Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: x3CXvn94zr+b1tbEtH7YHUUqF1vKscCbz107whT4lgk=
Subject key identifier: EA:09:67:A7:05:B4:63:5D:C6:04:69:8A:FD:95:7D:4B:97:07:BD:CE
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 019683FF4E3C34C2103407494B7F3609F8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 00:01:09 +0000
Manifest this update: Wed 30 Apr 2025 00:01:09 +0000
Manifest next update: Thu 01 May 2025 00:01:09 +0000
Files and hashes: 1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=)
2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: A+EuW6xULDSa96azgQCnB0V3LESEIAMn8M+70CGU8nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:4e:3c:34:c2:10:34:07:49:4b:7f:36:09:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Apr 30 00:01:09 2025 GMT
Not After : May 1 00:01:09 2025 GMT
Subject: CN=ea0967a705b4635dc604698afd957d4b9707bdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9e:e5:af:06:8d:8f:05:aa:37:7e:36:c1:d0:
7c:b6:9f:be:86:2c:3e:f3:df:97:23:99:a4:fc:4a:
01:a8:69:88:e2:e4:c4:dc:b1:29:e0:50:1d:b8:f0:
5f:97:94:cc:25:16:6f:9e:05:50:66:6c:8b:48:fd:
3d:ea:fd:e0:34:e5:34:3e:ff:f7:a9:54:10:87:ae:
b6:73:65:61:d9:77:46:c4:b0:89:c2:3c:72:9e:e0:
cd:dd:9d:65:19:83:82:c0:e6:c7:d4:5e:6c:1d:b1:
a2:3f:61:d2:71:08:62:2f:c6:35:ce:2b:1f:c4:f6:
f8:cc:04:f4:94:f1:9d:ec:f4:88:00:c2:b0:c2:1d:
f0:21:c7:37:23:f6:8f:87:1c:ae:ee:45:01:13:20:
b7:2e:e8:40:72:12:6e:5b:d3:d1:31:18:39:80:6c:
75:5f:78:a7:db:94:f3:b7:4c:50:0e:7a:d4:ef:a2:
ec:0e:9a:e3:0a:1e:e4:b8:cd:f1:bf:ac:99:23:cd:
7b:cc:2d:c6:e1:89:b8:7e:c2:1c:60:0e:df:08:b0:
aa:b4:92:68:12:07:9b:f4:ca:9c:a6:ce:03:b4:ea:
e3:39:6e:52:bd:0b:ed:b1:8c:c2:d6:65:0b:d7:f4:
0e:75:14:0b:86:27:91:5a:d2:11:74:26:db:cb:26:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:67:A7:05:B4:63:5D:C6:04:69:8A:FD:95:7D:4B:97:07:BD:CE
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c4:a2:93:95:ae:b0:6f:37:8c:4f:a2:74:97:f3:d0:d9:a0:
ec:96:a7:ac:f3:5d:b9:e6:5f:58:f0:a8:fa:5c:61:95:16:20:
28:a6:9a:a7:cc:17:0d:9e:7b:32:6c:fd:9e:28:4b:8c:d1:41:
f2:dc:7e:05:c8:6f:91:e1:64:70:af:7f:2b:e6:9c:11:73:4e:
ab:3c:38:38:4c:81:d5:01:b2:d2:52:2d:e4:7a:bc:2b:0a:d3:
4a:bc:ee:a4:8b:59:82:b9:25:5a:25:59:78:f2:5a:ef:45:d6:
35:6f:8c:a8:81:15:bd:14:0d:d4:05:b9:33:1b:e5:a5:62:fe:
f7:a9:86:84:d9:f0:d2:a6:7a:66:43:83:f6:50:5c:d1:ff:fb:
09:dd:e4:2a:28:0c:46:cf:23:e5:db:42:e6:1b:2e:dd:d4:a4:
be:f4:ef:d0:be:0b:70:69:6f:9c:74:fb:4f:ae:db:89:be:4b:
79:ec:c6:fb:4c:49:0a:e5:07:d3:b8:da:e2:78:32:9b:d5:0d:
b3:e2:a0:a2:8e:e2:76:6b:db:d6:8e:ab:de:5b:c0:46:bd:da:
f1:51:a5:a4:13:9e:af:a1:11:61:bf:47:b6:dc:e4:1f:bf:a3:
83:6f:97:8b:33:36:d4:a1:17:fb:79:80:5a:6e:b7:ad:8a:05:
aa:c6:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:39:11 2025 by rpki-client