Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: mjgf5pirIu/sHK6w8jKj2OdLLgGmp9jxrZROc/sQg3U=
Subject key identifier: 3F:18:BC:FD:34:C7:FD:83:C2:93:A5:4C:65:9F:43:CA:50:60:EC:86
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 0197488D29F82F7465E98977BA76F6DE8C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:01:40 +0000
Manifest this update: Sat 07 Jun 2025 04:01:40 +0000
Manifest next update: Sun 08 Jun 2025 04:01:40 +0000
Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: xr2XDjYzXBFXmfjmKI0bfax6bdcxS8AdRhzI/NAliCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:29:f8:2f:74:65:e9:89:77:ba:76:f6:de:8c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jun 7 04:01:40 2025 GMT
Not After : Jun 8 04:01:40 2025 GMT
Subject: CN=3f18bcfd34c7fd83c293a54c659f43ca5060ec86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:63:4a:7b:4f:55:ee:7f:6b:1c:d2:dd:4f:
e6:97:79:66:1a:59:d7:01:a0:66:aa:6c:d4:46:8c:
b3:15:54:92:91:cf:bb:a2:bb:73:a1:5b:39:0c:9c:
47:44:d7:e5:30:77:8b:87:86:bd:5a:30:d5:64:1b:
16:18:ac:6e:8e:56:2a:ec:ae:e6:02:c2:5d:db:19:
fe:84:b2:43:01:0d:23:7d:49:0a:e8:b3:ad:50:6f:
de:5f:57:3f:72:dc:1f:ce:e6:ea:fe:29:37:12:e5:
8f:3f:5f:b6:d1:7c:a4:34:bd:ad:16:de:ac:13:43:
6a:a3:f7:1e:47:69:32:3c:4e:1f:1b:2a:7b:23:b1:
d5:d1:4a:e6:64:c1:4f:aa:29:07:9b:75:9d:f6:e8:
2d:48:f1:d9:a7:d0:b3:f6:fb:6b:d2:3e:16:d4:98:
2f:f4:50:d9:0b:c9:21:67:e0:a8:d2:d3:b6:c0:29:
16:c3:73:c7:0d:7f:6e:03:36:1e:d4:b6:90:b2:e1:
95:2d:98:80:9b:8a:91:53:b3:16:52:09:48:8a:db:
73:6e:95:50:04:05:a2:47:46:3d:7c:77:44:0c:b5:
fc:10:a8:35:0c:f1:32:5e:25:de:28:2c:99:1f:53:
42:c3:54:72:70:66:f7:30:cb:ed:97:fd:49:7d:4f:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:BC:FD:34:C7:FD:83:C2:93:A5:4C:65:9F:43:CA:50:60:EC:86
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:03:32:d5:ec:ac:35:76:3c:23:f8:ab:4f:34:a2:46:e0:fd:
12:9a:cd:61:71:9a:9a:80:a4:d1:46:2c:ba:81:cb:63:13:32:
a3:51:38:ec:1c:2e:ae:55:2b:3a:30:76:ea:75:f1:de:7f:fc:
4d:aa:ad:c8:33:09:ec:a6:a1:49:cd:85:b1:3d:0c:8a:f0:e8:
e7:39:36:ed:82:3e:ea:71:b2:5a:c7:f5:d9:46:45:32:53:fb:
66:e6:76:6a:9d:a5:66:df:a9:cc:5b:d6:ed:21:3d:2e:92:d9:
fa:5e:d8:18:ce:fe:6a:26:17:5b:6a:16:9e:e5:e9:ef:8b:16:
f7:4a:8c:d2:b6:46:e8:99:e8:bc:7f:e5:73:3e:74:b4:0b:b7:
d6:af:00:0c:43:59:4e:5c:02:a8:76:ce:e2:18:6e:2a:e3:df:
26:ce:5e:1e:43:93:3c:9a:58:b5:95:0f:aa:8d:1f:f2:05:10:
6e:9d:49:1e:9c:61:a3:3f:23:df:4c:4d:a7:03:4d:d0:bd:ba:
3e:d9:66:16:51:93:1f:ef:51:68:a1:71:53:99:6d:2b:99:22:
9b:d2:b2:9f:38:10:fb:9a:ef:e9:48:0e:64:bf:f4:a4:d9:4b:
de:a2:50:71:a0:49:9f:b4:78:34:8c:3a:5a:29:da:7a:27:68:
0e:11:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:25:30 2025 by rpki-client