Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: CEtXSmiV7tdaQodUh0++6965IrMywZSBpfVV1nH9VXI=
Subject key identifier: D4:F5:25:EA:96:79:CE:B7:6E:36:0D:B0:D1:1E:9B:08:52:03:67:94
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 019773AD9E1D37253526D5A6B942BEAA97B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 1596
Signing time: Sun 15 Jun 2025 13:00:47 +0000
Manifest this update: Sun 15 Jun 2025 13:00:47 +0000
Manifest next update: Mon 16 Jun 2025 13:00:47 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: 0Rb70cbfGUYnIHPUCnUYgHuVpeh3wuutnDHtnqW0Ea4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:9e:1d:37:25:35:26:d5:a6:b9:42:be:aa:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Jun 15 13:00:47 2025 GMT
Not After : Jun 16 13:00:47 2025 GMT
Subject: CN=d4f525ea9679ceb76e360db0d11e9b0852036794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:99:ea:95:af:5e:1e:df:32:e5:05:51:f5:
35:ff:7a:b9:66:0d:2b:2c:3e:5e:c2:64:c7:8a:f0:
64:38:8f:8a:5b:f4:29:64:83:76:00:1d:bd:13:dc:
5b:21:f3:5b:97:80:30:7e:f6:32:53:c8:16:c3:e9:
7c:75:14:4d:21:ad:82:9e:5b:d2:de:bb:ba:cf:50:
07:94:f7:a0:a0:f3:fc:91:37:8f:81:92:9e:7c:97:
1b:dc:87:40:b7:8c:03:91:95:46:84:cd:46:13:1b:
11:2a:33:80:2b:21:ef:46:2d:da:03:98:94:dd:11:
be:3e:80:e9:06:c3:a5:4c:3c:51:04:a0:24:46:05:
c2:94:80:9f:33:4c:56:4b:e1:a5:f2:39:cf:f4:64:
63:d8:36:ad:07:ed:44:63:36:39:d3:3b:aa:46:5f:
a9:5d:2d:20:f2:83:62:eb:58:07:a2:9d:53:c2:ea:
92:03:3a:f4:d7:f1:8a:a2:ab:d4:4b:b3:dc:38:94:
f8:f2:6d:5d:6c:6f:5d:0a:08:66:39:90:bd:79:91:
86:9c:e2:28:86:0c:94:a6:c2:ee:b7:d8:f5:a9:8a:
20:0b:12:3e:2a:04:5b:2c:93:b1:c6:bd:f1:91:85:
a0:57:0a:17:8f:d6:6d:26:bf:47:5a:18:8f:94:34:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F5:25:EA:96:79:CE:B7:6E:36:0D:B0:D1:1E:9B:08:52:03:67:94
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8c:2b:73:fa:c8:9c:6d:d6:bb:18:17:08:50:4f:b2:96:27:
20:19:01:88:29:3e:dd:0e:2f:85:2d:85:2a:fc:ea:63:53:bc:
46:c7:57:6d:83:63:45:d8:fc:f0:66:f5:dd:64:86:20:ba:33:
25:d2:f3:69:c5:a0:d4:c8:19:ab:fc:6f:d7:17:47:a1:c3:42:
e4:ba:48:33:f1:0b:e5:f1:21:74:b0:9a:e4:30:1f:3d:ff:fd:
c8:d0:16:40:08:97:e0:08:52:78:57:95:92:fb:6d:96:49:45:
b9:80:b5:34:d0:ac:2d:61:aa:84:53:e2:cb:31:56:7c:83:d1:
68:96:c5:f0:f6:18:b3:5f:14:ef:02:10:95:c6:74:94:51:72:
b4:0e:9f:8c:dd:4a:37:f2:56:11:56:00:0c:4c:39:0d:43:b9:
d0:e4:01:04:ff:d9:4d:36:39:55:7f:d9:be:d3:67:dd:ce:bf:
f7:6b:5e:9b:97:65:bc:81:3d:87:ec:e0:35:c5:03:46:ac:c3:
3f:2e:2d:53:70:41:9d:5c:56:bc:97:89:fa:26:6f:48:d4:95:
f3:94:be:a8:27:78:1d:17:9b:62:40:dc:59:19:04:5e:ac:0a:
dc:8f:37:12:1a:4e:f0:06:c6:eb:99:78:f1:ec:99:c8:cf:f8:
53:03:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:03 2025 by rpki-client