Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: nxJ++A//Huj2CqJcbo2uDi4dvJx5eMb+7TiL4EIjGKE=
Subject key identifier: B5:2F:96:88:DF:D0:68:EE:E7:4D:C2:B4:D0:FA:09:08:8D:85:14:BE
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 01989F03C44EFC7E24CB0283CDA8F2B2C00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 1631
Signing time: Tue 12 Aug 2025 16:01:20 +0000
Manifest this update: Tue 12 Aug 2025 16:01:20 +0000
Manifest next update: Wed 13 Aug 2025 16:01:20 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: IxArL1UQFZ50cfDGEfJVuKPRzDJHcoSM/Fo73ZtGg+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:c4:4e:fc:7e:24:cb:02:83:cd:a8:f2:b2:c0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Aug 12 16:01:20 2025 GMT
Not After : Aug 13 16:01:20 2025 GMT
Subject: CN=b52f9688dfd068eee74dc2b4d0fa09088d8514be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:33:ef:cb:2d:55:07:c1:23:50:11:4b:cd:
69:5c:6c:85:7a:f0:6b:3f:ed:39:2c:92:95:3c:ed:
32:d1:ff:8a:fa:1d:8f:27:d6:64:94:18:20:1b:f1:
59:4f:6d:b8:b1:5f:f5:24:c9:75:17:b0:5f:09:37:
76:13:e6:c6:9c:78:85:16:5f:96:e1:97:3b:64:2f:
89:69:92:80:b2:b2:29:ac:5a:bd:bf:5b:e8:fd:a3:
95:c6:4a:60:c3:55:38:20:6a:c7:53:69:e4:e3:eb:
eb:f9:2f:cd:e6:53:d0:20:51:de:de:15:a1:ed:de:
a6:f1:2e:2b:49:ef:ee:f9:22:fc:2a:30:a1:82:62:
f0:5a:ad:bd:6a:32:ec:4f:06:91:06:43:73:2a:21:
6c:79:1e:0f:3d:86:db:bc:1f:cd:20:ea:9a:fb:06:
ff:34:c0:7a:78:f2:c3:4b:62:ac:55:b7:73:25:dd:
d7:34:63:c0:bd:c1:be:52:49:5a:74:73:22:d8:fb:
bf:1e:c1:7e:7e:0e:ad:b6:a0:24:ee:13:b6:6e:9c:
e5:40:84:51:ce:bc:ce:89:3f:fb:68:67:69:bc:e2:
59:ce:0b:50:10:a7:4a:3a:c1:75:18:82:62:5f:92:
5e:4a:34:96:07:ff:21:de:59:31:61:01:25:88:12:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2F:96:88:DF:D0:68:EE:E7:4D:C2:B4:D0:FA:09:08:8D:85:14:BE
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:15:6b:c3:b4:fd:6b:7c:99:8b:f0:97:15:87:2b:7b:74:eb:
c5:f4:f7:6d:0f:ee:a9:65:5d:f9:1d:01:2c:37:aa:39:d3:76:
f2:04:45:ab:cf:06:ee:c4:04:5a:a1:57:ba:48:9c:85:e1:80:
65:d3:37:f9:56:46:44:fa:19:85:36:32:5b:5d:fb:d4:8d:39:
f2:b9:ee:94:2a:40:b6:8d:b2:8a:96:21:e2:83:95:70:dd:c0:
df:a8:e8:5a:9a:2f:9c:b6:fe:7d:19:24:71:88:58:e0:15:2b:
35:28:15:72:88:7d:66:44:41:36:fd:e1:4f:66:93:32:db:1b:
86:6b:0e:e1:24:b4:2d:7e:38:91:d4:65:f5:38:38:5f:ca:57:
82:8b:9b:b2:c6:34:b1:1a:a1:11:4d:73:43:6d:61:0a:ad:e5:
c1:14:1f:9d:cc:df:d0:43:40:9d:07:5a:f8:85:ce:44:18:23:
37:16:31:2e:cf:a8:5d:d3:5e:2a:26:ea:f2:f9:4d:a0:ee:b8:
e8:ec:b4:0c:5c:df:c5:56:a4:d0:06:ef:58:98:94:7a:13:d1:
f4:5b:5d:5a:ba:21:fc:3f:3f:3c:45:51:26:79:c0:bd:ad:56:
86:d4:fb:f0:a9:ef:02:5a:f1:22:d8:1f:44:6b:68:57:eb:6c:
9a:c6:36:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:35 2025 by rpki-client