Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: eAgY+0nIjvN5UEl5ylD1S/y5xaF8AC//SNezyT/FI3k=
Subject key identifier: B9:43:2A:D5:25:8A:25:19:86:08:E0:5D:E6:89:9D:75:B9:56:46:88
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 019655DC91429DE91194642E79E00C32523F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 01:00:40 +0000
Manifest this update: Mon 21 Apr 2025 01:00:40 +0000
Manifest next update: Tue 22 Apr 2025 01:00:40 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: c4qVetV9D/SNVZrvhvYJRtKH+OVvyf5Q1Z3P2ZJR5D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:91:42:9d:e9:11:94:64:2e:79:e0:0c:32:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Apr 21 01:00:40 2025 GMT
Not After : Apr 22 01:00:40 2025 GMT
Subject: CN=b9432ad5258a25198608e05de6899d75b9564688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:aa:c4:c2:8a:6e:19:7c:4a:c2:08:46:5c:
16:5f:c0:cf:1f:05:b3:63:bf:0b:5f:6d:a2:07:0f:
77:cb:e0:17:1c:ea:c3:11:be:27:ee:e0:5e:01:27:
0a:21:3c:62:cb:5d:e2:66:3d:b4:7b:62:de:78:d1:
6a:3b:a6:26:c1:11:c4:04:ca:a3:95:f1:8d:6f:7a:
34:29:db:2a:85:79:d7:49:2a:e7:a2:3d:09:3b:f7:
ed:2d:06:c5:72:b8:f4:19:96:15:20:d4:92:c6:e5:
89:ca:3e:b6:91:d6:1a:74:62:cf:98:d9:1f:9a:ee:
be:aa:82:8c:c6:05:d8:27:94:98:b4:fc:55:93:dd:
a4:eb:c0:4c:df:db:98:c0:1c:83:4c:b9:27:f8:d9:
f2:94:e2:8c:97:be:8c:26:66:ec:7c:81:63:06:b8:
d0:45:8f:07:8a:cf:59:db:95:0c:41:db:12:59:83:
ce:c0:51:53:f8:e7:70:be:5c:46:f2:20:d2:0b:4c:
cb:96:a1:19:d4:4f:5f:06:8c:31:4a:a6:4b:0c:0b:
e9:2c:b3:d4:bb:ea:a9:20:97:b8:b9:1e:f1:88:8c:
ac:fa:d4:79:1c:16:7b:19:09:90:93:83:5b:db:5d:
fc:38:28:da:fd:8e:76:07:3d:ba:2b:cd:97:df:9f:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:2A:D5:25:8A:25:19:86:08:E0:5D:E6:89:9D:75:B9:56:46:88
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b8:b5:70:19:84:32:d0:d2:e8:8a:c1:58:41:bf:00:2c:87:
34:2c:ec:09:89:25:c3:34:4c:3e:69:66:54:93:c8:9c:a4:5d:
f4:a5:f2:3f:a2:57:cb:88:f9:bf:72:21:78:7a:cc:bb:8b:a8:
ca:29:9e:fd:18:9a:15:35:70:98:6f:e6:d0:49:30:8e:9f:55:
30:e4:02:95:63:ab:f5:73:ed:1c:b6:7b:b5:44:a6:a9:fc:6d:
b1:b9:8b:7f:6f:1c:9b:03:68:ea:71:1c:4a:b0:d6:d7:43:40:
ae:21:2a:78:95:c9:7c:f6:11:78:da:12:85:31:e8:47:4b:ee:
65:84:4b:77:d0:3f:03:10:00:d2:a2:63:4d:4f:cf:87:9e:4d:
9f:3d:ae:ff:1e:8e:bb:f3:ad:d8:03:ce:85:23:f6:14:20:d0:
63:d5:f7:8d:47:a3:34:bd:e8:98:66:e7:f5:92:26:9f:6d:12:
c8:b3:b6:d5:b1:de:7d:3a:70:b9:cc:66:59:0e:17:dd:bf:d4:
90:c4:af:51:ea:7a:39:c1:99:26:f9:a7:90:52:47:a2:3f:a2:
c9:6f:f0:eb:81:e9:1e:2b:f2:67:a2:a1:09:ea:96:88:ed:d2:
c9:2a:5f:9b:47:41:04:0e:41:23:ed:82:b6:83:fb:05:f8:66:
f2:9d:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:40 2025 by rpki-client