Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: PbbByIJyPqqmaeCkIeaZTuY07AuidwqYSs87WQmBRBM=
Subject key identifier: 4F:CC:51:E8:37:E1:DF:F2:A9:DE:8F:5F:14:6D:0F:97:19:95:50:07
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 0195113532F097827EE0F26F645117066A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 00:00:53 +0000
Manifest this update: Mon 17 Feb 2025 00:00:53 +0000
Manifest next update: Tue 18 Feb 2025 00:00:53 +0000
Files and hashes: 1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=)
2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: RM+MhJkGtoVxyaPx/6srZJHapeE5VALfAnID3yINoGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:32:f0:97:82:7e:e0:f2:6f:64:51:17:06:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Feb 17 00:00:53 2025 GMT
Not After : Feb 18 00:00:53 2025 GMT
Subject: CN=4fcc51e837e1dff2a9de8f5f146d0f9719955007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:18:0a:81:5b:7e:75:13:ef:be:c7:51:e2:
41:5c:71:46:a7:8e:39:5d:b9:16:3d:19:49:13:bb:
02:65:0f:8f:24:2b:4b:ba:f9:8b:05:e0:bb:b5:00:
12:73:37:9c:26:3b:fb:17:c6:9c:40:6f:28:79:10:
0f:35:dc:c6:20:ea:5e:7c:8f:6f:85:3d:bf:45:fa:
f4:f1:6d:8d:fb:e2:78:c9:4d:32:3f:66:9d:45:3c:
dc:a5:06:6c:74:a5:8b:9b:95:15:35:99:00:6b:50:
3f:42:4d:39:32:a5:cf:ef:aa:78:b2:4c:eb:1b:42:
c6:51:04:ad:31:f0:27:40:1b:b8:4a:44:46:5d:0c:
51:59:41:c0:48:69:62:52:05:d1:d5:1c:60:04:92:
0a:03:e8:1a:3c:e7:9a:7d:5c:29:3a:91:e3:9f:d8:
a0:8b:95:49:45:ae:c8:7d:ba:bf:2f:70:e7:6e:5c:
6c:59:e7:3c:ef:b9:09:b1:15:a1:34:84:61:a0:92:
57:b7:ea:d1:74:e9:32:87:dd:e0:f0:ba:9e:9b:f4:
d2:ee:66:f3:4c:6c:49:f5:d5:f7:a6:1a:99:d2:60:
6c:9a:8b:38:88:92:e0:fd:4c:2a:4d:d3:aa:30:78:
a6:1f:26:8f:21:b9:24:d7:b7:be:df:a2:ab:79:ec:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CC:51:E8:37:E1:DF:F2:A9:DE:8F:5F:14:6D:0F:97:19:95:50:07
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:da:52:ea:e1:e0:33:4d:2b:27:77:3a:f6:3e:9c:29:be:83:
76:b1:6c:f7:db:75:a0:fa:87:62:a7:d5:f8:ef:62:d0:5f:7e:
31:1f:23:b4:6a:f5:df:15:bc:ef:01:64:7f:e4:7e:a9:15:d0:
9f:de:6a:aa:90:ce:11:8e:1f:41:b3:a7:8a:fb:66:22:24:3f:
ca:23:91:0e:0b:20:87:b9:6d:45:1c:80:02:0c:b9:b1:7d:1f:
3e:a8:d6:e0:11:17:3f:ff:bd:51:fa:88:ac:66:af:e7:f2:74:
22:ca:9e:ae:48:76:eb:0f:79:2d:84:91:15:fd:2f:b7:37:7c:
50:0f:94:4d:59:45:64:64:90:32:04:1c:56:4a:00:52:be:f4:
fc:c3:35:01:1c:c7:0c:72:dc:e4:7e:06:76:50:0a:d3:20:60:
8e:7b:af:6d:34:c7:f6:a2:c4:ee:a1:34:7f:03:ea:b3:dc:fd:
de:b1:95:09:44:7b:51:92:4d:57:c9:ab:b9:79:3a:f1:ac:b1:
af:b5:39:70:d2:2c:70:39:0b:1d:91:7f:35:f1:91:17:f8:15:
04:4a:55:2b:01:67:28:32:7c:de:ea:6f:6f:91:19:e0:c0:ae:
5d:bc:30:4b:10:f1:bf:21:30:2a:bd:16:f9:34:f9:5a:56:20:
a3:69:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:13 2025 by rpki-client