Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: oZw8hMX+8MD5q+jg+USEX6CgeVhAPjFYUwTq/0dZJuQ=
Subject key identifier: 54:56:3F:E8:C9:3D:2C:BB:38:86:D3:3B:E3:1A:8B:EF:06:67:5A:75
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 019510C73BB2AB394FDC70DDBB803926DACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 1216
Signing time: Sun 16 Feb 2025 22:00:47 +0000
Manifest this update: Sun 16 Feb 2025 22:00:47 +0000
Manifest next update: Mon 17 Feb 2025 22:00:47 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: +ukc1ScU6rV0/LVMJEvMwwGU0mGGGNayfJCtms6A7rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:3b:b2:ab:39:4f:dc:70:dd:bb:80:39:26:da:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Feb 16 22:00:47 2025 GMT
Not After : Feb 17 22:00:47 2025 GMT
Subject: CN=54563fe8c93d2cbb3886d33be31a8bef06675a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:d9:cb:95:11:60:c7:eb:63:50:7f:36:88:
36:47:48:70:da:82:7c:21:fb:75:7a:81:94:24:42:
7c:48:c3:2f:37:04:d1:d1:34:c2:19:e0:9d:94:48:
7f:d7:d1:98:6f:0f:7a:40:25:28:f0:ad:7d:39:e2:
2e:ba:fd:9b:3d:6b:48:7b:52:69:bd:32:bc:ee:4c:
62:f9:e9:93:e4:9b:d6:84:68:1b:13:4b:03:8d:f6:
3a:de:95:e3:57:86:06:27:a3:1f:c0:57:5d:67:6f:
0c:27:c4:12:ca:fc:f6:21:93:15:00:22:2c:65:51:
4c:c7:d4:f4:1d:be:6f:12:a2:09:8f:64:a3:91:56:
c8:70:b1:fb:ba:4a:5e:5c:75:df:b0:45:2c:1e:a7:
5e:5d:bc:b3:dd:32:81:86:c7:3d:ae:cc:48:ea:1a:
16:a6:7c:0e:09:b6:c5:30:78:33:c0:fe:66:8a:6c:
99:59:1e:0c:06:a6:96:29:c4:36:04:f6:a0:95:de:
7f:06:2f:32:0b:be:67:a7:61:0b:2f:fc:60:22:cd:
6d:62:91:07:da:b1:e0:e3:af:48:86:bf:df:6b:e5:
9f:2e:84:f6:b3:27:b0:5e:12:12:31:28:f7:33:46:
5d:82:77:95:89:57:f5:93:3f:20:cd:f0:03:1d:a2:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:3F:E8:C9:3D:2C:BB:38:86:D3:3B:E3:1A:8B:EF:06:67:5A:75
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:25:ba:15:af:b5:ce:16:32:57:4b:66:ad:cc:94:45:51:92:
0b:3f:64:41:d5:15:ed:bc:74:75:ea:ed:4f:82:1f:5f:41:80:
85:91:c7:fb:19:d6:3f:38:9a:90:04:01:0c:a7:15:f4:be:a0:
44:b3:e9:23:ca:09:07:96:66:67:8a:02:43:ad:4b:f7:be:c5:
dc:17:39:5b:1f:65:af:f6:e0:1e:b4:3a:b9:ef:90:16:fe:07:
c5:35:69:b5:42:53:90:f4:80:64:05:9f:85:fa:0b:37:17:13:
fb:9d:5a:ee:0a:7b:ad:a2:1f:ff:8e:0f:86:17:a9:9f:2e:dd:
fa:2e:a6:8a:89:d4:ac:92:29:c2:d6:44:ca:c7:cb:2d:ba:74:
99:7b:cd:14:91:d8:3d:b2:53:cf:df:af:ab:38:b1:54:ad:50:
73:0f:b7:2f:e4:d8:51:c5:71:16:9c:b0:9e:69:93:1c:10:30:
f7:3a:2c:0a:e2:51:1f:ad:20:9d:bb:ad:83:e7:6b:dd:28:4d:
89:bc:17:79:2c:2d:68:52:45:7f:33:1c:14:fc:11:63:e0:82:
03:43:1e:79:fb:05:3d:aa:74:40:f5:e3:5f:5e:56:b2:0f:6f:
1c:d9:bd:38:b6:31:c1:c8:31:af:81:b1:de:c4:cf:42:d1:78:
57:a5:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:18 2025 by rpki-client