Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: AmgB21OTOc5A8DotlOzM0W1dzxtjxxrN9IoIYtV0kQY=
Subject key identifier: 68:A4:30:0C:6C:2A:D5:8E:28:7C:2F:6D:6C:74:83:46:53:FA:ED:9C
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 0194BAF22F51366BF49CFC4981B8C930CE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 1297
Signing time: Fri 31 Jan 2025 06:00:21 +0000
Manifest this update: Fri 31 Jan 2025 06:00:21 +0000
Manifest next update: Sat 01 Feb 2025 06:00:21 +0000
Files and hashes: 1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: 9w1g+VwPS0N6KDmRz2GpS5XLOpei3qC9i4HZ47n/fnY=)
2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:2f:51:36:6b:f4:9c:fc:49:81:b8:c9:30:ce:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Jan 31 06:00:21 2025 GMT
Not After : Feb 1 06:00:21 2025 GMT
Subject: CN=68a4300c6c2ad58e287c2f6d6c74834653faed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:f7:5b:d8:b1:30:be:43:ce:1e:48:e4:65:
2f:1f:2b:8f:17:ef:9e:fd:2d:25:ab:b2:09:9a:af:
d7:be:28:a0:64:c2:c0:bd:fa:09:29:c5:6d:47:20:
94:30:78:1b:aa:94:97:a5:ff:2c:67:32:6f:b8:5c:
0c:6d:d5:c2:5f:5b:45:b3:09:85:87:fd:85:ed:de:
37:60:ec:8c:88:40:13:a1:ca:10:bd:ee:d8:f5:8a:
71:8b:99:b9:58:d0:43:b5:9c:5a:86:fb:8e:cd:b5:
be:2a:5c:75:71:40:84:d7:1b:f2:d9:ba:e1:dc:d6:
42:ac:1a:b6:29:85:62:4c:9b:7a:1f:b6:f2:55:8f:
2f:57:2b:9a:a0:47:0b:b2:a3:56:4d:57:44:cc:01:
39:09:54:65:d4:e6:78:db:24:80:58:cb:83:62:45:
3e:c1:b7:c9:f3:fc:ea:9b:e1:cc:5e:dd:44:a0:c0:
08:c2:78:0c:f4:03:ac:60:c7:a0:32:20:62:ab:d3:
73:54:66:f6:8b:79:6a:0d:16:6d:bd:5d:ac:25:e6:
3f:7f:3e:31:6d:86:0f:b0:72:ec:cd:4e:9f:ee:c5:
94:77:f0:dc:c1:e5:64:db:dc:6f:78:e4:c1:1a:40:
06:2d:c2:a2:03:b9:42:f8:a1:02:8c:74:35:89:74:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A4:30:0C:6C:2A:D5:8E:28:7C:2F:6D:6C:74:83:46:53:FA:ED:9C
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:23:32:bc:48:62:00:01:4d:38:9b:70:1c:a0:74:fa:fd:fe:
2d:ea:bb:b5:fb:2c:62:14:00:76:6c:8a:93:8b:f7:71:f1:a9:
09:e2:0d:7f:d3:5a:cd:d6:64:78:e4:ad:78:2a:78:a5:f8:b4:
76:a6:65:d0:99:d2:91:11:61:9f:df:64:c5:81:6d:cc:12:f9:
45:7e:45:bb:e3:ca:38:05:50:7f:08:49:9f:32:19:73:53:fd:
a9:53:68:57:91:ae:ce:cf:1f:58:cb:e6:bc:cf:6a:47:7b:30:
1b:c1:c0:e0:d2:0d:df:d5:c0:cb:05:98:fc:50:2c:af:ca:fe:
57:9a:f3:54:dd:87:79:19:59:cf:06:a9:60:ec:b9:69:db:04:
bd:01:ca:3a:0e:20:ee:c5:9f:aa:09:85:da:fb:e1:60:70:6f:
3b:3d:f4:dc:60:9c:df:a2:9a:3c:2c:a4:a2:70:47:bb:1e:6b:
2f:f7:06:c2:44:68:4c:58:89:9e:4f:19:7f:fe:87:c3:f8:a2:
60:e4:42:cd:1f:5e:85:b7:14:ce:fd:ed:e3:25:80:5d:05:55:
73:d9:f7:72:52:84:d0:23:65:89:58:9b:5a:b3:bf:08:08:89:
0f:e4:b8:ec:51:0c:49:20:df:a3:e1:85:e0:a6:61:57:31:89:
e7:1b:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:44 2025 by rpki-client on console-fra.rpki-client.org