Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: K7MdBK3N0rh4NPdZaUSfKgV/DbW9Al+DCPDZ2lRqQRw=
Subject key identifier: BA:D3:13:17:81:88:3A:4A:11:CA:8B:6E:8C:F1:49:AB:44:37:03:9B
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 0197733FF2DFDEB30D77F35AD15AED3936E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 0590
Signing time: Sun 15 Jun 2025 11:00:59 +0000
Manifest this update: Sun 15 Jun 2025 11:00:59 +0000
Manifest next update: Mon 16 Jun 2025 11:00:59 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: zO+WpmWaCCkk9TV2gjiisxkZL9eAjaS8wti3bZX96ww=)
2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:3f:f2:df:de:b3:0d:77:f3:5a:d1:5a:ed:39:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Jun 15 11:00:59 2025 GMT
Not After : Jun 16 11:00:59 2025 GMT
Subject: CN=bad3131781883a4a11ca8b6e8cf149ab4437039b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:d0:79:f8:98:01:77:2d:03:b2:48:8f:02:
8f:d1:09:62:79:bb:68:70:86:b2:c7:da:9b:58:d8:
65:77:26:0e:6e:8c:a7:7a:21:28:e7:2d:58:8d:f1:
36:f9:1e:54:2a:02:81:39:5c:80:b7:07:ac:1f:21:
37:c0:5f:d0:d4:f4:40:f5:05:73:17:1f:6b:65:a7:
5f:eb:7c:dd:ff:df:c7:b6:de:78:c4:50:1e:34:59:
90:eb:bd:e7:0b:6c:d4:c5:55:5c:50:5f:16:06:4e:
c5:46:7b:c3:54:02:f8:ea:c1:61:ea:e9:dd:5c:c9:
8b:32:a4:11:d6:97:20:d1:cb:7e:a6:4c:8b:d8:0f:
14:25:b6:47:a3:42:e2:b1:2a:58:3e:7c:29:c3:72:
58:9c:03:9c:fa:bf:ec:a3:08:3e:3a:e7:a0:e2:8a:
fd:c4:87:ed:d7:9f:fe:16:58:ea:7b:0f:50:31:a7:
b8:fb:ad:b7:f8:ae:01:7f:84:bd:7a:62:47:48:4f:
28:a2:b7:b9:d7:ca:08:68:33:66:ae:a9:49:65:8a:
61:e9:02:bb:51:6a:e4:90:17:9a:d3:c0:25:5a:ee:
ed:80:95:01:b4:90:5c:3a:92:89:7a:f4:cd:35:49:
92:04:88:a6:ac:9d:9b:f6:fb:97:99:cd:79:2a:d9:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:13:17:81:88:3A:4A:11:CA:8B:6E:8C:F1:49:AB:44:37:03:9B
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:54:33:96:fe:70:bb:31:3c:fa:77:c5:cb:cd:9c:85:9d:dd:
17:3a:3b:dc:1f:79:56:89:d2:cf:55:d3:2a:80:3f:ae:6a:89:
06:f4:23:45:45:0d:38:2d:75:97:f2:70:77:fa:26:43:fe:be:
0e:07:fb:42:09:17:48:81:ea:15:ec:1a:e7:d1:01:6c:b5:ac:
49:cd:3c:f4:22:6a:54:c4:84:77:0b:ad:62:5d:1d:e9:6b:98:
6e:cf:51:6b:d1:01:a3:ff:2f:62:02:14:3d:57:c4:2f:43:fe:
6a:dd:b9:6d:be:f5:f4:0f:d0:76:a0:0f:2f:ac:10:46:2f:13:
91:a3:db:75:0d:a3:fd:ac:f4:11:77:bb:50:72:f8:4c:51:de:
89:e2:a7:45:00:10:13:cb:c9:6c:ce:92:29:fd:ff:5f:bf:08:
e1:de:07:c2:bf:f1:13:a9:75:ad:09:83:68:17:31:2c:13:c2:
3e:cb:ee:e7:5a:2e:6f:f4:06:e9:99:7b:79:90:84:2e:fa:fc:
5d:84:ae:e6:62:d7:82:66:75:89:3d:f5:d9:f0:b7:3f:b5:05:
c1:54:56:e8:99:63:8c:bc:a8:ec:80:e6:25:0e:e5:78:c4:c1:
31:f1:b8:37:c1:79:89:1b:20:5d:98:19:09:f8:e0:ef:12:93:
09:b1:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:01 2025 by rpki-client