Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: wOZQ4ywlIQHSwc5m9Lq0H4/HhS1F1YmKHxXJxsG6ZRg=
Subject key identifier: BF:77:F0:00:0A:E9:5C:B3:E1:40:97:DC:85:C8:96:35:22:DB:B2:0E
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 01958B849A6E1A4083AEAC3B37A8A2850635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 046F
Signing time: Wed 12 Mar 2025 18:01:18 +0000
Manifest this update: Wed 12 Mar 2025 18:01:18 +0000
Manifest next update: Thu 13 Mar 2025 18:01:18 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: fnR+u5FCZTvlSTNniLifu/65z/iy62LqRpQaVreCGI4=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:9a:6e:1a:40:83:ae:ac:3b:37:a8:a2:85:06:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Mar 12 18:01:18 2025 GMT
Not After : Mar 13 18:01:18 2025 GMT
Subject: CN=bf77f0000ae95cb3e14097dc85c8963522dbb20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:94:3f:a3:f1:30:17:c7:32:49:f2:da:dc:
11:e3:1d:88:70:4a:45:81:5a:45:cb:29:68:c2:1d:
03:67:ac:cb:7a:56:99:fb:f9:ee:a9:ec:d4:d4:c6:
e0:bb:d7:3c:0c:0a:39:c0:9d:a4:63:1e:c1:b4:de:
ed:1e:d3:77:88:88:93:1c:76:d9:92:08:a7:6e:82:
15:3a:52:80:ef:a3:ae:49:4f:c2:f9:6b:36:57:7e:
e0:0a:fc:26:13:a9:6c:4c:96:c2:d7:8e:65:b8:7e:
ff:db:70:96:e0:7a:22:2b:e6:60:8a:61:bc:62:fd:
ce:b9:de:c7:2d:6e:0e:db:1f:1d:29:19:19:20:ea:
b0:b8:bc:5a:b7:2a:1a:14:7e:9c:13:54:07:21:2b:
6e:e1:94:76:d2:fd:6b:80:5d:85:18:b6:75:65:3b:
ba:ca:50:6c:ed:1c:d7:bc:18:b5:f7:fd:21:6b:c1:
4b:4d:a1:dd:39:90:b7:60:0f:fb:67:b1:db:fb:11:
4e:a0:63:99:16:de:c1:7d:69:9e:32:58:f7:d5:34:
10:ce:d5:62:a8:fd:84:92:e8:52:36:7d:1a:8d:5f:
70:56:dd:8a:59:24:83:b3:cd:fe:b5:84:7e:d0:d1:
e3:cc:9e:df:ae:33:8f:66:89:0a:f1:f6:9f:41:5f:
08:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:77:F0:00:0A:E9:5C:B3:E1:40:97:DC:85:C8:96:35:22:DB:B2:0E
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cb:dd:65:c2:85:e3:53:90:11:ae:b4:7a:cc:4d:05:81:fe:
61:e6:a2:9e:e8:ea:8a:77:73:3f:30:6d:88:19:e7:3b:94:e8:
0d:ff:cd:8c:37:db:1f:1b:92:3d:16:6e:9b:db:97:04:92:5e:
cc:4a:4b:0b:05:48:13:ae:d9:88:ae:ae:de:9b:a0:98:05:1a:
ea:f8:78:5c:b9:91:5d:66:5e:aa:c7:35:72:94:58:a4:c5:29:
25:f6:36:13:68:23:62:04:e0:8c:20:79:d4:a2:f4:46:09:ce:
d5:2f:c2:9a:af:71:a5:e0:4c:1c:fd:c5:f4:90:f8:db:d3:4d:
06:dd:9e:67:ec:8a:64:36:b2:cd:0d:15:39:b4:58:a4:49:c9:
73:7a:3e:60:c4:7e:cf:b5:b4:0e:0c:c7:67:0a:52:80:36:46:
e4:a8:72:18:40:19:37:90:c3:86:42:23:b4:ee:67:ee:a9:29:
f6:20:e3:10:bf:5d:b0:6d:ba:e5:40:80:54:d1:e2:78:43:5d:
b2:85:fb:9e:cd:28:d3:6c:19:d3:0e:15:04:a1:87:ee:a6:3d:
b5:5d:5d:52:46:19:d6:43:f3:c8:a5:d0:4f:3c:3f:4d:ff:4c:
37:36:d3:a7:41:6f:8c:28:82:13:5e:b7:5c:83:77:8d:b7:c0:
59:9d:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:39 2025 by rpki-client