Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: 4F/TntHc7pY/qfJh2Gj5xtOecJPrhYZqMh9NOAn+nTg=
Subject key identifier: D6:23:08:97:64:CA:CF:42:BB:15:AD:48:64:36:EF:D0:2C:80:32:21
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 019748C32F3EE5AAF2AAF08C6BC7A4EB9BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 057A
Signing time: Sat 07 Jun 2025 05:00:40 +0000
Manifest this update: Sat 07 Jun 2025 05:00:40 +0000
Manifest next update: Sun 08 Jun 2025 05:00:40 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: YdFjfmp46l1MJuhkVhaeScULo/hhKeHVHqFlE21vl1E=)
2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:2f:3e:e5:aa:f2:aa:f0:8c:6b:c7:a4:eb:9b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Jun 7 05:00:40 2025 GMT
Not After : Jun 8 05:00:40 2025 GMT
Subject: CN=d623089764cacf42bb15ad486436efd02c803221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:5c:3e:f1:5c:df:90:d7:1c:0a:d6:fc:80:
69:37:d2:53:b2:60:3b:24:83:4b:7d:43:26:ed:f2:
98:ff:5b:cf:f3:a1:08:13:01:da:e5:ae:46:b0:6b:
f7:e6:90:64:cc:87:d4:03:a4:53:a8:19:8b:9f:e9:
88:b7:7e:a7:ea:c7:1a:84:be:26:90:43:fb:ae:65:
97:68:c0:bb:ed:63:57:a0:d3:af:93:83:02:fd:55:
e6:de:f8:cd:d9:7b:93:41:96:fe:21:5e:fb:83:b7:
9e:c3:73:4d:6c:82:7d:d0:98:b1:0d:95:96:8c:7c:
bb:cd:ab:27:09:e5:bb:78:96:66:0d:94:0e:bf:37:
b6:d1:0d:48:a9:b6:25:ad:9f:5f:d3:ce:eb:2f:9d:
c0:a0:cd:ad:f4:0b:bd:b3:c7:9b:d7:be:e1:fd:9d:
31:08:d8:a9:ce:36:5f:df:02:a0:91:0e:46:0f:8c:
22:5f:2d:fb:4a:d5:60:e3:7c:76:69:85:c3:81:2e:
3c:c7:bc:1f:5c:e1:d0:97:4d:0c:45:12:2e:b6:7c:
1a:d5:bf:99:1e:45:68:63:01:23:bf:29:c7:f6:f3:
10:fd:4a:0a:0f:90:2c:94:ae:9f:58:7a:e4:5f:ee:
dd:04:1b:e0:bf:41:6d:9a:89:de:59:23:16:61:bf:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:08:97:64:CA:CF:42:BB:15:AD:48:64:36:EF:D0:2C:80:32:21
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7d:9f:8f:b1:54:b8:77:42:c8:3b:9a:68:ea:c5:68:21:67:
28:85:15:26:b7:92:21:7d:de:31:d4:52:59:61:0b:4e:e2:5d:
ac:5d:e8:74:3e:47:71:0e:58:61:d9:0e:40:a5:16:7a:02:a9:
7c:7e:f6:7d:f6:94:59:2f:7e:5f:28:3f:0e:2a:15:76:78:dc:
b9:12:65:dd:51:9e:49:83:f9:e4:1f:06:42:58:ef:4b:cc:8e:
63:be:ce:62:d9:95:f4:c5:5c:93:87:be:20:93:33:6f:ec:0f:
17:fc:a8:bb:e7:b9:1e:d3:ec:77:29:9f:59:f6:ef:ed:ec:47:
a7:fe:37:7d:cd:bf:6c:a0:cb:79:0d:fc:0f:a1:f6:72:4d:9f:
36:ad:40:63:e8:84:1e:1c:52:d3:5d:bc:91:04:61:77:90:0f:
a7:7f:3a:fd:22:f9:f4:11:75:81:d7:ea:ff:24:81:04:bc:55:
f6:13:f2:20:28:d5:0f:18:df:ca:8b:ff:65:d0:44:b9:25:42:
d3:8e:e6:ec:b4:51:63:79:00:93:3d:13:89:90:37:06:56:66:
ee:b2:08:52:b7:91:b1:24:4e:a9:b6:9e:11:e8:16:e8:05:2b:
26:75:3e:d1:7a:83:a0:73:32:23:9e:4a:1d:62:c7:d7:14:f9:
f5:44:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:21 2025 by rpki-client