Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: Q2XX+rEsSu+HT5FXTfiX20/W8x8KFWeNdNxa2Xj6O04=
Subject key identifier: B3:4E:09:6D:84:B4:0C:B7:9F:A0:81:5E:DC:85:63:3C:6D:03:FC:21
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 019921E7AC5E7BA5510FEB14B29EA91A0D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 066F
Signing time: Sun 07 Sep 2025 02:00:55 +0000
Manifest this update: Sun 07 Sep 2025 02:00:55 +0000
Manifest next update: Mon 08 Sep 2025 02:00:55 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: jG8GBEm+UzHGsTMKh4eEJxf1KQOjIED4lfIzlz9Agb0=)
2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ac:5e:7b:a5:51:0f:eb:14:b2:9e:a9:1a:0d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Sep 7 02:00:55 2025 GMT
Not After : Sep 8 02:00:55 2025 GMT
Subject: CN=b34e096d84b40cb79fa0815edc85633c6d03fc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:b8:d4:69:8d:e4:c9:e9:4c:a1:fa:a5:d0:
38:9a:20:5e:58:70:fd:ef:f3:78:8f:ba:6c:85:53:
78:43:7e:4e:c1:61:87:8e:d3:7f:79:ec:11:e4:ca:
80:96:7b:20:cd:a2:1b:49:00:f0:8d:a6:36:c7:f2:
5b:f4:2f:33:07:f5:e6:d0:84:d8:de:92:3c:10:55:
49:b7:b2:55:3e:d5:42:13:dc:a6:d1:f0:66:4b:ac:
00:7e:07:df:80:d8:c4:bb:88:20:19:77:40:9b:20:
6c:63:6b:fb:70:e6:8f:3b:39:a8:c7:dc:e1:05:44:
e6:04:b8:dc:1a:d9:e8:73:1a:99:06:73:41:b3:51:
e2:db:fa:fe:8f:5b:6b:5e:3a:75:4b:05:84:a9:da:
15:b4:ca:2f:2b:23:b6:e8:d4:00:71:e1:6a:5a:df:
fa:d3:ed:5f:b2:7e:0d:12:09:8c:4f:e5:f2:de:b4:
c7:e0:13:72:6b:09:58:18:6d:c7:41:78:3f:4c:be:
cb:d2:73:06:ae:17:8b:01:c9:3e:2a:5e:e5:ab:20:
19:56:43:09:16:b3:db:b5:1a:4e:0c:de:e5:ab:82:
3b:d4:b4:7d:89:37:36:13:3e:91:44:10:56:b7:94:
61:0e:a2:2e:a5:04:e3:2c:78:0f:98:8d:36:d8:f2:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:09:6D:84:B4:0C:B7:9F:A0:81:5E:DC:85:63:3C:6D:03:FC:21
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:94:84:47:da:94:60:7f:96:0b:28:00:d4:46:7e:b8:31:24:
34:4d:64:1a:07:2c:10:49:ae:95:ce:1f:a3:24:38:73:22:a3:
95:f9:17:b6:08:2d:5a:c5:e5:fc:bb:1f:9b:90:6d:48:94:d8:
b7:48:d1:c0:43:6a:13:d0:fc:b6:c9:a0:5b:5a:cc:11:50:7a:
97:66:38:ff:01:a5:65:fc:bb:55:5a:98:35:48:d1:3e:d0:2f:
0a:12:a7:ca:66:af:81:9e:06:a8:c0:92:0b:2f:c3:3d:05:06:
84:77:05:52:a1:aa:f6:12:9d:be:67:81:48:3f:e9:3e:06:ac:
46:48:45:1a:c2:58:ac:57:19:a6:b4:7a:e6:a9:61:6e:20:9c:
35:93:e5:ba:75:dc:d6:a9:65:fb:72:1f:1f:34:81:92:93:60:
2d:9e:83:8e:28:89:b4:31:be:2b:2d:47:d4:1a:6b:1f:67:de:
ca:4a:d5:dd:33:3a:b8:6c:42:1b:30:4d:c0:86:25:4d:52:aa:
0c:75:a1:8b:42:dd:74:6b:9a:05:38:77:23:84:af:30:4e:35:
c5:a9:13:55:d6:3a:75:09:13:71:e9:38:16:90:71:9c:51:8f:
95:00:6f:2c:d3:30:7e:e6:f8:29:2d:73:20:54:aa:b2:8b:5b:
b2:05:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:38 2025 by rpki-client