Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: ceBLaW9V2YFOIrpu5RNhI+sFpDUryG2GEcjit4plKe8=
Subject key identifier: B7:2C:A4:97:22:1A:73:9D:D9:0A:A7:A9:77:7D:BA:8E:54:6C:83:59
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 019511D9A738BFCC5C9688D8CF167162F7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 12C4
Signing time: Mon 17 Feb 2025 03:00:31 +0000
Manifest this update: Mon 17 Feb 2025 03:00:31 +0000
Manifest next update: Tue 18 Feb 2025 03:00:31 +0000
Files and hashes: 1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: ZVoC6IjQ63v9Rbl6x5QDIxE9/D60c9N1RtYNFuOzQZ0=)
2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:a7:38:bf:cc:5c:96:88:d8:cf:16:71:62:f7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Feb 17 03:00:31 2025 GMT
Not After : Feb 18 03:00:31 2025 GMT
Subject: CN=b72ca497221a739dd90aa7a9777dba8e546c8359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:c8:26:99:38:5d:6c:a8:1c:7b:8d:ea:f5:
61:b5:ae:80:89:b3:14:3a:9b:29:54:ee:e3:ae:b1:
dc:d6:30:66:03:11:fe:1d:c7:6c:45:7c:df:98:3a:
da:ba:24:87:02:86:42:0f:44:e3:30:50:4f:ab:bd:
d3:cd:7f:76:a0:22:5e:6a:c4:12:91:0f:69:22:c9:
e4:a7:fd:5e:61:88:9f:16:d1:31:1d:bf:f2:e2:60:
bc:74:ac:ec:fd:bd:a5:ab:d0:b8:b6:38:c3:06:d2:
73:fd:b4:0b:e6:a5:73:43:6d:91:db:5f:aa:19:3e:
6f:62:b9:89:e5:8d:c8:c5:4a:8a:d2:cb:41:a2:b0:
2a:75:be:9d:7d:1c:16:16:72:5e:56:88:fb:46:95:
a7:aa:45:b3:7a:eb:d9:19:ce:97:1c:53:72:72:b1:
ef:ca:7c:ee:7a:16:95:fb:2f:bd:a7:e0:b0:df:35:
af:09:12:a0:47:e8:c2:f0:13:11:ae:c7:c1:c0:e2:
ef:00:bd:9b:58:3e:1d:ae:bd:91:b8:a3:05:9c:31:
7c:73:1b:a5:9a:5b:5e:d0:5e:27:87:c3:47:80:b9:
2e:72:2c:a4:a3:aa:28:81:ed:0a:57:9d:ff:e3:94:
d1:f4:61:eb:ab:af:e2:1c:28:7a:f0:60:99:2f:07:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:A4:97:22:1A:73:9D:D9:0A:A7:A9:77:7D:BA:8E:54:6C:83:59
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c9:71:22:35:c8:0c:e6:cc:46:87:33:eb:4f:03:26:18:c9:
04:ff:9e:cb:8d:3e:b0:c2:d0:df:95:d4:e4:c7:37:c1:95:9a:
a0:c6:c4:31:a5:49:81:bb:71:01:40:cc:73:5d:3d:08:a1:b7:
86:a9:8d:22:78:27:b5:be:d1:7d:a3:ff:be:e2:4a:3e:83:58:
33:3d:86:93:15:ab:79:47:4c:09:fa:a7:fd:6f:c8:c5:3c:23:
fc:a4:2e:06:3e:26:60:d7:4f:43:71:ec:06:43:1f:58:43:d7:
ca:02:d1:7c:5f:5e:8e:3c:e1:c7:be:8a:01:13:02:b9:02:31:
73:e5:c4:af:a3:44:b8:b2:93:54:55:04:12:33:c1:63:b6:f1:
3c:cc:05:0f:e6:c9:df:27:dd:e9:ba:d0:17:49:3c:a7:8d:04:
51:62:17:08:ce:7d:af:04:b5:52:ad:3a:23:7f:2d:95:ee:3e:
92:7b:da:76:ff:06:24:6a:57:c0:97:b2:3d:70:a9:e2:a5:bd:
70:7f:ac:08:d5:79:53:71:d0:96:28:a2:0a:99:03:f1:9d:0e:
06:2e:66:85:bd:ce:fb:0d:65:a7:58:cc:99:e7:4e:9c:16:19:
13:9e:f4:57:d0:93:d1:fb:1e:1c:ab:67:6e:4d:a4:fb:82:a2:
34:26:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:06 2025 by rpki-client