Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier: AlSGvIhEsrFRmS0TAl1E1YIUI8hWadyeJntaXDPnpsk=
Subject key identifier: D6:7C:4C:56:5F:BB:1B:CA:50:20:25:17:70:5E:47:FD:2E:C4:A1:B7
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 019880F93A557BA67BD8928AFD3A63569A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number: 1623
Signing time: Wed 06 Aug 2025 20:01:13 +0000
Manifest this update: Wed 06 Aug 2025 20:01:13 +0000
Manifest next update: Thu 07 Aug 2025 20:01:13 +0000
Files and hashes: 1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: vA3TRcqikPQ4PNvUal4T1MbhmrjlVIdizwhFfckRXmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:3a:55:7b:a6:7b:d8:92:8a:fd:3a:63:56:9a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Aug 6 20:01:13 2025 GMT
Not After : Aug 7 20:01:13 2025 GMT
Subject: CN=d67c4c565fbb1bca50202517705e47fd2ec4a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:fd:9a:e6:40:31:f0:56:6a:01:c2:73:38:
f3:50:a5:73:37:ec:f1:c4:0a:07:09:b4:9b:53:40:
4b:5b:53:0d:9b:3b:22:ec:48:a8:66:cf:69:8b:6b:
ad:5e:3f:48:1a:38:06:fb:81:85:c5:3c:88:56:a7:
08:94:10:c3:b9:70:e1:91:48:94:3b:47:aa:eb:ad:
b4:ea:1f:c1:1b:db:4d:ae:d3:f7:4f:cd:6b:38:83:
df:ef:c8:1a:a8:30:48:03:24:c6:5d:36:19:ab:61:
cd:5d:10:7a:5f:1a:77:aa:6e:29:b5:20:78:a7:89:
d4:39:17:f3:23:1d:f6:1a:c3:1c:f3:91:15:75:13:
a6:66:12:30:e2:8e:d1:be:6f:4e:b1:37:ce:7d:d1:
24:02:4a:e2:ce:5e:96:7b:3a:8c:cc:7a:a3:2d:23:
78:7e:35:22:7e:8e:00:eb:32:3e:be:a6:63:d5:5e:
8f:44:57:99:a7:e9:53:e4:dc:b1:81:c4:d2:ed:b2:
84:0f:1f:49:06:df:39:4e:dd:f8:aa:a9:c2:fe:a2:
e8:9d:8a:df:2f:0b:ee:a3:9a:50:5d:64:e4:9f:30:
c1:b3:b1:a8:6b:f2:16:32:e6:ae:b1:8f:73:51:08:
f5:eb:7f:9e:8e:c5:52:74:87:64:d4:bb:34:a4:62:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7C:4C:56:5F:BB:1B:CA:50:20:25:17:70:5E:47:FD:2E:C4:A1:B7
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8a:a4:db:22:92:06:37:e3:4e:a1:d2:a3:8b:a2:40:a4:41:
07:9f:77:06:35:a6:95:dc:85:70:5b:dc:5e:31:ce:00:16:cf:
74:7a:35:ff:e3:25:86:85:71:dd:c7:18:5b:ea:e5:9e:6a:4a:
65:b3:a0:55:7b:42:d7:c8:c6:92:6d:22:33:98:63:36:8f:34:
48:73:f7:9b:9a:0f:5f:02:90:c5:8d:5a:59:0f:55:57:62:bc:
39:73:4a:7e:52:89:16:d0:8b:ca:d2:14:5d:6c:37:24:50:e9:
5e:38:af:85:aa:9f:57:ec:95:67:b9:c8:df:e9:aa:a2:e7:f2:
d6:07:4b:f7:22:11:2a:3c:a7:29:8d:35:7f:3c:88:1b:72:58:
27:6b:ef:c5:84:a1:c8:fc:22:ae:e4:ee:f0:29:3e:d6:fe:a9:
ad:89:a6:c9:0c:c3:98:e3:5d:ef:c7:21:13:ce:7c:b5:16:e4:
db:22:96:84:fe:c3:7e:79:9a:9a:76:07:84:cd:b7:14:23:10:
19:cd:9a:1b:98:4f:52:3d:77:95:03:76:1d:ae:43:ab:d8:12:
61:b6:9e:36:79:b3:6e:6f:f0:21:88:30:f0:e8:3e:e1:12:92:
78:79:2e:51:ab:b9:40:a1:d9:ee:f6:3d:16:b7:be:67:76:0f:
65:d1:5c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:14:16 2025 by rpki-client