Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: cr/zOcUlZ9d9gpepEI/Fg+RH0eC1yjTTulHBkK4FXOo=
Subject key identifier: 3D:E4:6C:D1:BB:C9:69:AA:AF:34:8C:DA:96:58:19:DD:A9:1B:08:E3
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 01965F8436E7E3E105713101A8C203231833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 22:00:22 +0000
Manifest this update: Tue 22 Apr 2025 22:00:22 +0000
Manifest next update: Wed 23 Apr 2025 22:00:22 +0000
Files and hashes: 1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: Zd0CBylJpkRv2Vhgqy614DP0Jqj17fNbzqdMbfB/Css=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:36:e7:e3:e1:05:71:31:01:a8:c2:03:23:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Apr 22 22:00:22 2025 GMT
Not After : Apr 23 22:00:22 2025 GMT
Subject: CN=3de46cd1bbc969aaaf348cda965819dda91b08e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:6a:4b:dd:fc:3d:5d:1a:cf:33:7f:e7:26:
0a:90:51:fb:b5:77:68:0c:1c:3e:64:a6:55:0a:a2:
49:a2:19:64:b6:69:91:73:f3:db:c9:50:eb:75:70:
03:ed:44:43:39:4b:90:39:e7:32:c9:26:c5:3a:51:
0f:34:da:41:a8:55:89:b2:2b:d6:d7:b7:e6:76:1a:
53:f7:76:37:88:4d:dd:c9:82:e4:ad:8f:fb:2b:6b:
07:c4:5b:7f:13:03:b2:98:41:d8:fb:0d:e9:cc:2b:
2c:ba:26:45:e5:c3:9e:f4:34:d9:ff:1a:25:5e:bd:
97:8c:d1:ca:cd:6c:1a:e7:b8:38:35:5b:97:34:83:
d6:26:c2:12:9f:44:41:9e:f5:53:3d:ee:e8:1c:44:
6a:73:1e:a0:58:78:87:5c:74:36:70:1f:60:a2:ef:
ae:9d:4f:4a:ca:7a:6b:a9:ab:5a:ae:a1:62:5d:42:
5b:3f:88:9b:47:ae:98:49:5c:23:8f:0b:1f:20:d6:
7f:b1:f6:86:e9:f2:c7:81:ca:d0:6f:97:41:40:1c:
78:a5:55:00:a5:2b:89:2f:c2:d0:7d:a9:c5:1c:c3:
a7:96:da:47:7c:d4:77:aa:d3:53:17:e5:6f:8b:56:
cb:7e:79:d0:7f:f2:6c:13:00:85:c7:48:3d:14:0c:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:6C:D1:BB:C9:69:AA:AF:34:8C:DA:96:58:19:DD:A9:1B:08:E3
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:32:23:8f:90:d7:7b:e7:f4:b5:5d:e0:47:72:3e:c9:49:a1:
06:16:b2:ee:2f:d8:ff:fb:89:36:bc:ea:2c:57:35:80:56:9f:
72:70:95:9b:f6:42:8a:08:6b:86:b4:98:d8:0d:18:e8:d7:98:
95:ad:81:79:68:54:68:c2:d1:af:d2:b2:b7:00:58:d1:f4:08:
d4:da:48:15:ee:6d:13:4d:6e:a5:76:4b:6e:e6:1e:67:d2:cc:
e6:fa:67:bf:e1:a4:a4:57:85:cd:f8:4b:7c:29:97:99:9c:f6:
cf:ea:82:43:d5:34:92:08:cf:56:a3:b6:a3:d3:fa:ca:df:34:
ae:a0:15:90:65:f6:ac:33:22:ae:8e:43:0b:6f:bd:ad:65:72:
d1:f9:1e:64:1e:5b:da:a2:81:a7:5d:c1:2e:d5:7e:23:df:5a:
04:26:25:86:17:d2:e8:9c:aa:aa:cd:cb:ab:10:16:46:8f:96:
3e:ad:53:aa:71:f9:df:23:2c:df:ad:20:55:1f:a5:75:52:ff:
96:2d:97:96:23:0a:8f:cb:4f:c1:45:fe:0c:70:99:2a:32:b3:
5c:3a:b0:93:47:0e:59:94:ef:f4:54:b1:96:3b:9b:c7:84:49:
f2:34:e6:f1:22:a3:12:55:c6:62:da:32:c9:5a:02:47:20:85:
79:af:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:04:28 2025 by rpki-client