Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: Hr93CNdeIX9Mov8P8fW6HDakN1gqP7W1YpFtcdRVRY8=
Subject key identifier: 8E:23:A8:6A:9E:5B:43:F5:05:44:02:05:99:D6:3D:FB:3B:ED:83:7E
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 01958CCDF518D6B8440A8B8EAF4F87867B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 1499
Signing time: Thu 13 Mar 2025 00:01:02 +0000
Manifest this update: Thu 13 Mar 2025 00:01:02 +0000
Manifest next update: Fri 14 Mar 2025 00:01:02 +0000
Files and hashes: 1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=)
2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: O0HAptdHmxo4nNSARcRA/HUVanuizOJF8wVWDgmnYkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:cd:f5:18:d6:b8:44:0a:8b:8e:af:4f:87:86:7b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Mar 13 00:01:02 2025 GMT
Not After : Mar 14 00:01:02 2025 GMT
Subject: CN=8e23a86a9e5b43f50544020599d63dfb3bed837e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:f2:36:23:80:b0:3c:22:14:ff:31:b4:b5:
0f:61:79:55:42:24:81:55:ce:b6:b2:3f:35:76:72:
87:0b:04:a7:11:30:54:1d:b4:b4:15:b7:42:aa:38:
b5:1b:0a:80:ef:9e:1f:aa:ac:b3:51:ca:74:c1:cc:
3c:1d:74:f9:f7:96:4a:fc:93:13:0b:47:12:44:72:
13:f8:00:a6:e7:d8:ba:26:92:56:d8:a6:ee:1f:d9:
e9:b5:1f:bd:b5:3e:27:00:fd:b5:fa:65:a8:38:cc:
02:eb:d1:13:4b:0b:0d:02:5b:9d:3a:53:8a:63:9d:
aa:32:11:07:35:7d:bd:0d:e3:49:56:8b:a6:8f:7c:
b7:93:47:13:33:1c:e5:20:4b:2c:9f:87:ed:6b:4b:
be:9c:f9:79:2c:ac:b4:ea:14:87:27:d8:c2:c2:01:
a2:1a:ac:2f:9a:12:16:80:f7:09:db:04:86:db:c0:
cf:5e:5d:cb:25:ac:73:42:0b:44:55:35:93:8b:31:
ba:9a:2d:f0:69:c2:b9:54:bb:02:6d:ee:7e:38:31:
31:c2:57:0e:9c:96:c2:32:c7:89:3d:ed:e4:33:c8:
79:3b:61:cc:a2:d0:cc:67:af:5f:79:31:fc:6f:30:
b0:0f:41:5c:1b:7b:9c:1d:32:fe:38:11:57:7d:39:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:A8:6A:9E:5B:43:F5:05:44:02:05:99:D6:3D:FB:3B:ED:83:7E
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cb:50:96:df:f4:93:c6:7b:c1:c7:0c:0d:f1:4c:a5:35:6b:
bd:48:86:ae:c1:c0:28:03:dc:d3:3f:cd:19:18:b9:39:41:48:
46:90:57:f2:39:1f:a1:28:67:b3:1c:1d:07:9a:77:ea:be:77:
29:63:93:33:c2:56:c9:3e:e7:5e:0d:c9:ff:8e:49:a4:c2:fc:
c8:ab:b0:1b:e8:df:b9:9b:c2:81:7a:9e:0d:ab:0f:64:67:c6:
e9:08:a2:b0:f9:bc:ea:03:9c:26:d3:36:da:c8:25:e6:f1:2d:
1d:ca:36:a0:f4:d8:a1:af:c4:8d:8a:db:b3:a2:2e:a7:72:dc:
40:e9:6f:eb:2d:33:13:09:fc:02:ea:b8:9f:33:ec:81:17:3f:
27:5d:d0:1e:8d:5f:3b:0a:59:55:18:c8:0d:60:73:b1:54:ef:
1b:91:a4:73:9f:57:15:c3:90:b7:3b:e4:35:9b:c2:a9:8f:e4:
11:52:07:65:ca:59:19:85:63:65:e5:19:07:36:e0:ce:b2:87:
6f:7e:b5:0e:3e:7e:76:8b:05:76:44:ab:64:48:c8:68:35:09:
b1:69:72:1d:c7:88:d3:2f:b5:2b:07:3c:03:81:66:8a:99:cc:
b3:bd:ca:d2:62:f5:a1:06:1d:4a:f5:0e:5c:f1:58:7b:59:bf:
b7:11:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:34 2025 by rpki-client