Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: JDFOTn4V8hkiWa84v4TH9DfHLPDI7R9smynjfZ7bIDU=
Subject key identifier: 5F:B9:0B:E0:73:66:0F:ED:96:88:6F:C0:67:AD:86:A9:A2:83:F8:E4
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 019680C6E027FAFDC0EB2AED6A723E38A0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 125F
Signing time: Tue 29 Apr 2025 09:00:39 +0000
Manifest this update: Tue 29 Apr 2025 09:00:39 +0000
Manifest next update: Wed 30 Apr 2025 09:00:39 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: bf6hCcA4gXjxHkCrAmx3FYSzzKGpN6PU7+Dag3SZbq8=)
2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:e0:27:fa:fd:c0:eb:2a:ed:6a:72:3e:38:a0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Apr 29 09:00:39 2025 GMT
Not After : Apr 30 09:00:39 2025 GMT
Subject: CN=5fb90be073660fed96886fc067ad86a9a283f8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:f0:9e:f0:96:b2:b0:f7:db:88:2b:a4:b6:
5d:61:6a:8e:5e:29:ab:ed:71:1b:d2:dc:54:0d:9e:
b1:5f:76:31:9d:11:fb:89:b9:9b:a0:8c:2e:85:23:
70:7e:21:b2:48:55:c8:64:98:9e:62:51:87:07:44:
0d:6a:df:6c:a9:84:0c:11:1f:be:f4:1c:2e:9b:64:
c5:d4:8b:48:67:93:78:e2:b3:fa:fd:41:de:c5:a7:
55:2b:fe:1b:8d:37:75:d2:a3:16:a6:62:4a:ee:53:
24:12:f5:d8:d2:f1:3b:0b:9f:73:88:ca:ec:f8:f6:
92:cb:d0:4f:25:a5:ae:6e:e6:d2:5f:c2:1d:31:ff:
46:50:60:fb:68:c8:0e:40:eb:a5:aa:95:f7:30:f0:
93:2a:98:6f:fa:24:95:7c:db:93:70:66:2c:df:e0:
fe:2a:ba:09:f6:e5:8f:aa:4b:7f:ed:1c:6e:57:93:
37:8a:23:29:52:46:3a:4e:8e:47:83:49:7a:e4:ee:
67:c7:9e:43:9a:52:af:4b:14:c5:9d:32:f7:c5:2b:
76:78:7a:12:cd:32:ec:07:a8:48:55:21:74:f8:c7:
ea:54:b1:2b:af:77:a4:bf:39:b3:d3:69:83:6e:f4:
ee:86:37:5f:7d:2b:a7:de:a3:e7:45:5d:66:c9:08:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:0B:E0:73:66:0F:ED:96:88:6F:C0:67:AD:86:A9:A2:83:F8:E4
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:84:76:7b:fa:99:7f:75:e5:d0:7e:b2:9f:50:ab:4f:33:cd:
cf:bf:e3:31:5f:6e:39:18:7c:31:b8:66:84:4d:b6:43:15:23:
7c:fc:94:6b:cb:9f:e7:92:36:92:0c:5c:e4:c3:5e:3e:8b:c4:
bd:d3:88:15:08:05:8a:d1:cd:bb:9d:1f:33:0d:4e:e1:35:5f:
4d:ea:66:63:e7:6f:d4:d9:9a:f6:84:39:2a:52:9e:ac:52:7e:
3d:4f:e5:3a:f8:d3:a2:45:46:19:06:4d:b2:ad:a5:c7:70:3d:
ee:17:76:f5:76:d4:5f:72:b3:66:eb:5d:7f:9d:de:55:8f:34:
79:ec:b0:10:eb:a2:c5:84:b8:d4:9c:ca:53:a6:a2:73:a1:3e:
6e:e7:9d:ec:0f:53:df:32:b3:14:75:f0:fa:5b:75:18:1f:8c:
26:d0:58:4a:ae:56:7c:a0:b5:55:64:54:5d:3a:da:78:b4:08:
fb:28:56:a9:4d:d1:fe:b1:ff:0b:7b:20:db:e1:76:96:8c:e7:
69:a2:ea:7c:8b:8c:18:99:b3:66:b3:92:43:31:68:99:fd:1b:
19:3a:72:ed:54:46:26:4a:c2:ac:f9:6e:7f:09:05:fa:de:54:
0c:13:ce:b6:0b:80:a1:c1:80:20:8c:ae:48:b1:6f:aa:15:65:
56:d6:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:46:16 2025 by rpki-client