Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: Ak65UxNslbGz6nFEw+sGpK9AjqbJDXML6Pb8rvbIoNw=
Subject key identifier: BE:66:7F:88:57:58:90:09:49:D3:04:C2:74:D6:EF:93:FF:B2:A8:82
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 01984A0A0799F9CD352837E16AA2E3D24A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 04:00:27 +0000
Manifest this update: Sun 27 Jul 2025 04:00:27 +0000
Manifest next update: Mon 28 Jul 2025 04:00:27 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: jrcjgREbJwDygqUydYOHZqYecE0zoPwQXEP1f5fOY9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:07:99:f9:cd:35:28:37:e1:6a:a2:e3:d2:4a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Jul 27 04:00:27 2025 GMT
Not After : Jul 28 04:00:27 2025 GMT
Subject: CN=be667f885758900949d304c274d6ef93ffb2a882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:ee:eb:bf:76:0a:bd:32:79:51:8d:6b:67:
bd:7b:94:07:12:f5:65:3d:1a:96:61:35:69:21:8e:
54:43:ac:1c:b3:0e:e6:79:36:fd:e1:d0:90:c9:0d:
e8:0d:87:5a:79:98:10:a8:92:56:7f:23:5d:e7:b5:
3c:87:af:e8:d2:0e:a8:e2:38:35:c3:16:ff:e1:bd:
50:4a:81:31:40:c9:ea:ae:ca:a5:d0:d2:8c:aa:58:
f4:ec:76:1f:66:9b:22:01:26:7b:80:06:70:4d:23:
2a:e1:7a:bb:35:d4:b8:ca:68:e0:bd:13:b6:cf:40:
1d:97:b4:20:ac:e2:db:51:28:26:9f:88:11:ca:df:
ba:ef:fe:f8:bf:60:21:34:f8:9b:19:92:38:99:ac:
2d:fe:87:08:f2:73:55:09:14:51:e1:0a:76:e7:e0:
09:99:7e:72:92:f6:3a:4a:68:03:3c:84:a1:33:86:
22:a5:11:e8:67:ac:27:67:df:62:a5:45:bb:ab:c7:
a9:8f:1e:35:15:67:24:c9:43:95:a7:64:09:ec:b4:
40:80:39:88:b4:d4:28:f7:e9:e2:9b:e7:d8:1e:c7:
24:35:33:50:a6:ef:da:c6:29:50:d5:5e:51:de:7f:
e6:44:4a:d2:d4:b5:4b:3d:c8:2f:91:c2:3a:25:58:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:66:7F:88:57:58:90:09:49:D3:04:C2:74:D6:EF:93:FF:B2:A8:82
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7b:53:57:f3:d6:57:3f:99:57:9b:34:a2:71:fd:0b:66:01:
f0:a1:0b:7d:1c:20:fb:50:0a:fc:ca:25:df:fc:de:63:b7:22:
fc:d4:4b:d3:05:97:39:eb:61:be:1a:6e:3c:c5:f9:b7:1d:97:
17:ee:0c:a2:c7:fc:82:97:d7:15:8c:75:91:f6:82:1c:ed:46:
d6:bf:d5:8d:a3:70:45:b6:5e:d4:98:b4:ee:cb:14:f1:2a:8f:
b8:be:d0:4f:58:a9:ca:f7:43:a7:6e:2b:5a:44:54:e5:fb:ec:
43:f9:74:d2:1a:cc:e0:b3:af:61:bd:da:5e:0e:5f:38:52:8f:
2d:72:71:67:10:18:e1:5e:27:1c:8d:0d:ac:ca:0c:0c:fc:9a:
ed:e2:f6:ef:f1:42:89:f5:61:c5:3a:35:6f:4b:09:cd:9e:c3:
73:c8:51:06:c5:94:0b:cc:56:4a:36:84:8c:27:d7:95:04:fc:
36:3c:b8:6d:7b:b3:fd:10:fd:e4:60:fb:7b:78:be:5d:cf:bc:
a5:90:07:fa:8f:57:d4:d6:e1:8b:6b:ef:8d:05:a8:02:29:86:
0b:98:5b:2b:55:10:fc:75:dd:30:b6:3d:de:20:3f:06:e4:36:
ea:7b:a3:c9:9b:52:1e:a4:eb:2a:02:49:07:ec:3b:b6:8d:1a:
7d:7d:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:52 2025 by rpki-client