Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: ffKFBATYmbOysrbgGTT8hoDIOt1m+NUcX3M5VSNoeWA=
Subject key identifier: 6E:62:68:B7:5D:ED:ED:9B:43:E9:C1:E2:E1:B8:BE:82:5C:D8:38:7F
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 01967831905EF21F53F6B58D711C3E6C0314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0879
Signing time: Sun 27 Apr 2025 17:00:36 +0000
Manifest this update: Sun 27 Apr 2025 17:00:36 +0000
Manifest next update: Mon 28 Apr 2025 17:00:36 +0000
Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: SxGElfN+41azZqUJ7tUV5CRzvvAg829hFy7E/PI+hoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:90:5e:f2:1f:53:f6:b5:8d:71:1c:3e:6c:03:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Apr 27 17:00:36 2025 GMT
Not After : Apr 28 17:00:36 2025 GMT
Subject: CN=6e6268b75deded9b43e9c1e2e1b8be825cd8387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:ea:cb:be:94:35:57:4e:23:4f:56:75:2c:
80:88:20:b7:17:da:47:19:9e:f9:5a:05:21:fc:ca:
ba:77:90:fc:b7:65:eb:de:12:87:a9:0a:ba:9d:ea:
2f:6a:0b:75:e9:80:46:66:ec:0a:ec:63:30:ce:68:
5f:c0:c8:c1:a8:bc:2a:61:a7:c6:0a:93:2b:65:06:
ba:fe:03:a1:3b:3b:86:bb:ae:46:96:cb:5b:14:fb:
32:4c:89:9e:eb:64:4a:74:e1:c3:36:d8:d4:57:e8:
f4:e3:aa:02:f4:3d:5b:13:ee:1b:d9:9e:ff:1a:4f:
a5:d3:be:16:3a:32:1a:1c:8d:96:23:be:f4:1a:5f:
40:9c:81:d9:1c:f1:83:5a:0d:95:e9:95:28:3f:b0:
06:80:f6:d6:c3:93:73:f8:ef:bb:95:fa:ee:d8:94:
2e:75:b6:59:41:fb:42:67:31:9e:38:74:bf:87:aa:
fb:ae:af:bb:b4:fc:27:08:3e:69:80:4f:d4:04:8e:
ed:cc:b5:3f:7b:f2:96:c7:d4:f4:16:b9:c1:0a:77:
00:98:01:99:8a:dd:13:11:50:92:d5:af:6b:f4:07:
36:ef:ca:d8:15:ab:ad:c6:cb:87:72:86:b5:42:a5:
fc:2c:95:d8:89:ab:9d:17:e5:37:2f:30:17:cb:9f:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:68:B7:5D:ED:ED:9B:43:E9:C1:E2:E1:B8:BE:82:5C:D8:38:7F
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c2:0d:7c:24:b7:7b:24:95:03:15:eb:72:40:ae:ed:00:4d:
dd:12:70:a8:61:ad:15:50:56:a0:c7:04:6f:99:71:7c:08:ed:
28:33:3b:63:cf:76:e1:44:d8:7b:19:0a:a5:52:8a:5a:df:d4:
00:46:38:8c:ec:7f:5c:33:b6:4d:94:ab:1b:71:f9:2a:45:71:
20:b6:c0:52:79:f0:3b:28:0f:ee:3d:b8:96:a8:b2:ef:ef:33:
d9:98:78:ab:cf:6a:98:84:a6:bd:08:d6:7f:43:c3:8d:14:b2:
d3:a6:1c:60:41:07:26:94:b2:e4:5b:18:93:a9:65:4e:2e:45:
05:88:2e:4f:ec:4d:fa:4f:43:c1:b7:31:ce:45:84:5a:58:61:
41:b3:b6:62:a7:a3:e9:3b:36:50:6b:c7:65:3f:05:ac:e9:f0:
09:cc:aa:52:9a:27:90:75:0d:5a:d2:1a:24:c5:51:88:9b:60:
01:4e:45:f4:7f:1f:f7:3f:95:20:d9:a1:c4:7b:eb:6c:e3:da:
fc:42:78:ee:3e:aa:ea:af:0b:04:99:c0:a0:29:5f:80:eb:b3:
ab:3c:cc:81:d2:ac:b9:ab:08:ad:0a:fd:c8:35:d2:23:0b:f5:
a9:8c:b6:6a:e6:0b:98:88:bd:82:dc:2b:94:54:4c:dd:27:c6:
59:b4:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:05 2025 by rpki-client