Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
File: LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json)
Hash identifier: FB2vU+hxSIe/Nq2IeWm0tbN2of3KcR5GvW8H0BSBNgc=
Subject key identifier: D8:99:C6:E0:D9:5C:E4:79:A1:30:04:A5:DB:1E:AD:D5:2A:7A:44:79
Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
Certificate issuer: /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Certificate serial: 019769CE7AE386A0CC7F4D831915663569E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
Manifest number: 151D
Signing time: Fri 13 Jun 2025 15:00:28 +0000
Manifest this update: Fri 13 Jun 2025 15:00:28 +0000
Manifest next update: Sat 14 Jun 2025 15:00:28 +0000
Files and hashes: 1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: jGM0SSnZX74Q0AkOgbC69vl8FpYiDfItDp2OvTJWTqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:7a:e3:86:a0:cc:7f:4d:83:19:15:66:35:69:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Validity
Not Before: Jun 13 15:00:28 2025 GMT
Not After : Jun 14 15:00:28 2025 GMT
Subject: CN=d899c6e0d95ce479a13004a5db1eadd52a7a4479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:91:ad:30:a6:1a:2d:c3:d3:a7:d8:65:d2:
dc:c8:50:e2:2b:5e:78:9f:9d:03:27:92:1c:8d:5a:
d0:cc:fe:e8:c4:e5:f9:5a:ec:7e:e6:56:b2:58:ec:
b8:d6:f2:82:a3:4a:bc:a8:5e:2f:72:b6:3f:49:a3:
8c:b6:c1:bb:68:89:f7:ac:bf:3e:58:c8:64:da:6b:
ef:e8:27:fb:7e:07:c2:f4:6f:a4:b2:13:fe:e9:bb:
40:c9:0f:71:d2:16:79:e4:78:9f:d3:01:59:ef:fe:
4b:0f:4a:40:30:14:5b:fd:7e:a9:3c:22:6a:91:18:
67:29:a3:2a:ce:9a:41:ad:9d:80:15:1c:b5:6d:91:
00:69:54:f3:0b:59:42:6b:6a:87:09:72:51:f5:65:
9b:38:82:fc:60:d1:f8:13:90:6f:d1:f8:3a:e8:fa:
f0:6b:2a:09:cb:c0:e2:a8:fa:a1:ac:d4:87:5e:83:
c0:cf:05:38:9c:30:0d:e6:23:29:80:4c:f1:99:97:
17:7f:67:1a:95:a4:74:f6:79:16:a9:63:1e:9a:e4:
e6:3d:c9:23:6f:02:7c:3b:5c:6b:ea:d9:d1:12:ae:
35:ce:51:dc:b1:fc:e2:83:b2:ca:91:14:a7:58:69:
24:00:56:eb:23:0e:ac:ed:1d:60:ea:b1:da:db:29:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:C6:E0:D9:5C:E4:79:A1:30:04:A5:DB:1E:AD:D5:2A:7A:44:79
X509v3 Authority Key Identifier:
keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0c:7b:b0:95:59:42:45:c8:6f:fe:4c:58:aa:26:42:b6:19:
68:29:17:0a:2a:14:65:d7:f2:d7:44:6e:f8:64:59:f6:06:24:
cc:5e:21:22:44:cd:db:10:87:10:c0:d6:18:05:a1:75:18:45:
d3:1a:06:57:f9:5a:41:97:d2:36:9f:39:85:f2:58:2c:bf:67:
1d:6c:78:70:96:82:ba:bf:e4:35:59:ab:5d:15:53:a8:ab:2e:
cf:e6:b8:fe:2c:94:5f:4e:10:a5:b2:c6:e1:c6:3e:9b:27:67:
33:53:5e:e5:0a:4a:40:65:ab:ab:6b:a8:a6:90:87:9e:00:9c:
4b:2f:df:f7:3b:51:f0:46:b7:f1:6d:40:76:3a:ec:93:1b:7d:
15:11:1b:f0:7f:7d:ce:4f:31:5d:ea:44:9e:58:08:46:2e:4e:
8e:0b:f2:01:63:3c:f5:20:7c:ce:85:82:ae:cf:85:74:90:05:
d7:3f:6f:84:29:37:08:a3:5d:3b:ee:36:5a:3d:ad:2e:c6:78:
4c:13:34:73:3c:14:53:0e:c4:44:a1:c7:c7:e8:db:53:7c:12:
0e:e5:cc:6d:e2:a8:fe:03:7d:c7:12:8f:9d:d5:a8:b2:36:e0:
70:34:8f:65:e4:81:94:76:14:6a:28:53:8c:3d:c8:6e:13:5e:
b4:59:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:33 2025 by rpki-client