Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
File: lYj7Sw-weytS4w2SGYmPKM-8mi0.mft (raw, json)
Hash identifier: 12i0Ad+AdNsdFm/+B8MVANhzvEBZOkX1hMxyrg0pR6w=
Subject key identifier: 98:09:5F:77:9A:4B:89:CF:24:97:4C:D6:97:4E:7B:44:B4:16:D1:FB
Authority key identifier: 95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D
Certificate issuer: /CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d
Certificate serial: 0197759C65766EB505B6E701D3C69147CE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
Manifest number: 1310
Signing time: Sun 15 Jun 2025 22:01:13 +0000
Manifest this update: Sun 15 Jun 2025 22:01:13 +0000
Manifest next update: Mon 16 Jun 2025 22:01:13 +0000
Files and hashes: 1: cpaYv-AQ-t9zhgKKXsvKBzFcSaQ.roa (hash: QH8X2hDISDdQVFPt9W1N705nATkeCHCrQhlKJMRWx8A=)
2: lYj7Sw-weytS4w2SGYmPKM-8mi0.crl (hash: dJcy+DRnXH2s1oGy2gGLdC4hE78etDGco2R3Eczd2Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9c:65:76:6e:b5:05:b6:e7:01:d3:c6:91:47:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d
Validity
Not Before: Jun 15 22:01:13 2025 GMT
Not After : Jun 16 22:01:13 2025 GMT
Subject: CN=98095f779a4b89cf24974cd6974e7b44b416d1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:42:c3:0c:5c:0c:e9:1c:cf:10:f8:b7:53:
2b:f9:20:96:d8:21:78:2f:0d:ce:37:c2:10:3b:0e:
84:17:6e:cd:60:79:cd:72:22:35:c5:09:88:f9:d4:
a7:99:75:8f:f4:5e:c4:61:be:5e:2b:94:2c:c0:15:
1e:4f:74:0a:2a:76:c3:dc:22:63:fc:cb:0e:a5:73:
c2:ca:5b:9f:2f:0f:3e:97:24:b5:e2:3a:f0:5b:61:
7a:a2:f7:ef:1f:65:93:4b:68:1c:ed:56:96:16:fb:
fa:ad:e1:c5:f8:a8:31:fa:53:1d:5f:6f:31:1b:fd:
96:14:05:cf:8a:c9:fc:bb:94:51:26:5b:f5:55:38:
12:6f:9b:12:fc:85:ef:55:be:54:1d:7c:36:34:c1:
09:24:13:0c:70:50:f7:47:a3:d8:de:35:f0:d7:08:
ef:26:02:bf:dd:49:f7:ec:a4:68:9a:99:3b:09:d4:
d8:eb:5d:7d:15:67:a6:f8:f0:29:70:db:5b:a8:a1:
38:e9:49:72:a2:4b:75:b2:0f:a6:62:64:b6:fa:26:
2f:e8:f1:b8:be:57:73:d5:d2:13:dd:16:6a:86:59:
91:d8:d2:85:65:e0:58:23:a1:92:d1:61:17:6b:14:
c0:94:22:cb:21:5b:a2:dc:34:c9:f6:18:d3:e3:8d:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:5F:77:9A:4B:89:CF:24:97:4C:D6:97:4E:7B:44:B4:16:D1:FB
X509v3 Authority Key Identifier:
keyid:95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1e:87:33:b7:d3:bd:1f:55:c7:0a:a6:8a:83:b2:f6:e5:c8:
5f:74:81:ad:91:f9:f5:56:6d:52:af:71:29:84:b9:78:7d:25:
12:10:be:5a:86:d3:11:58:2e:ac:5d:52:05:6c:e2:ee:18:14:
79:29:c9:d4:48:ab:29:ca:89:f8:be:5e:5a:03:d0:ae:a5:62:
7a:2d:df:53:f1:ae:bc:98:bc:54:28:ae:82:1a:1d:78:6a:f3:
36:3d:a3:ca:1d:3f:8f:69:46:02:f6:9a:a5:6a:a9:04:f3:04:
78:e9:ec:b3:f7:99:05:43:a9:b3:9a:c6:b4:15:f5:e7:37:dc:
22:80:26:f7:fe:2b:f4:fa:b4:6d:fc:c5:5b:10:43:78:54:2e:
be:6f:c8:f8:74:f2:9e:37:84:93:b8:15:40:f8:56:19:11:89:
c0:a5:c9:e7:59:04:28:ab:a9:60:12:05:db:3a:df:be:9d:0d:
3f:f4:d2:46:13:84:8c:19:78:96:4a:d0:2d:98:0b:11:90:66:
6c:8c:7a:70:8b:7d:c6:c3:72:19:7d:8c:8f:32:82:ac:a6:68:
e4:ac:5d:e8:4e:38:ae:1e:20:8b:8a:3f:02:26:8c:67:b1:fb:
f3:28:9d:ef:e9:22:4f:ca:4c:09:45:3b:ed:dd:27:f6:e9:fc:
af:bd:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:23:30 2025 by rpki-client