Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: IADNxd4TgHtyq8uYZroVv+6TgoB4KpsVlhLX6QMLM0g=
Subject key identifier: FA:A2:06:84:89:7F:89:89:7D:D2:C9:E3:75:08:D0:4A:A3:92:8D:69
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 0194C3882BEDD8CD81FB10EB63DB6AF10034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 1393
Signing time: Sat 01 Feb 2025 22:01:08 +0000
Manifest this update: Sat 01 Feb 2025 22:01:08 +0000
Manifest next update: Sun 02 Feb 2025 22:01:08 +0000
Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: RC1wAxm7StlD6lF9HEMId//UV0gWn6qdq2xQoQAn3hw=)
2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:2b:ed:d8:cd:81:fb:10:eb:63:db:6a:f1:00:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Feb 1 22:01:08 2025 GMT
Not After : Feb 2 22:01:08 2025 GMT
Subject: CN=faa20684897f89897dd2c9e37508d04aa3928d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:cc:05:57:bc:bf:5d:13:27:24:05:8e:44:
c2:f1:d0:33:11:b9:e3:9a:1c:db:a0:f7:25:8c:f1:
73:8b:f2:18:de:c9:79:49:b6:df:f6:07:3c:ea:03:
86:4b:8b:77:7f:76:a7:83:16:87:cf:1b:c2:51:37:
2e:a2:27:ed:b3:62:17:74:96:d9:42:e2:ed:3a:c0:
c7:b4:aa:b6:dd:fc:f1:3e:2b:55:fb:cf:c1:3a:7a:
c7:79:4d:73:4e:59:be:66:21:ba:e7:59:96:a1:18:
6a:95:c6:35:97:04:3f:41:78:f3:bd:53:e4:e4:22:
5d:6e:56:6c:e7:de:58:fe:20:9a:b4:77:57:5a:c4:
38:bf:c0:69:88:90:20:aa:3b:3f:ee:37:1e:cb:6c:
09:b4:bf:1e:df:9b:33:f0:76:1f:2b:09:a0:89:3f:
65:f7:83:67:39:35:dc:84:a8:db:57:a1:37:37:e0:
5e:96:a0:eb:5c:64:cb:65:ec:07:22:26:1f:3a:64:
64:0b:91:2b:14:52:9e:63:c3:95:22:a4:b4:81:e2:
da:18:4d:7f:d7:88:1e:4b:82:1e:98:b2:c3:8b:2e:
84:06:8e:4a:68:db:43:98:4b:ee:ae:5c:68:b2:90:
c5:d3:1f:bb:d0:0b:3f:d4:f9:dd:0a:55:55:71:87:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A2:06:84:89:7F:89:89:7D:D2:C9:E3:75:08:D0:4A:A3:92:8D:69
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7f:f2:7e:9d:4a:5c:14:0d:02:28:3f:8d:1b:3e:eb:f2:87:
bb:4d:52:52:22:fb:7a:67:07:08:c5:03:f4:ca:6d:ec:40:d0:
3e:a1:e8:20:18:0e:f7:3b:6f:ee:f4:98:40:ce:28:02:48:43:
47:58:66:d7:65:71:0c:d4:3b:71:19:d2:3d:29:5e:6e:7a:ed:
13:52:4c:9f:c0:19:13:d8:3b:48:22:76:e9:d3:43:8e:38:aa:
45:4d:2f:b8:0a:ec:bd:2b:34:c0:67:07:08:ff:98:74:8e:0c:
3b:40:f7:b4:18:b4:90:62:42:ea:f9:8d:6a:ea:b8:b0:14:bd:
22:b4:67:96:dd:a1:bc:99:56:ed:d7:b7:4f:f1:8f:4f:a7:7c:
7b:8a:95:98:ac:c3:3a:f7:26:12:51:5f:e2:7b:57:67:53:f3:
41:ae:58:f1:32:42:fa:72:e6:20:f1:d1:0b:72:45:db:ae:47:
45:63:3f:9e:57:95:28:2c:c5:dc:a2:05:44:ba:d4:18:9c:ec:
8d:2c:3e:c9:49:f6:a1:f1:c7:6f:da:b8:b5:72:5b:47:80:b2:
49:c5:8b:a8:87:e5:4d:e0:90:90:4d:26:ff:ec:44:52:6b:28:
42:65:67:4a:8e:b0:5a:7e:64:0e:54:7b:91:b3:47:82:df:25:
3f:7a:0c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:12 2025 by rpki-client