:46:
1b:ca:5c:72:ed:7d:10:45:26:73:0c:54:5a:f6:50:29:7f:b8:
20:3d:e0:53:10:f6:d4:09:b4:f3:28:6a:e2:26:b0:d1:fc:91:
ed:5f:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:11 2025 by rpki-client