Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier: fQXFfNUeYRWJ/mdonGO2lawF+O1nVSiYg5A86J7dWVw=
Subject key identifier: 0E:14:14:9A:E2:BA:03:70:2F:CD:32:2D:4C:97:B9:AA:C8:88:EF:B1
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 019738AB334249E9C77B68CB365CE1F17C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number: 1579
Signing time: Wed 04 Jun 2025 02:00:33 +0000
Manifest this update: Wed 04 Jun 2025 02:00:33 +0000
Manifest next update: Thu 05 Jun 2025 02:00:33 +0000
Files and hashes: 1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: EEcWHl3dHGMyEC50EDQ8oOrOUhPbQy/GImOz+FdNTvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:ab:33:42:49:e9:c7:7b:68:cb:36:5c:e1:f1:7c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Jun 4 02:00:33 2025 GMT
Not After : Jun 5 02:00:33 2025 GMT
Subject: CN=0e14149ae2ba03702fcd322d4c97b9aac888efb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:64:37:43:3f:ba:12:fc:99:9b:85:96:98:
6b:bd:54:3c:08:55:9c:ac:e1:25:19:e8:27:25:d9:
7e:72:db:8c:0c:2c:99:40:ff:fd:b9:ba:cb:55:52:
9c:c4:ef:9e:dc:4e:ff:c5:c0:a7:9c:a0:69:1f:b3:
86:d3:3c:57:d5:d0:f1:c8:de:a2:99:b0:a5:9e:29:
02:f7:82:c2:58:07:3e:7f:bc:f4:af:88:7b:d1:7e:
cf:6d:87:98:3f:c2:57:47:72:b9:9a:7b:46:9b:66:
97:98:1f:c6:22:4a:3b:9a:8d:48:f2:bc:6e:2f:87:
79:db:84:53:18:47:fb:e9:a3:fa:55:97:4b:bf:c3:
82:fb:26:75:59:70:24:ba:31:3d:72:a9:60:e0:7b:
c5:d1:68:7f:f5:cb:95:16:17:8b:3e:6a:e5:67:d5:
b8:33:0d:19:8e:f9:c4:30:13:51:a1:bc:f4:40:35:
dd:6c:ed:5e:16:02:08:51:82:50:04:0a:67:9e:1a:
2c:47:1e:34:24:f2:eb:27:55:38:f1:58:ff:e6:93:
e4:05:12:c0:9d:a2:c5:fd:28:1d:5e:24:98:ee:c3:
76:82:91:cb:c7:d0:ff:8c:40:b1:73:a1:3b:72:59:
5b:5f:27:1f:1e:92:eb:47:70:50:56:49:18:c3:a1:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:14:14:9A:E2:BA:03:70:2F:CD:32:2D:4C:97:B9:AA:C8:88:EF:B1
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:14:e1:d9:35:2f:48:2c:3c:53:2b:f5:25:37:d9:a4:e8:f3:
9d:cd:2a:38:06:8a:ba:96:7b:ee:41:96:11:ea:66:40:58:f1:
d3:52:ee:12:c4:03:6b:17:de:e6:5f:45:1e:e4:6b:ec:64:d5:
93:27:b5:69:23:a7:cc:bf:7f:be:a1:b6:06:e9:0f:8a:fa:8b:
e2:7e:e1:4a:4e:73:e4:57:22:42:fe:e1:0a:eb:e0:97:90:8c:
39:d2:72:03:1c:de:d8:b5:0f:f7:dc:a1:d2:58:40:74:62:ef:
d2:3d:43:e2:f9:a4:25:e7:98:a5:ee:11:0b:57:ed:c8:4a:b6:
44:f8:2a:70:8e:e6:2b:a7:d4:b4:b4:4e:65:e3:49:a3:51:43:
4b:24:12:1b:e2:81:24:5d:b1:62:9d:e9:22:8b:9e:9f:9f:20:
db:e1:3a:90:77:b9:2b:a3:49:bf:4b:08:f8:b1:35:71:25:1d:
fc:12:78:8a:2c:d7:f2:90:50:58:d8:78:62:7c:92:ed:1e:69:
e1:2e:6a:2d:f6:28:fb:fa:5e:09:8d:58:03:5c:27:4d:45:1f:
98:5f:f9:c9:0a:1c:15:01:3d:fc:27:d6:2d:cf:0f:18:e6:3a:
ff:bf:32:e9:6c:ae:dc:5f:bd:41:f6:ca:cf:4e:4e:0f:9a:8b:
55:e6:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:58:00 2025 by rpki-client