Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
File: ltl3-HCvlNbcEWribZDw5mWOMqg.mft (raw, json)
Hash identifier: XKrQFNEh6B9Bkwwx3cVp4945Cn13aPhT6aBNcKQVClM=
Subject key identifier: C9:EA:C5:95:9F:26:9F:40:D4:E4:92:33:8E:70:3D:3D:45:EF:24:E9
Authority key identifier: 96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
Certificate issuer: /CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Certificate serial: 01968390F52CB5637C8238907DC1B81CC248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
Manifest number: 0922
Signing time: Tue 29 Apr 2025 22:00:37 +0000
Manifest this update: Tue 29 Apr 2025 22:00:37 +0000
Manifest next update: Wed 30 Apr 2025 22:00:37 +0000
Files and hashes: 1: ltl3-HCvlNbcEWribZDw5mWOMqg.crl (hash: 9+KR/uXqTJ4Fa7cSu9AOafSy6ddko6r3Nsfj2DO0LGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:f5:2c:b5:63:7c:82:38:90:7d:c1:b8:1c:c2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d977f870af94d6dc116ae26d90f0e6658e32a8
Validity
Not Before: Apr 29 22:00:37 2025 GMT
Not After : Apr 30 22:00:37 2025 GMT
Subject: CN=c9eac5959f269f40d4e492338e703d3d45ef24e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:32:32:b9:49:02:46:47:26:7f:19:f9:48:
03:42:dc:42:4c:70:49:72:35:9b:ec:d4:c4:03:52:
42:50:8a:61:04:7e:29:12:75:da:67:69:ca:05:00:
c7:3e:9b:9b:6b:5b:51:c8:cb:8b:25:19:5c:bf:24:
8c:4e:b9:d1:0b:5c:bc:15:c3:25:99:0d:93:f3:13:
59:29:a8:6f:5a:ef:24:5f:64:8b:97:18:9c:fb:36:
8d:d2:c8:38:7c:ad:d4:d0:6d:21:0d:0b:1d:7b:62:
b5:66:bf:cd:69:01:3d:13:15:d7:13:c6:06:e4:6e:
be:04:47:67:58:9b:f9:26:10:f5:c8:9f:b6:5a:f6:
7e:5e:c4:e9:c8:72:07:24:fb:4b:75:05:4b:9a:93:
d0:ac:40:a0:48:77:a9:a7:d0:ba:6e:17:15:70:da:
ef:28:09:d1:2c:6f:b8:05:a1:63:12:a2:e2:e9:d2:
62:17:c2:8d:fb:5b:df:c2:93:6a:cd:38:a6:ee:0e:
d9:f6:2e:f2:5e:0d:c3:0d:f0:f8:42:c5:70:25:77:
aa:7d:2a:29:d0:94:c0:7f:4c:42:97:e6:fe:50:cb:
c9:8a:01:de:5d:fe:2a:2f:bc:a8:bd:51:03:a0:6a:
b1:63:db:49:29:16:cd:08:27:3b:46:c1:81:df:d3:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EA:C5:95:9F:26:9F:40:D4:E4:92:33:8E:70:3D:3D:45:EF:24:E9
X509v3 Authority Key Identifier:
keyid:96:D9:77:F8:70:AF:94:D6:DC:11:6A:E2:6D:90:F0:E6:65:8E:32:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltl3-HCvlNbcEWribZDw5mWOMqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/410be2-374d-439b-9ec9-cc337bfb58b1/1/ltl3-HCvlNbcEWribZDw5mWOMqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:eb:57:0f:02:a0:d1:ab:51:bc:5b:0d:fc:1d:c2:4b:d1:55:
fd:08:4a:6e:b0:9e:55:f0:d3:d2:40:d9:c4:de:f3:c6:f4:e2:
b1:77:c0:b0:06:ab:b7:37:07:e3:ee:3f:98:90:81:8b:ce:dd:
57:60:0c:c7:5c:53:4f:14:ad:2a:fe:b0:6c:10:2d:19:ad:28:
23:8f:e5:61:ef:37:d8:c6:9d:40:89:a9:1e:0f:a3:d0:2a:a6:
5a:fa:4e:6e:cb:42:73:df:2c:f2:2f:03:1e:06:d3:ff:95:f2:
7e:0e:2a:c9:f2:ed:f8:69:f7:b0:0a:19:12:c8:7d:12:81:5b:
15:3a:c6:96:5d:af:4b:e9:46:1b:5d:8b:b1:0e:83:5c:76:c9:
c6:c6:f4:17:84:cd:76:77:e3:8f:2c:e0:6a:6f:ef:0e:6f:0e:
1f:ab:d6:4e:38:b7:61:dd:4b:c1:a0:5a:64:59:95:b6:8d:b7:
ec:96:69:33:c9:22:02:32:b9:93:d0:46:1e:89:14:d4:1f:ee:
7f:9f:1d:36:b2:c4:41:96:0a:c8:21:65:4d:64:7b:c8:2b:fa:
b4:ad:8a:0d:a1:e3:67:89:e1:a6:e8:db:bb:79:c4:a9:78:b1:
66:26:2a:a3:38:d3:a2:81:c6:25:d5:07:50:0d:ff:54:8c:d2:
c5:75:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:53:17 2025 by rpki-client