Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: st3vuegDIBf0mbrLl4VvF97PfoJHOoNEMEppgDaZ3QE=
Subject key identifier: E7:1D:3B:3A:AE:AC:AB:21:A8:F0:AF:94:48:93:F5:BD:73:ED:25:EC
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 0196797B233733B2B25AAB24CC03401072F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 23:00:35 +0000
Manifest this update: Sun 27 Apr 2025 23:00:35 +0000
Manifest next update: Mon 28 Apr 2025 23:00:35 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: JYlVFkm2MlaXxJ3miFCkJWYjNCSACB7hc+T+f/DQ6NE=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:23:37:33:b2:b2:5a:ab:24:cc:03:40:10:72:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Apr 27 23:00:35 2025 GMT
Not After : Apr 28 23:00:35 2025 GMT
Subject: CN=e71d3b3aaeacab21a8f0af944893f5bd73ed25ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:5b:42:af:06:a8:ae:56:4f:34:44:c7:46:
81:cb:ab:f4:27:d3:aa:3a:7a:10:51:73:3e:83:47:
6b:b0:24:98:ea:23:e3:fa:86:df:ed:18:04:1b:43:
a8:bb:5f:82:4c:bc:3f:d1:41:d0:0f:e9:1c:c4:21:
a2:82:cc:9a:25:31:0b:38:7c:a5:33:8a:9c:14:c4:
91:1c:e3:6a:29:f6:4c:bd:f9:7f:f8:36:5b:fc:3f:
9f:43:a1:60:70:07:17:03:0d:10:e1:f8:6d:86:6e:
c3:66:f5:90:75:5b:9e:43:26:2b:2b:43:f5:aa:a9:
55:e4:69:03:99:ce:01:26:a9:8c:65:7d:a2:46:80:
1f:0d:fa:75:37:49:58:78:86:2b:64:67:c6:99:4d:
26:d0:83:14:f3:10:6e:69:3f:46:60:f9:28:20:fc:
a0:46:07:40:69:1e:b5:39:4f:b2:77:9c:65:c4:d9:
b2:ff:e9:d3:6e:e1:41:9e:51:3a:b1:10:b9:d3:20:
50:0b:fc:67:7b:d9:87:84:d1:7b:77:b1:95:6b:78:
fb:45:1e:7a:6a:79:e5:71:c3:2e:e3:dc:62:83:3f:
f0:d4:5a:87:c3:91:6c:29:2c:eb:a9:78:65:1d:67:
d5:73:1a:86:77:56:74:67:4c:19:73:7e:b2:03:00:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1D:3B:3A:AE:AC:AB:21:A8:F0:AF:94:48:93:F5:BD:73:ED:25:EC
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b0:30:64:66:cd:fe:8d:27:df:a2:92:d0:18:b2:da:29:27:
59:aa:47:69:ab:15:44:c8:f2:6e:f0:d3:7f:eb:b8:79:54:ad:
13:01:82:b2:b7:47:c8:7a:2a:ba:69:b5:5d:6f:4c:4e:d8:4b:
fd:e8:b9:d7:9c:4c:7f:69:f3:e7:52:d7:cd:9b:7d:d4:35:28:
cb:a4:d6:68:4d:ea:eb:91:c0:41:f9:cb:3f:ce:31:de:b2:25:
d3:c4:ea:b3:98:fd:00:3e:ba:f1:55:bb:52:70:d4:8e:78:8d:
c5:87:2c:15:ca:5f:0e:08:e4:05:b7:a0:83:06:70:95:0f:9b:
d0:af:a5:4b:46:c5:e6:d9:d4:a3:3a:6a:d6:4b:44:39:60:77:
31:f4:72:b8:e8:3c:29:be:2f:bc:a5:85:27:68:13:74:40:61:
60:21:56:fd:a9:96:57:c9:65:b2:c2:31:35:27:a8:93:b0:ab:
54:b3:0f:8b:f5:50:4f:ae:bc:d3:c8:a1:e6:fc:66:7c:3c:72:
57:94:8e:96:da:22:96:5d:2e:e7:8c:06:54:cf:66:a4:14:dd:
74:12:a7:12:7e:f8:ca:cb:ce:c6:68:89:3f:c4:bd:11:2f:78:
c9:70:d3:61:4a:40:2f:8a:c4:ef:6f:6e:a0:60:6b:de:52:70:
ac:c4:23:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:57:16 2025 by rpki-client