Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: 01PW729rr4WwZa1LWv79VkT27TwERrCsFZzg/RNEfs4=
Subject key identifier: 07:10:9D:84:45:EA:FB:08:2F:96:40:9D:A1:76:AE:55:90:02:30:30
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 019511D98076F94D2E517294BD1EC689DF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0430
Signing time: Mon 17 Feb 2025 03:00:21 +0000
Manifest this update: Mon 17 Feb 2025 03:00:21 +0000
Manifest next update: Tue 18 Feb 2025 03:00:21 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: zvQMN04ciJSr14PCjzaRv2T36+Xk52wb9pJ6jRmilMo=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:80:76:f9:4d:2e:51:72:94:bd:1e:c6:89:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Feb 17 03:00:21 2025 GMT
Not After : Feb 18 03:00:21 2025 GMT
Subject: CN=07109d8445eafb082f96409da176ae5590023030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:4a:75:44:bf:af:08:36:00:0f:39:99:f9:
73:0c:a2:ad:85:d2:74:e8:bf:80:7c:86:92:ef:fa:
96:42:af:78:e7:e2:b7:76:8e:b9:8d:eb:cf:c9:ea:
27:0f:60:0a:85:12:3c:c0:ca:0b:12:72:cb:5f:f7:
20:b8:81:fb:11:89:57:99:73:77:01:6a:45:52:b5:
e8:6e:79:c6:99:27:16:03:fe:99:55:12:e4:ed:70:
e4:43:ed:a7:cf:f7:e6:37:f1:a3:7f:7d:69:1d:c9:
ca:22:1e:df:da:36:c6:e9:07:28:7f:1d:e1:a9:07:
c5:80:9b:67:49:1e:46:02:53:9a:da:b3:c4:53:eb:
dd:a4:ff:bb:d7:10:4d:f5:1e:4a:39:d5:20:1b:5c:
03:b8:9e:1d:45:35:9b:2d:cc:7a:09:46:18:6f:3c:
27:15:38:7d:09:28:3f:12:ab:13:b2:10:1c:f1:80:
69:52:fc:96:f0:70:98:84:7f:f5:f1:6e:e5:b7:b7:
bd:ec:c4:b6:67:d9:c8:9c:48:f3:0b:e7:6f:05:9e:
d2:da:b4:ec:b3:80:d6:05:99:11:f9:48:f6:4a:b6:
f1:16:d9:cd:fc:32:94:8b:fd:1d:ea:cd:0f:80:23:
28:0d:ca:f3:0f:fa:5f:a6:b9:26:c9:cc:f3:fa:0b:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:9D:84:45:EA:FB:08:2F:96:40:9D:A1:76:AE:55:90:02:30:30
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3a:4a:f3:90:8a:89:db:40:f6:38:4d:82:95:ed:0a:de:6c:
3c:3e:04:30:1e:dd:84:be:9e:63:1a:00:30:56:50:08:7b:4d:
cb:62:9b:4d:c9:9b:77:dc:58:c3:82:74:a1:8b:3e:e5:d0:ae:
76:59:38:8d:37:db:2a:c9:aa:9f:90:d6:2f:91:75:70:e1:9a:
b8:3b:9c:0f:d0:01:ff:82:c0:2b:70:97:05:e0:77:8d:b9:16:
02:f9:b1:ba:7d:94:c8:90:79:9d:2e:84:7a:a6:dd:1d:85:85:
33:5d:dc:11:c4:29:05:4c:26:f2:7a:a6:21:fa:d8:db:f7:ec:
94:e2:fa:c6:81:6c:a7:09:54:f1:69:fe:7b:2b:45:08:fc:a3:
c6:a5:2c:96:ff:9f:75:8a:21:40:49:06:ba:ea:66:c9:03:4e:
bd:2d:bd:42:b6:cc:bb:79:49:02:58:7a:1f:2f:0d:e9:7f:01:
6d:1f:01:9c:8d:53:54:85:3b:a1:77:9a:9d:37:2d:cb:c4:78:
21:c2:1c:bb:e2:1b:e6:05:2e:f9:98:d9:ff:ac:85:86:07:09:
9b:40:5d:61:f2:97:47:f9:80:bc:d3:08:5d:b8:a9:53:b3:19:
ab:a6:4d:e1:44:20:ca:ac:61:d1:61:5e:f3:ed:74:68:da:ce:
32:74:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:59 2025 by rpki-client