Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: fAvoUF+/ZPH7wA+l8hhaeVuTM6tCB7N+J8r/e7KgIFM=
Subject key identifier: 33:CC:15:38:2B:8E:1E:F5:62:2D:B8:19:FE:EB:93:F3:0E:94:DA:57
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 01964B22150E3A8E380AD934ED55232FB4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 23:00:46 +0000
Manifest this update: Fri 18 Apr 2025 23:00:46 +0000
Manifest next update: Sat 19 Apr 2025 23:00:46 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: sMWdjwUSORODPZlE2qLQA010jBIEwmOPUWDFak0uFUY=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:15:0e:3a:8e:38:0a:d9:34:ed:55:23:2f:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Apr 18 23:00:46 2025 GMT
Not After : Apr 19 23:00:46 2025 GMT
Subject: CN=33cc15382b8e1ef5622db819feeb93f30e94da57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:f2:19:dd:5d:88:12:97:86:48:65:85:75:
2c:68:9b:24:fc:cb:bd:62:b8:0c:c8:75:70:6c:fb:
aa:35:d6:27:80:27:ba:53:7d:d4:db:89:de:50:c4:
8b:70:ea:7e:3b:32:17:b0:7c:2d:7f:4b:8d:2b:22:
df:d8:78:df:14:fd:d1:6e:5c:f1:fa:4c:7d:8e:41:
af:78:2a:bb:6d:09:f2:b2:c0:7a:20:6f:19:a5:d0:
31:ca:4a:0f:a0:78:ec:6f:7a:33:4b:65:26:d2:77:
5b:76:fd:95:0d:bb:37:8b:b6:0d:4c:4c:47:1d:d4:
ef:cc:49:f3:a2:50:72:35:91:14:0e:74:5c:97:99:
28:6b:42:dd:f0:0d:70:f1:d4:27:51:72:a5:04:ef:
3c:64:8c:d1:c9:f0:b2:b5:55:de:62:d1:b1:e4:80:
5e:31:56:8d:2e:f1:a9:ab:ce:d8:04:6c:b7:c4:b8:
87:9f:68:20:ce:68:78:22:09:c1:2e:b7:0e:e9:81:
cc:da:76:55:a6:84:46:72:15:56:f6:c8:1e:d2:7e:
b9:20:fb:f6:0e:34:fc:e5:e5:af:87:b5:d2:ed:95:
03:64:7b:2e:0c:53:09:50:e6:dd:79:6a:d9:ce:6d:
22:ef:b5:0e:ad:88:07:33:1f:be:93:bd:b2:db:dd:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CC:15:38:2B:8E:1E:F5:62:2D:B8:19:FE:EB:93:F3:0E:94:DA:57
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c9:d8:07:ff:a6:ed:50:00:3c:c6:c5:10:e5:86:bc:83:b0:
d5:e3:a9:b1:61:57:ba:85:69:66:98:9e:7d:a8:1e:91:0d:77:
3f:8c:04:34:c7:61:84:11:43:84:b4:27:1e:42:64:d7:e7:ee:
1a:82:3a:8b:05:b0:77:f7:c4:3e:0e:0d:5f:10:a1:8f:de:bd:
fb:d8:3c:94:de:ce:2a:2c:41:e4:83:0b:80:87:17:72:59:ac:
91:44:0c:68:cd:33:a0:a2:dd:d1:9c:8d:0d:d7:8d:96:d7:b6:
f2:9b:1e:e3:c5:21:74:a4:a9:d2:64:b2:8c:ca:7e:01:c4:00:
82:4e:91:93:7b:9c:ae:cd:08:2d:df:fc:95:c8:87:75:08:8e:
64:9b:ee:03:0f:3d:1f:e8:5a:dc:d1:82:f7:6b:90:78:0e:77:
b5:63:3f:40:f5:fa:fa:91:ce:84:8d:45:44:18:7e:df:12:d2:
ca:75:d5:dd:c2:94:f4:d7:bf:7e:10:16:a4:8d:75:61:f2:24:
05:36:fb:18:97:ef:38:51:37:12:e4:a3:cc:e5:dd:b9:cf:15:
5d:01:1e:17:5e:28:1b:bd:00:c9:36:5f:80:0b:b7:f4:d9:6d:
42:37:0e:a6:f5:7e:5b:31:e9:80:e5:29:3c:bf:db:d5:11:e1:
50:5f:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:33:24 2025 by rpki-client