Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: AdyaBP8frBYoEpD+7ncg01t3MkD/7QDY4INH2488g9M=
Subject key identifier: AC:95:AA:07:32:84:70:43:2C:64:7C:03:00:A3:49:E2:43:92:64:37
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 019355088054BDA8156D821B94B19637402E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 06D9
Signing time: Fri 22 Nov 2024 18:00:40 +0000
Manifest this update: Fri 22 Nov 2024 18:00:40 +0000
Manifest next update: Sat 23 Nov 2024 18:00:40 +0000
Files and hashes: 1: Yd1muz2vD3iVf9Shtz8dVcM2r_c.roa (hash: Fs9Rbw0iTACkUXJ9tKOwvvz/fTRO/BKsRBVyKpQjLbs=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: +BqXj59dd3+x9To3vybo14io2YMFqLYlLw1BCC407rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:80:54:bd:a8:15:6d:82:1b:94:b1:96:37:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Nov 22 18:00:40 2024 GMT
Not After : Nov 23 18:00:40 2024 GMT
Subject: CN=ac95aa07328470432c647c0300a349e243926437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:61:b7:18:f3:de:bd:e6:70:10:c7:f9:ae:
a7:7e:51:16:a1:2d:31:7c:29:dd:f1:97:29:c0:c2:
02:45:6a:f6:15:7f:1a:f0:d1:33:c2:79:66:c8:71:
05:cc:4f:58:82:49:89:38:99:02:d8:d6:f8:b6:80:
df:d7:b2:5b:5d:ee:56:64:c8:ae:c9:e0:23:a0:3f:
fc:d6:f5:70:38:3b:23:8c:5c:51:22:f7:f2:40:ff:
43:49:20:29:a4:60:c5:fd:e6:7a:90:f7:1f:9f:0e:
c8:6f:03:e0:59:7f:c2:52:63:d8:06:67:fe:ba:7b:
fb:ad:8f:3b:42:30:0f:83:fe:6d:d5:79:20:1c:d2:
c2:6d:a2:8a:33:86:86:57:20:79:21:03:1b:14:50:
9f:42:a4:90:77:04:ff:e0:fe:a5:52:19:a8:2c:bc:
8b:d0:07:0f:65:89:4d:5c:db:15:34:7c:e2:04:08:
06:3b:bb:94:a4:76:0e:ea:84:cf:c1:5a:5a:22:a8:
0b:24:6f:88:62:01:4d:59:d7:f2:44:b5:35:e1:41:
7a:57:86:09:02:0f:a8:04:d1:de:1b:d9:4d:4a:3d:
a2:62:03:2c:27:0c:16:a3:f8:02:6d:26:d3:77:c1:
b5:d1:02:9c:54:64:b6:8a:ea:c3:d2:13:9a:2f:23:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:95:AA:07:32:84:70:43:2C:64:7C:03:00:A3:49:E2:43:92:64:37
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:71:5b:51:0d:f9:32:8d:f4:76:06:ae:f3:24:36:4e:95:7b:
a1:ff:43:41:30:be:8d:68:c4:7c:0e:24:96:86:69:4d:c1:37:
4e:94:66:66:35:b5:fa:49:ba:14:9c:96:40:4c:24:23:30:a9:
7b:6d:c4:5c:94:35:82:5e:5a:0e:fd:8a:a6:2a:45:4e:33:f1:
0c:12:1d:5d:48:9b:ad:4c:24:67:7b:b0:51:aa:87:cd:dd:48:
1e:46:2e:bb:5f:1b:a3:bb:dd:26:98:57:33:b6:d8:85:93:62:
e7:a6:04:0a:d2:33:ed:71:7e:7b:0b:0b:d4:5b:e0:86:07:34:
71:7b:60:d4:bc:0b:db:20:ec:35:3a:d9:da:6c:ea:09:d0:12:
e9:32:de:7f:0a:0f:f8:43:5c:71:43:c9:d2:0f:a5:4a:6d:b2:
f2:84:8f:d0:cf:09:76:f5:35:74:3c:36:0d:04:1a:3c:30:36:
fb:9c:19:08:84:f9:ec:63:23:4b:b4:62:cc:e5:98:1d:c6:36:
2a:01:47:88:c5:3b:50:8d:94:7c:10:4a:4b:a9:55:a4:95:b2:
f3:10:4e:fc:60:e4:eb:00:c9:b1:f0:5f:2f:ff:4b:bc:b5:60:
97:12:4d:34:a1:ba:ad:63:e2:90:bd:e5:96:27:1a:0c:49:c1:
04:1f:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:17 2024 by rpki-client on console-fra.rpki-client.org