Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: 7lEr06u66hUxaULc0VDUG/2aAjORN9argigG2BTfSlo=
Subject key identifier: B2:5F:82:64:22:CE:60:18:6F:FC:A2:AC:44:72:CF:83:B3:D2:77:94
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 01974931064838E2FEA965538A0C44B05344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 07:00:38 +0000
Manifest this update: Sat 07 Jun 2025 07:00:38 +0000
Manifest next update: Sun 08 Jun 2025 07:00:38 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: ZSQDz2/2+6X7SH68xz2DTYD99ExkehVtgMNenuEEhzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:06:48:38:e2:fe:a9:65:53:8a:0c:44:b0:53:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Jun 7 07:00:38 2025 GMT
Not After : Jun 8 07:00:38 2025 GMT
Subject: CN=b25f826422ce60186ffca2ac4472cf83b3d27794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:56:9b:31:da:27:6d:65:0b:a1:61:e7:62:
a5:1a:38:64:9e:a6:ce:10:70:f5:24:62:14:ea:c1:
eb:21:85:d7:b2:f6:df:46:1f:f8:99:ee:63:0b:62:
6b:c0:46:f5:86:d8:60:74:bf:40:f8:27:d1:71:5f:
28:10:45:1c:f9:a4:70:99:fd:04:a9:34:05:bc:e0:
5b:a7:88:46:d6:1e:f5:f5:4e:03:8e:a3:45:bd:07:
b4:c9:29:db:a3:21:ef:b0:9b:91:59:c9:e9:64:c3:
36:04:45:e0:05:13:14:48:8e:d9:20:0e:12:7e:47:
9a:cc:84:b8:b3:52:b2:71:56:fd:b2:7c:83:df:ee:
f9:e6:d5:8a:dc:8b:17:ce:cc:fd:15:e4:14:84:f0:
aa:c5:68:d1:1f:13:1c:cc:83:50:cc:6c:c5:3e:cc:
b6:34:4d:c9:b2:8e:07:e4:9d:20:78:2f:e5:31:4d:
ac:e1:71:96:bc:1f:e5:67:d0:61:b9:96:0f:40:3d:
d1:1b:60:41:da:6f:d6:b7:44:eb:54:27:05:2f:94:
e5:9b:0d:f3:c6:de:e3:3a:22:88:ba:4c:73:bd:a9:
37:f2:f5:12:3f:3e:2d:e3:b6:13:71:db:29:c7:10:
b0:4c:98:d8:fe:86:bd:40:d5:d4:9d:7a:af:47:49:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5F:82:64:22:CE:60:18:6F:FC:A2:AC:44:72:CF:83:B3:D2:77:94
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fc:de:d0:13:6a:ff:24:9b:cd:32:d6:95:60:a6:49:e2:af:
2e:93:db:81:16:83:35:9c:ff:79:b2:ee:3c:4f:19:a6:74:8e:
8d:9d:82:90:c9:7f:47:9b:0a:44:3e:6c:1b:04:81:58:46:94:
e6:cc:bb:1e:15:74:56:56:a0:9a:41:9c:dd:66:24:98:12:09:
f3:9c:db:60:79:5b:e7:d6:de:ed:60:d0:71:1b:48:74:b5:b3:
20:62:43:b4:7f:ec:c3:47:0e:b6:65:58:40:24:51:cd:67:ec:
13:d8:f5:2f:c5:42:af:78:49:43:60:c0:90:15:12:8b:a4:b1:
10:dc:8c:f2:a3:b5:74:ee:80:ab:e3:88:1c:75:58:37:28:e2:
70:f9:6c:44:fc:5a:30:80:18:99:83:c4:4c:6e:df:6a:d3:9d:
1d:79:12:aa:de:d8:b7:13:01:ca:61:c8:9b:a5:db:bd:d1:02:
22:bd:5f:dd:7a:29:cc:2e:55:b2:60:54:1b:96:97:cb:f6:93:
8f:5b:08:00:9b:6d:e9:f6:0f:cf:28:5c:15:85:08:7e:43:ed:
6b:ed:e0:44:27:a2:3a:62:ff:ac:af:4d:48:1c:82:15:00:95:
d2:d1:b8:da:60:48:79:30:e4:6d:d2:2a:a8:f2:93:6f:31:7b:
c6:d5:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:48:54 2025 by rpki-client