Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: mbM5IsO0h1e0m7gMMLVXPHrJLdUWJ8PyywLuIqN3Tck=
Subject key identifier: 36:60:8E:E3:7B:AF:42:8E:D3:BA:19:1D:99:44:31:1D:A9:92:F7:38
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 0196A577E8C872362A76A79F6D713980E66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 1395
Signing time: Tue 06 May 2025 12:00:20 +0000
Manifest this update: Tue 06 May 2025 12:00:20 +0000
Manifest next update: Wed 07 May 2025 12:00:20 +0000
Files and hashes: 1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: K+q9XbpjsRLuohW3SzmC7JytyMQdn4ojsVjERgGBkFY=)
2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:77:e8:c8:72:36:2a:76:a7:9f:6d:71:39:80:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: May 6 12:00:20 2025 GMT
Not After : May 7 12:00:20 2025 GMT
Subject: CN=36608ee37baf428ed3ba191d9944311da992f738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:d8:73:cc:f7:3c:0f:4a:75:1f:8c:85:39:
d9:62:7e:cc:f5:8e:03:55:8b:77:52:a0:d4:e5:e4:
09:6d:9c:bf:4f:32:db:98:e8:54:63:7a:64:03:8d:
76:ba:39:5d:c7:af:fa:e3:cd:b3:a0:fb:54:25:02:
2b:e0:c3:74:a3:48:e7:6a:22:c6:ad:5a:fa:a7:55:
b6:21:e2:cd:35:a1:f0:c0:ad:1e:69:e3:5f:a9:4d:
3f:3c:3b:fe:f8:87:6b:3f:bc:9e:6c:7a:03:66:41:
bd:c0:5f:0b:c2:47:2a:4a:3e:59:60:40:1b:f3:82:
cd:e1:4b:63:b3:95:d7:da:54:4e:37:a7:de:5b:f1:
f7:13:29:30:bb:3f:38:31:b9:75:85:30:4b:03:a3:
d7:09:48:f5:7a:bb:82:f2:19:98:5e:a5:fe:7c:88:
d4:12:16:e3:e1:ed:a9:19:86:90:fd:75:a2:aa:51:
6b:50:b6:15:7d:83:d0:69:6a:9a:9f:7f:cf:34:25:
34:b6:96:d0:3f:7c:a2:d0:20:15:89:0e:ae:dd:da:
17:a3:aa:aa:be:c0:8f:85:33:72:28:8b:cf:5a:0f:
d8:29:33:5d:43:0b:9c:cd:71:06:bb:d7:e1:2b:bc:
d7:e1:ff:e7:bf:df:cd:03:dd:a9:68:3a:53:15:74:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:60:8E:E3:7B:AF:42:8E:D3:BA:19:1D:99:44:31:1D:A9:92:F7:38
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5f:88:b1:51:a2:b9:80:23:94:cd:bf:02:16:b9:ef:0d:18:
3a:99:ec:b3:56:e4:be:cb:11:0c:bb:bf:d9:ca:a9:dd:9b:5c:
5b:b3:2d:99:2d:5d:ae:bf:e7:31:ec:ea:54:fc:0a:29:2a:68:
bd:20:cc:43:32:9e:2f:9e:9d:19:a7:d8:31:2d:97:05:2c:5f:
e9:dd:74:dc:40:3a:04:45:f7:17:03:db:2a:9f:45:70:08:20:
78:c1:0d:6b:92:4c:44:db:4a:b7:30:27:8b:4b:25:49:40:05:
fc:51:90:62:2f:ea:d3:6b:c5:1b:34:ac:7f:51:7e:8c:46:6e:
db:c1:3c:47:7c:2b:25:61:fa:43:67:37:94:cf:f8:e5:69:d5:
89:32:35:80:b0:85:c7:db:b1:db:81:f2:eb:73:1b:48:24:fa:
de:ca:a2:78:d3:11:68:23:0d:32:77:53:a2:60:34:6c:dd:7b:
09:b7:e7:bc:4b:30:85:4e:67:91:e1:52:dd:ce:7b:aa:82:d6:
be:38:32:38:27:0c:94:67:a7:1e:b8:0f:10:96:d8:4f:b3:8b:
3d:72:83:fc:39:16:8c:84:dd:8c:c8:32:57:1d:db:9f:ba:24:
99:c3:d1:b2:a3:36:2a:e0:ee:25:44:08:de:34:63:91:3b:58:
a0:b0:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:19:54 2025 by rpki-client