Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File: LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier: cZswZ9uhpzLtt5rbycUqQbTqWJ24ougbP+WEWtZPEWE=
Subject key identifier: 6A:B4:ED:2D:81:AB:3B:39:A4:8B:45:13:8B:9B:28:55:F1:81:17:F0
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 019753474C4D49B59A2BDA4F8376EE4C5AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number: 1327
Signing time: Mon 09 Jun 2025 06:01:10 +0000
Manifest this update: Mon 09 Jun 2025 06:01:10 +0000
Manifest next update: Tue 10 Jun 2025 06:01:10 +0000
Files and hashes: 1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=)
2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: V0/rCaoboNXtKH0/ARCI4PTxPBFA0c24yPmbFxmcH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:4c:4d:49:b5:9a:2b:da:4f:83:76:ee:4c:5a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Jun 9 06:01:10 2025 GMT
Not After : Jun 10 06:01:10 2025 GMT
Subject: CN=6ab4ed2d81ab3b39a48b45138b9b2855f18117f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:5e:7c:2a:f3:21:24:0a:7f:39:86:0f:48:
9b:49:79:29:f2:7a:ae:77:5d:29:86:9d:9f:8c:fd:
14:d3:2a:31:b2:62:d5:0c:eb:6a:93:2f:52:1f:52:
62:aa:c9:ab:8a:b3:14:8a:30:a5:a4:d7:71:d3:9f:
14:f1:d6:d7:5c:33:cf:63:b5:fd:49:14:40:1a:21:
45:6c:f8:ce:8b:d8:08:85:42:b8:03:5b:70:75:44:
5d:0f:e7:75:53:47:02:df:2a:9c:ab:8e:f8:e5:fe:
c3:8e:92:18:22:82:92:22:49:7f:77:85:46:28:d6:
62:aa:8a:bb:8d:84:98:57:01:5e:aa:f0:e0:55:3c:
43:41:56:e5:b3:19:0f:b4:54:2f:f0:00:49:d0:bd:
52:b5:b4:c0:af:fb:0d:15:51:f9:39:4f:8e:b5:6e:
9f:8c:d4:cc:d5:dd:6a:29:cd:d4:5d:12:a0:8d:85:
5f:6c:2e:54:8b:a9:3e:bd:4b:96:85:1c:68:8c:1a:
76:06:64:46:1c:3b:99:40:86:0b:c7:53:3d:27:f7:
d8:5c:ba:62:49:69:7c:75:33:11:d2:c6:c1:50:d8:
b5:5b:72:aa:e2:7a:52:af:86:25:7c:cc:78:77:40:
64:64:9e:0c:80:dc:59:c4:51:ee:6d:6f:b2:78:51:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:ED:2D:81:AB:3B:39:A4:8B:45:13:8B:9B:28:55:F1:81:17:F0
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:79:3c:5c:5b:61:2d:8e:42:54:9e:e9:7e:39:c1:9c:70:06:
6e:26:24:96:78:bc:fc:72:d3:8c:7f:c3:44:87:87:6a:d9:ae:
8b:f5:2e:23:d8:de:45:cf:fa:80:43:5a:4a:05:dc:42:10:54:
bf:25:3d:a2:b3:81:54:36:94:b5:43:00:b4:66:43:b8:c6:11:
01:f6:c3:26:47:3f:bc:09:e9:3e:58:d0:b6:44:82:90:bf:8f:
4c:08:b6:9e:fb:ee:2c:bd:64:d6:75:f3:92:13:d8:c7:c7:7c:
f6:e7:54:4c:e5:1b:72:d7:98:34:9a:eb:38:79:fa:20:91:87:
46:aa:6d:35:0f:43:9c:9b:42:47:c7:6c:04:bd:89:84:df:b5:
99:d8:df:37:b8:bd:1d:7e:fd:40:b1:53:e5:2d:f5:45:13:15:
0a:29:65:7d:4a:60:ab:ca:b2:93:3d:b4:72:b8:9c:3d:fd:05:
96:51:f8:91:9a:c4:df:94:99:fc:4f:5d:e9:d9:64:7f:7d:51:
6c:9b:ec:39:98:a0:84:d1:b4:bd:7e:cb:76:54:21:fc:59:6b:
11:0c:39:f6:14:68:70:24:59:df:fe:ca:82:a3:a5:bb:49:e9:
c3:1b:b6:49:86:d7:18:bb:54:28:b9:50:d2:11:5e:82:a9:41:
9e:18:6f:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTR0xNSbWaK9pPg3buTFq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjA4NTQ1Y2E3MWM1NDk3ZjlhNDQ3OTVhMWMwY2E4YzRk
YmE5NjEwHhcNMjUwNjA5MDYwMTEwWhcNMjUwNjEwMDYwMTEwWjAzMTEwLwYDVQQD
Eyg2YWI0ZWQyZDgxYWIzYjM5YTQ4YjQ1MTM4YjliMjg1NWYxODExN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHlefCrzISQKfzmGD0ibSXkp8nqu
d10php2fjP0U0yoxsmLVDOtqky9SH1JiqsmrirMUijClpNdx058U8dbXXDPPY7X9
SRRAGiFFbPjOi9gIhUK4A1twdURdD+d1U0cC3yqcq4745f7DjpIYIoKSIkl/d4VG
KNZiqoq7jYSYVwFeqvDgVTxDQVblsxkPtFQv8ABJ0L1StbTAr/sNFVH5OU+OtW6f
jNTM1d1qKc3UXRKgjYVfbC5Ui6k+vUuWhRxojBp2BmRGHDuZQIYLx1M9J/fYXLpi
SWl8dTMR0sbBUNi1W3Kq4npSr4YlfMx4d0BkZJ4MgNxZxFHubW+yeFHzfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGq07S2Bqzs5pItFE4ubKFXxgRfwMB8GA1UdIwQY
MBaAFC8ghUXKccVJf5pEeVocDKjE26lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wZmVmY2QtMzYzYi00ODA2LWI5NGMt
ZGE4NWRlMTY2ODNmLzEvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wZmVmY2QtMzYzYi00ODA2LWI5NGMtZGE4NWRlMTY2ODNm
LzEvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3k8XFth
LY5CVJ7pfjnBnHAGbiYklni8/HLTjH/DRIeHatmui/UuI9jeRc/6gENaSgXcQhBU
vyU9orOBVDaUtUMAtGZDuMYRAfbDJkc/vAnpPljQtkSCkL+PTAi2nvvuLL1k1nXz
khPYx8d89udUTOUbcteYNJrrOHn6IJGHRqptNQ9DnJtCR8dsBL2JhN+1mdjfN7i9
HX79QLFT5S31RRMVCillfUpgq8qykz20cricPf0FllH4kZrE35SZ/E9d6dlkf31R
bJvsOZighNG0vX7LdlQh/FlrEQw59hRocCRZ3/7KgqOlu0npwxu2SYbXGLtUKLlQ
0hFegqlBnhhv5A==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:52 2025 by rpki-client