Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: f5lKdFpRL/0eF9Nk5VCr7mZUdyDHcJ1ZKD1lUNEC5jY=
Subject key identifier: B2:1D:BE:12:10:0E:9A:BF:20:48:66:0F:2A:1B:3C:AF:46:80:9C:F0
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 0194C3511A87099C92B3489A3C89E05DA0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 21:00:59 +0000
Manifest this update: Sat 01 Feb 2025 21:00:59 +0000
Manifest next update: Sun 02 Feb 2025 21:00:59 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: s+dNuHdW6R2VfgcEk8ZO/TGoeUSdPf76flsZaxfjkQk=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:1a:87:09:9c:92:b3:48:9a:3c:89:e0:5d:a0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Feb 1 21:00:59 2025 GMT
Not After : Feb 2 21:00:59 2025 GMT
Subject: CN=b21dbe12100e9abf2048660f2a1b3caf46809cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:dc:6c:11:fa:c7:b0:62:cf:f5:26:fb:e4:
85:fd:07:94:ce:66:47:c3:8a:11:1d:ea:b8:2f:57:
49:68:bc:7d:e7:4d:45:b3:7c:3e:36:3f:e1:8f:da:
f3:6a:78:05:a6:3f:e2:c5:b4:4f:5e:17:b3:fc:5a:
4b:08:79:62:69:ee:ea:6d:94:86:03:aa:12:c3:8e:
bb:99:bf:60:70:dd:fe:35:30:7f:e6:d7:5f:a1:c4:
10:be:7f:ef:38:32:11:97:50:eb:cc:57:ac:ff:88:
6b:cf:67:ce:f1:af:fb:51:93:e2:a4:8b:e6:db:31:
34:22:a0:db:a4:8c:f9:ac:94:d7:ea:da:36:da:1d:
a4:f6:8e:d6:ef:bb:a4:f1:c4:d4:be:6b:43:27:25:
86:dd:b9:3c:91:10:5f:37:e6:65:bb:29:e6:7f:ec:
aa:a3:6e:ba:c1:18:5c:78:ba:47:64:a0:5a:97:68:
f8:5b:60:d7:ab:d8:3c:14:18:d7:ed:ca:5d:13:a4:
26:01:62:02:61:10:d2:05:48:2c:86:b3:ab:b9:e8:
48:1c:ec:f5:6b:e3:76:e6:b5:f6:46:00:7d:ff:64:
46:3a:f6:5d:99:9c:df:01:6b:f7:48:c9:c6:13:b0:
fc:c4:96:38:2c:f0:1b:00:b7:1e:25:2b:f2:14:cb:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1D:BE:12:10:0E:9A:BF:20:48:66:0F:2A:1B:3C:AF:46:80:9C:F0
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f1:01:57:2f:eb:ce:ea:d2:94:fd:19:8a:19:64:6f:75:f4:
ba:cb:65:7d:ac:db:84:aa:67:a6:b5:6b:b6:43:e9:f4:b7:f8:
d2:d5:10:96:86:d2:04:2f:20:41:f3:8a:80:25:5d:2e:f3:ca:
67:4c:98:2d:e7:a4:fe:ac:b3:a3:b7:b3:a3:bc:d8:0a:90:9d:
3e:84:92:df:bd:9a:54:f8:55:b0:6e:1d:8f:d9:32:92:3b:f4:
f4:5a:01:b0:93:92:ff:a5:50:c2:c6:91:38:0b:20:2e:55:9e:
70:cd:62:6a:94:ef:35:a0:f6:b0:a7:23:98:e4:7d:cf:88:e8:
9c:c8:34:12:eb:e7:03:99:1d:8f:60:ab:3c:30:3d:e2:7a:32:
30:1b:5b:f7:ec:d2:3c:ae:d0:93:34:1d:99:4f:57:23:9b:6e:
56:26:97:c0:28:ce:c8:40:c0:fe:a9:1e:35:96:70:63:97:59:
8f:6b:96:08:6c:37:46:39:71:73:3c:b3:34:a7:a5:6e:c0:88:
f3:78:85:23:98:a9:3a:a8:d7:2a:bb:d7:ee:a7:2e:dd:1e:1e:
27:17:fd:0e:42:3c:4d:0b:0c:d3:c4:30:71:1b:ec:fe:4d:ca:
79:41:a4:a6:53:3d:57:80:0e:c4:1a:73:83:db:94:4c:82:6c:
dd:bc:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:20 2025 by rpki-client