Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: 07cSKoOJOBvthWfgIheGoKg6+8Z88HyzslX5j0jAyfs=
Subject key identifier: AA:5E:BE:12:B7:FB:6E:B5:79:C2:31:26:9E:2B:B0:D3:ED:2B:A1:75
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 01974EFC60A888ECF93F6079092B97D3236D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1589
Signing time: Sun 08 Jun 2025 10:00:51 +0000
Manifest this update: Sun 08 Jun 2025 10:00:51 +0000
Manifest next update: Mon 09 Jun 2025 10:00:51 +0000
Files and hashes: 1: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (hash: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=)
2: IPPrratubHXAQd-ifZngdpirX5c.roa (hash: I/yflOCWYAytKofslD/06DhDQeYHbVXIxz2aV+s2uxk=)
3: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: f3Y5SrEOpcDzjf49DUFJCThf7gnfgJ/vqNA3NfNiwLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:60:a8:88:ec:f9:3f:60:79:09:2b:97:d3:23:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jun 8 10:00:51 2025 GMT
Not After : Jun 9 10:00:51 2025 GMT
Subject: CN=aa5ebe12b7fb6eb579c231269e2bb0d3ed2ba175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:34:aa:31:a3:9a:51:5e:9f:87:dc:41:57:
18:04:3e:e9:2b:30:5e:77:76:20:3c:36:4b:41:6a:
fd:8d:0d:de:24:96:03:15:d8:46:43:6c:c5:38:7c:
be:e2:f1:86:59:b8:2f:40:1a:db:3e:7d:9c:0b:77:
46:9f:ac:d2:41:97:ca:13:2e:89:b9:f5:7f:76:a5:
a8:12:9e:ed:29:40:1a:d5:50:5c:17:04:70:b7:f6:
d1:a2:72:e3:42:e0:42:24:aa:9f:58:89:29:9b:b8:
ee:ff:ad:be:0f:cb:7f:ca:1c:04:b3:75:5d:80:06:
1f:0d:f6:7a:92:d1:66:ca:50:14:30:9a:bc:fd:bd:
15:8a:a9:42:2e:cc:8f:7d:84:47:e6:db:62:d3:ec:
d8:2d:80:71:86:c3:1b:2e:79:9c:f7:3e:6a:fd:42:
89:7b:79:1d:7f:9c:6d:0e:93:54:b3:87:7b:b0:77:
4e:6a:ff:38:be:31:50:b8:b1:44:27:37:cb:94:e8:
3c:8c:df:c3:60:f9:28:6a:77:a1:f3:76:ad:15:50:
29:a2:ee:47:75:e6:09:5b:f0:2f:cb:96:6b:42:8a:
a6:23:0c:2c:e1:de:eb:14:c3:2a:b9:df:f2:4b:e2:
f6:23:3d:a0:b0:73:21:38:38:93:54:fe:ad:e2:c5:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:BE:12:B7:FB:6E:B5:79:C2:31:26:9E:2B:B0:D3:ED:2B:A1:75
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:7f:b5:8e:bc:56:ad:80:87:0f:27:37:46:6b:81:33:b1:
56:47:34:88:3a:a0:e9:1b:f9:3c:b6:02:f4:73:8d:7f:c5:52:
49:b3:e5:c4:be:6c:37:3f:ee:d5:b3:e1:e7:e0:fb:ad:2f:11:
eb:8b:58:3d:9d:a2:8d:7a:ff:7b:72:53:4f:0c:6e:2a:69:ce:
18:9e:5e:55:df:17:53:b7:dc:41:c6:a4:31:c2:6e:50:0f:51:
ff:62:8a:0e:17:de:7c:92:2c:c1:f9:bf:a0:41:c4:e4:b3:54:
9c:38:b7:e7:31:d0:d6:8e:4d:ed:6b:fc:24:ef:76:0e:27:ee:
bf:cb:12:33:80:e3:68:a9:08:c9:a1:07:af:00:46:d8:1c:33:
e6:68:0d:79:e7:1a:cc:e7:24:34:61:cd:f9:b0:fd:2f:fa:68:
d2:b2:4b:50:3b:7e:44:6d:f7:a4:52:c1:29:bb:dd:68:38:24:
9a:73:b5:b0:ab:4b:f0:c8:e0:6f:3a:07:8c:b3:bb:af:4c:56:
c3:e4:ec:1f:23:eb:82:af:40:61:4e:7f:b4:52:59:f3:d9:73:
08:8b:9c:a2:8d:5a:50:29:ff:38:de:13:9b:ca:4e:5c:74:4a:
9b:fc:97:d8:b6:fa:57:60:ca:89:95:32:fc:bb:b5:39:28:82:
8a:28:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:59 2025 by rpki-client