Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
File: LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json)
Hash identifier: LpZ9CC6Ij5BCHY0g77+iSsnQQ7URBzo5Rqm5rFxeT6A=
Subject key identifier: F2:1E:B0:D6:8E:E0:D2:C1:84:6F:04:0F:23:26:0C:71:5D:A8:02:1E
Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
Certificate issuer: /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Certificate serial: 019847E522B90407F2C6B89472A877A426E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
Manifest number: 1590
Signing time: Sat 26 Jul 2025 18:00:55 +0000
Manifest this update: Sat 26 Jul 2025 18:00:55 +0000
Manifest next update: Sun 27 Jul 2025 18:00:55 +0000
Files and hashes: 1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: B+b5RY5JypEHmRDiaxA9yDptZU8R0/KgPfAXKTc5CBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:22:b9:04:07:f2:c6:b8:94:72:a8:77:a4:26:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Validity
Not Before: Jul 26 18:00:55 2025 GMT
Not After : Jul 27 18:00:55 2025 GMT
Subject: CN=f21eb0d68ee0d2c1846f040f23260c715da8021e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:cb:22:ec:1c:8a:9d:9b:e0:40:40:fc:79:
82:2b:65:ae:de:93:cf:d3:4e:97:1d:c7:af:c9:cd:
81:49:8f:3c:e3:79:20:3c:ea:75:91:24:47:77:ab:
f7:45:8b:70:b2:54:5d:04:9c:71:20:79:ed:f5:ff:
3a:67:77:9c:2c:77:61:54:c0:ab:86:f3:b8:db:13:
c9:31:bc:5b:2a:11:a9:39:0c:d6:7f:26:69:87:6c:
df:f8:2e:14:00:2e:54:ad:cc:6e:c4:2f:db:8f:15:
db:76:1d:da:db:ae:6e:2b:73:b2:a5:e0:33:85:95:
45:61:d7:b8:35:e0:33:6d:a0:f9:ae:f4:e9:83:ec:
69:a7:bb:fe:7b:57:2c:18:d9:ef:c9:7d:3b:83:45:
a8:16:c0:f0:7b:b3:32:45:80:97:25:ac:cd:ab:f7:
50:22:eb:b4:40:a4:ce:7b:a8:0f:bf:45:da:d7:ee:
12:be:3a:1e:f5:80:f4:f3:3e:5a:5b:0f:eb:8b:50:
29:85:64:95:b8:07:9d:e9:8d:d2:80:52:be:09:1e:
39:d3:f1:c7:c1:92:69:18:ad:98:f4:4f:81:15:a0:
05:11:46:c2:41:62:c8:29:31:2c:70:2d:e5:2e:48:
ac:76:e6:c8:74:47:40:ed:6e:9c:e4:4a:c5:d1:22:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:B0:D6:8E:E0:D2:C1:84:6F:04:0F:23:26:0C:71:5D:A8:02:1E
X509v3 Authority Key Identifier:
keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:52:d7:0e:9b:5d:81:04:1d:de:5e:b2:09:d0:88:72:ee:dc:
f5:d8:33:e4:e9:05:59:6e:8f:d9:14:74:c3:a7:38:18:57:28:
c4:7b:1c:88:5d:4e:fa:b8:c2:d5:98:7f:85:d8:57:8b:0c:fb:
31:d5:75:cd:fd:a9:cd:02:b0:5c:7a:43:a2:72:78:15:55:6c:
8d:d8:01:12:75:e0:ef:70:e6:f6:85:32:3d:51:21:57:67:0e:
8c:b5:b4:fb:83:c2:10:ae:02:61:e2:a5:0f:bc:bf:13:e9:61:
24:be:4c:e9:66:57:63:bc:63:9c:74:b8:55:db:03:19:9d:4a:
4c:e9:60:04:09:72:28:4f:2d:1f:92:15:c1:a5:8d:07:57:f6:
1b:0e:f6:d0:f3:d0:d7:06:5c:ae:ce:b0:e1:e2:3b:fb:8a:68:
00:27:71:86:34:ca:16:93:db:8c:ae:83:dd:bd:dd:bf:13:ac:
3b:67:76:c4:1b:69:69:16:40:e2:2b:c3:3a:80:ad:00:52:eb:
0a:85:1e:10:1c:47:7c:57:04:1d:ce:80:47:09:45:ab:d3:d0:
2e:b1:8f:65:1f:62:23:94:97:c0:b9:72:81:a3:58:ed:21:e0:
98:58:c9:b8:07:f3:31:34:3c:2d:82:c7:03:f6:6e:8e:6b:b7:
fe:7a:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:59 2025 by rpki-client