Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File: _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier: ZQlggK+0r96ZH6NyYbA0bFR6Geu0BcsE2a1fNDWnpOI=
Subject key identifier: B8:62:B0:50:27:DF:3B:B3:4D:1E:35:2C:E5:99:E9:F2:83:81:7D:AA
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer: /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial: 0197C8A744FD3245BD52BF55556ADF711153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number: 0569
Signing time: Wed 02 Jul 2025 01:01:34 +0000
Manifest this update: Wed 02 Jul 2025 01:01:34 +0000
Manifest next update: Thu 03 Jul 2025 01:01:34 +0000
Files and hashes: 1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=)
2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: B8dMkIdCUySpSE5Vlsq9SRyeCVS8nY+aGYeJfcj1eEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:a7:44:fd:32:45:bd:52:bf:55:55:6a:df:71:11:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
Validity
Not Before: Jul 2 01:01:34 2025 GMT
Not After : Jul 3 01:01:34 2025 GMT
Subject: CN=b862b05027df3bb34d1e352ce599e9f283817daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:6c:f4:d7:d6:a0:ba:f2:6f:03:aa:ab:86:
ec:33:7b:74:10:ee:2f:4d:32:39:a8:f7:e0:07:bf:
bd:38:26:8a:45:e9:d1:a0:3b:1a:f3:3a:97:29:6c:
72:14:f5:ed:76:06:c9:8a:87:3e:66:e6:61:c7:86:
08:bf:c6:08:73:a5:8b:02:2f:a9:06:c3:0e:2f:1d:
7a:17:08:ea:e5:3c:e1:d0:93:a9:49:77:25:10:ad:
1a:e9:57:81:23:78:9b:85:d8:13:64:11:37:3f:23:
39:89:95:7b:8c:b7:15:a8:ef:13:ca:76:c7:c5:6e:
b1:17:7d:85:b9:dc:14:97:d4:12:ff:07:7f:86:3e:
85:33:31:62:92:6f:76:d6:a5:95:35:62:3a:e8:53:
cb:59:34:9d:a8:d7:69:a1:ef:4d:8a:52:3b:84:cd:
5b:38:7f:f8:42:3f:7f:65:29:ff:76:03:a4:b8:33:
b3:23:c8:79:04:f0:ef:25:64:47:15:14:3b:45:54:
22:c6:f2:53:a6:c4:25:04:3c:46:ae:3d:03:bb:22:
1a:28:ef:0e:64:32:cf:79:5b:4d:f1:41:eb:b1:36:
ce:20:58:09:67:0d:09:1a:4d:41:1f:b4:c2:be:13:
0a:09:58:1b:52:8d:14:6f:d1:e7:21:7f:ae:92:c4:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:62:B0:50:27:DF:3B:B3:4D:1E:35:2C:E5:99:E9:F2:83:81:7D:AA
X509v3 Authority Key Identifier:
keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e3:6d:e3:46:e2:68:41:81:a2:73:24:36:6a:d5:8b:53:71:
96:06:26:10:5a:1c:0d:f3:4a:35:29:23:9e:c6:4f:82:0a:7d:
88:87:61:bb:2c:ee:3c:23:df:67:1e:91:47:6a:37:38:24:4f:
9c:e7:ee:2e:f7:f9:75:f7:42:1c:79:75:ef:07:71:36:86:0d:
a8:dc:ed:4e:3c:d9:20:ce:b2:9b:2d:3a:8a:78:90:7d:7f:bc:
e3:17:4e:4c:cd:6e:bf:f3:c1:b0:9e:68:87:a1:91:29:58:35:
ac:0c:1c:68:ae:04:9e:0a:89:35:e4:c4:a4:63:8d:0e:1c:42:
a1:8c:43:b3:01:2d:42:63:dc:fb:48:ee:8e:35:07:cb:f7:22:
db:ed:5a:01:98:d9:0e:d8:ac:a5:34:c1:4b:5c:41:c0:96:e9:
8d:9b:99:e8:83:22:b8:5f:c2:d3:03:92:eb:6b:89:2e:23:a3:
28:14:82:bf:f6:7e:31:6c:2e:7d:a1:cf:91:81:bc:56:76:3c:
e0:35:7a:00:63:28:22:3b:d7:fc:62:a1:a1:f0:4b:da:4e:00:
29:1b:1f:3f:f6:5e:be:1b:10:c3:d3:db:c8:e8:03:45:c5:93:
4c:bc:ff:b3:7a:e1:16:f5:17:86:33:8c:d1:50:78:9b:cf:64:
c9:78:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:38:30 2025 by rpki-client