Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: 8X2LJkmhqRVnFkbmyKu7USkf740qQfAcmZiyDNyyICA=
Subject key identifier: 8D:2C:FC:08:72:96:06:5E:3D:8A:D5:C0:88:71:4E:5F:E2:5A:44:4F
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 01958F616DF6E3E0CC6EE85D043D53EEA8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 1305
Signing time: Thu 13 Mar 2025 12:01:21 +0000
Manifest this update: Thu 13 Mar 2025 12:01:21 +0000
Manifest next update: Fri 14 Mar 2025 12:01:21 +0000
Files and hashes: 1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: l58QNv7EskQhVNWctFxlj8oiUmifwAh3rNVXLgFeiQQ=)
2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:6d:f6:e3:e0:cc:6e:e8:5d:04:3d:53:ee:a8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Mar 13 12:01:21 2025 GMT
Not After : Mar 14 12:01:21 2025 GMT
Subject: CN=8d2cfc087296065e3d8ad5c088714e5fe25a444f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:e7:3c:a6:1a:4d:73:02:2e:40:5f:c7:b9:
c8:7d:f9:df:bd:47:20:cf:95:40:e3:9d:6c:12:59:
77:ea:81:44:ce:d3:1d:92:18:57:51:dc:5c:52:3a:
fb:f6:a9:98:8c:9a:3e:45:c1:4b:ed:b5:91:d6:cf:
ff:72:f9:f9:ab:39:38:4a:b0:55:86:7a:6a:aa:96:
ca:d7:57:64:2f:02:81:db:30:cf:6c:cf:24:dc:5d:
af:f0:ba:77:a9:f0:0b:6f:e8:32:50:e7:99:15:05:
15:a6:4d:37:56:ac:97:e9:eb:1c:84:7d:ed:04:44:
78:b5:d0:89:bb:e0:aa:5f:c3:26:bf:a3:1b:5f:87:
42:09:76:2b:44:54:ec:37:4d:bf:b1:01:3b:4b:41:
a0:fc:0b:d6:82:46:0f:28:55:fe:0a:78:23:6f:e9:
bf:a6:d3:ac:a6:ca:98:d3:2c:9d:e4:71:a5:a3:a2:
96:e5:b6:b6:23:ae:81:22:0a:b7:ba:a7:1a:57:78:
fa:df:0c:ca:fc:7b:98:cc:81:57:fe:d2:b9:3f:8e:
ee:d3:e4:35:da:8d:1a:a5:83:b6:e3:04:3e:dc:55:
85:6b:81:eb:be:ad:5e:19:80:fe:81:26:3b:15:ee:
29:99:11:1d:f8:f7:19:fa:f7:e8:04:ef:74:3d:de:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:FC:08:72:96:06:5E:3D:8A:D5:C0:88:71:4E:5F:E2:5A:44:4F
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:32:6e:f6:b0:ac:d5:0e:0a:3c:36:5b:2d:ba:6a:0e:f5:
b2:99:8a:54:f0:92:7a:01:3d:c9:59:29:03:3a:5d:df:e5:96:
3c:f1:ca:64:10:66:25:15:73:f7:a3:fb:67:18:b3:7a:02:79:
38:dc:3e:b9:ed:cc:da:8a:b4:b5:4c:ff:8d:01:4e:31:a1:f1:
ba:57:6a:45:80:50:d9:8c:d4:86:68:2f:bc:65:01:56:d5:6e:
c7:c8:7c:d0:02:09:e8:8f:d2:90:a7:71:3c:e2:42:b2:e3:a8:
1e:30:3b:7e:57:15:2c:6a:e4:2b:f3:82:01:38:20:d2:25:e5:
32:15:55:56:ad:07:15:61:d2:d6:a7:36:e5:e2:4b:e2:99:bf:
45:97:77:61:3a:1f:cd:ba:a3:58:9c:76:17:a2:c9:d6:ce:4d:
4c:b3:ca:11:f8:f1:4d:3f:ca:c8:e4:96:30:b5:2c:13:7e:ae:
c8:2e:8c:ff:df:43:c3:c5:b6:df:ce:9b:7c:a8:9b:2c:b3:94:
cf:45:4e:fe:c7:b4:83:7b:b6:54:41:dc:6d:9a:4f:dc:88:ae:
ca:c9:10:d8:18:04:98:0c:2a:2a:0b:d1:4c:ca:90:af:d6:7b:
b4:a2:4c:7a:8e:ca:c2:7b:13:78:7f:52:18:a8:78:a2:5c:ed:
7b:1f:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:46 2025 by rpki-client