Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: XxNLB3lQMi/Eyfmctqa7NIT/dbl9NijBQwCMFjpHfxg=
Subject key identifier: F2:3D:A6:33:97:CD:C4:BC:C2:4B:69:FF:6F:88:F7:02:39:74:2A:09
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 019511A2E25D51469DB38831A447B8F61151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:42 +0000
Manifest this update: Mon 17 Feb 2025 02:00:42 +0000
Manifest next update: Tue 18 Feb 2025 02:00:42 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: exyh9yaI3kOszMIiZUgaL//9a5YSw6l5w/Fthla3Xuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e2:5d:51:46:9d:b3:88:31:a4:47:b8:f6:11:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Feb 17 02:00:42 2025 GMT
Not After : Feb 18 02:00:42 2025 GMT
Subject: CN=f23da63397cdc4bcc24b69ff6f88f70239742a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:13:93:7b:ba:8f:b4:c0:57:4c:ad:59:ed:
9b:f5:d3:98:dd:f0:dc:44:e9:9d:02:60:0b:d6:b2:
75:b8:f3:0c:9f:fb:ca:4b:ac:6f:6b:bd:62:11:fa:
db:26:48:a2:7e:78:4a:e7:61:db:49:17:13:82:28:
58:c1:74:31:32:aa:3d:81:cc:b6:6b:49:e7:b3:47:
08:35:e2:aa:61:64:84:60:92:07:e3:6f:d7:f7:53:
90:fe:60:0a:ff:46:56:80:c0:7b:5b:16:b8:dd:b8:
54:dc:a4:d2:d6:8e:27:64:49:76:be:59:fe:04:85:
19:0d:e6:8f:93:67:20:5e:e8:f7:7e:8b:c2:99:ad:
d7:9e:56:83:52:c9:69:ec:85:61:0d:64:0a:29:2d:
13:2f:57:e3:c0:d4:2e:36:52:1d:98:c2:7c:3a:69:
19:05:c7:bb:16:d1:c3:57:f7:7c:6b:c3:3b:ad:f7:
30:cb:e6:35:54:5a:4e:78:95:46:33:03:5b:2b:43:
94:57:26:a8:bd:57:5e:29:04:ed:16:27:02:33:b4:
75:e6:69:d1:65:e1:27:62:47:09:d3:43:97:4e:17:
32:4e:fd:53:0d:18:23:b2:6c:10:96:36:f4:b3:82:
14:c6:04:26:88:57:ad:ae:0e:c3:e1:2c:e5:5c:4b:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3D:A6:33:97:CD:C4:BC:C2:4B:69:FF:6F:88:F7:02:39:74:2A:09
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:92:29:7b:13:ea:ef:be:7a:d8:b4:7c:89:66:38:03:4a:a1:
9f:c2:6a:9c:2a:df:ed:62:f9:d0:39:fd:32:b3:01:5b:e2:e9:
41:be:2d:fd:80:89:71:a9:15:63:23:bc:ce:b5:6a:73:64:5e:
82:d8:2f:e7:71:cc:09:12:48:77:1d:e4:7d:f4:d9:f6:21:8f:
43:0f:9b:f0:13:05:4e:a9:be:80:40:1c:47:17:d4:5f:ce:30:
35:3e:cd:b0:4b:5a:3e:ea:1d:b6:6b:b2:a1:a2:20:bd:0c:d4:
a2:4e:23:d8:16:7a:64:75:68:21:b4:b2:25:cd:07:fc:4f:bb:
05:fe:fc:7e:df:10:ce:46:dc:4b:54:64:fd:bc:22:64:d3:a0:
99:ed:00:ae:40:d8:38:88:21:30:03:68:20:5d:17:ed:9c:21:
c0:97:fb:a8:47:28:63:6d:36:7c:c5:7b:b0:95:3c:97:83:6f:
7c:6b:a2:57:62:ee:6c:f5:39:88:58:c3:73:3d:d3:84:b5:6d:
96:a0:26:02:7f:f2:2d:5a:a0:f7:e1:72:65:8d:69:7a:d2:65:
28:da:b6:73:18:cd:36:13:e9:fb:12:0c:6b:2c:f1:47:5b:08:
23:cc:e8:67:73:a2:cf:f3:c6:b6:68:bd:6a:db:61:ed:f0:0b:
21:8b:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:59 2025 by rpki-client