Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
File: ltkAsLweXxt4xlzYPnog2GNHJrY.mft (raw, json)
Hash identifier: Dg0YCb304wnh+eqOPA3qYIxA2ECXREDW2HZx15QLjc4=
Subject key identifier: BB:97:57:6B:18:AD:8B:05:64:E0:6E:34:C6:65:ED:D8:9A:6D:69:F5
Authority key identifier: 96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
Certificate issuer: /CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Certificate serial: 0194BA849612F427BA856033BA096E6FBE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 04:00:38 +0000
Manifest this update: Fri 31 Jan 2025 04:00:38 +0000
Manifest next update: Sat 01 Feb 2025 04:00:38 +0000
Files and hashes: 1: EuHqvHYj6jpIyXMv6rjnbEuBkks.roa (hash: egrbWq58qBFkNjLMJRTqcwBt98Q9t2+QyI4RLP6TLkY=)
2: ltkAsLweXxt4xlzYPnog2GNHJrY.crl (hash: kpK3AfpI63/dw8mF1lZblKlwmmron1z/liS7+dE00ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:96:12:f4:27:ba:85:60:33:ba:09:6e:6f:be:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Validity
Not Before: Jan 31 04:00:38 2025 GMT
Not After : Feb 1 04:00:38 2025 GMT
Subject: CN=bb97576b18ad8b0564e06e34c665edd89a6d69f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:84:fd:e5:40:af:4a:4f:d4:8a:4a:24:48:
57:36:a8:4d:86:52:3d:2f:a5:f6:db:53:e2:7f:40:
a7:09:26:7a:f7:c9:2a:ba:f6:a8:97:0f:05:63:6c:
a5:2c:1d:e8:91:c7:47:dd:e1:f5:f8:66:a5:41:a5:
01:a2:d3:04:c2:77:1e:13:b9:34:3f:4e:ac:5d:06:
20:16:72:3d:8d:a8:44:fc:38:60:dc:06:0f:91:7e:
b0:e2:5c:ed:9d:5e:8c:a8:39:a2:bc:74:dc:cc:77:
52:9a:29:6c:40:7d:69:e2:b2:9e:20:4a:51:33:68:
3f:58:f8:b1:bf:90:e7:df:44:35:6c:c9:7e:ff:7b:
1f:37:c9:ff:82:c9:c6:3a:93:ff:d6:df:19:14:a7:
fa:15:4d:cf:f2:b4:70:32:8b:6b:13:4f:43:7a:09:
3d:bf:06:0c:72:4e:aa:b7:2c:50:c3:e6:86:28:7e:
51:3f:b9:90:14:64:32:4b:85:88:9b:f5:01:f9:77:
06:ba:c5:61:f4:ea:78:50:bf:d1:8d:d7:57:64:ba:
95:26:9c:43:9f:87:94:83:33:a5:d4:3f:4e:9f:d4:
9c:6c:51:ee:c3:7a:05:fd:46:91:d0:b3:e5:cb:ba:
dd:24:b3:32:f3:34:ce:dd:5c:b6:4c:3e:aa:2a:02:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:57:6B:18:AD:8B:05:64:E0:6E:34:C6:65:ED:D8:9A:6D:69:F5
X509v3 Authority Key Identifier:
keyid:96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:60:ed:07:a3:c6:a8:96:38:6d:03:c7:aa:a4:72:2f:a6:c3:
1b:64:64:e0:6c:21:c3:ec:54:cf:90:16:99:be:e2:e7:53:c4:
10:60:02:a3:2a:3d:71:9d:46:03:0a:fe:bb:eb:e4:42:a2:3d:
93:cd:98:c1:1a:49:d3:57:10:37:f1:42:c4:70:97:b0:14:7d:
9f:e0:20:5e:09:05:45:cd:51:a2:cb:7e:80:11:57:73:bd:1c:
f4:24:a3:89:4f:73:57:5b:f4:61:fb:b8:8c:a9:e0:55:50:33:
21:b7:40:9c:88:25:d8:bd:e4:0f:a3:d3:c8:f3:ab:05:47:fb:
52:5d:11:74:73:38:d0:dc:1f:1d:ef:4e:58:cb:bb:da:e1:50:
fb:ea:e3:30:c5:0a:07:5f:3e:74:85:3e:f5:98:b4:56:b7:7c:
c2:01:4b:f2:f6:0d:ec:41:e3:87:ac:db:f2:5f:3d:04:97:60:
7e:fa:2b:a3:0d:46:35:45:b2:09:77:c9:1f:ee:ca:81:70:56:
87:e3:1c:0e:aa:7e:e7:88:e5:7f:ef:38:bf:9f:92:48:3c:1e:
ef:2d:c9:95:1f:c7:e0:dc:32:34:f4:56:c8:24:4a:e1:d3:bb:
6e:7c:ee:cd:e7:a4:c7:af:6a:67:2b:49:87:a8:15:f5:81:14:
c9:28:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:40 2025 by rpki-client on console-fra.rpki-client.org