Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: CB1DZWgA+ohNnamk+/M/ZYvoN+4aceoKO+XtS3o/S2w=
Subject key identifier: E8:FE:AE:2B:6C:1B:E9:72:5E:50:DA:34:E0:C8:69:F5:BC:18:F5:DA
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 01967C0E7EDC5D810C4760F2C0004CB1B926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 0510
Signing time: Mon 28 Apr 2025 11:00:46 +0000
Manifest this update: Mon 28 Apr 2025 11:00:46 +0000
Manifest next update: Tue 29 Apr 2025 11:00:46 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: r6Rj3/ULm1epwN1WcQCj/8NmHCSUJqmOwafUXdDxg4o=)
2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:7e:dc:5d:81:0c:47:60:f2:c0:00:4c:b1:b9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Apr 28 11:00:46 2025 GMT
Not After : Apr 29 11:00:46 2025 GMT
Subject: CN=e8feae2b6c1be9725e50da34e0c869f5bc18f5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:9a:c7:ef:00:00:cd:15:b0:fb:7f:0c:05:
fb:81:b4:8c:49:fc:3b:d4:cd:fa:44:cd:7b:35:05:
60:40:04:9b:92:80:b8:a5:71:18:8c:9b:d6:15:5e:
36:d8:80:39:ae:6b:15:11:50:79:dc:d2:ab:08:e9:
af:2a:d9:d7:5b:54:0b:41:73:1c:04:d8:83:8e:ca:
40:a3:5e:1c:de:de:a2:bf:b1:63:2e:93:44:3c:9c:
a8:18:ff:e0:40:2b:e9:92:4f:59:26:7b:b1:7e:6d:
ae:3d:6e:b0:03:fe:19:eb:a9:60:99:52:c9:45:5a:
80:21:1e:ae:66:08:05:e0:9c:f4:5a:d1:76:11:ae:
0d:ad:a4:18:00:bf:ce:5e:9b:5a:c8:1c:87:b3:8f:
38:12:a5:e4:2b:fc:2d:64:6c:7b:b6:fb:4e:da:a6:
ba:7f:97:2d:bf:70:8e:81:d4:37:a6:d0:7b:98:15:
9d:98:b9:08:32:fb:24:94:1b:95:c7:50:8b:ce:98:
6b:60:3f:a3:e1:54:c3:fe:ba:ac:a9:73:cd:9f:52:
7a:52:b1:9c:54:1d:3e:3f:48:cd:5a:58:90:eb:93:
87:f3:b6:03:a8:85:ab:24:94:39:dc:5c:04:b5:09:
f1:48:3c:f4:ba:07:d2:e8:27:6d:37:07:b6:d0:4c:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:AE:2B:6C:1B:E9:72:5E:50:DA:34:E0:C8:69:F5:BC:18:F5:DA
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c1:7e:f1:f7:f3:2c:59:99:d4:c2:3a:43:74:4c:4d:df:c9:
24:58:5f:49:f2:e1:3d:59:36:d7:44:04:6f:a2:68:0c:03:f4:
94:38:90:48:73:94:e2:37:62:e2:fe:17:94:7a:eb:8c:0b:a0:
0e:b2:4e:0b:c1:63:ef:22:b4:79:7a:b7:9d:a6:e9:86:58:08:
ca:f0:e9:10:02:18:ed:b7:f4:38:73:98:19:d3:e7:63:fd:cd:
d1:10:c3:8b:d5:32:5c:89:4d:63:12:07:b0:3e:dd:92:4e:8d:
76:2d:ec:13:c6:d9:20:28:f7:bf:05:8c:5d:a9:f5:1b:f4:bf:
e8:16:a7:da:79:be:99:6f:c2:a7:7f:fd:d8:b8:f4:1d:ee:80:
08:f1:71:f1:32:a1:25:94:ed:9d:9a:6f:4d:7a:e4:2c:7e:8d:
cd:2d:00:ff:ec:e6:7b:66:e5:e4:94:36:e8:1d:d6:04:52:57:
49:3b:9d:75:42:5b:95:ae:a5:1c:fd:ca:01:60:94:cf:30:cb:
df:5e:a7:0e:7b:1a:54:cd:fc:77:fe:c1:8f:eb:2e:d8:56:9a:
93:02:b0:5e:ce:a2:74:c5:49:8b:7d:15:17:63:88:3c:34:26:
2f:51:69:21:a7:45:a4:fd:9b:cf:bd:eb:7d:90:a0:4a:0d:dd:
42:62:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:16 2025 by rpki-client