Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: XrMqOEu8ucN9a7pqOb27nnJIN4tB3VpSMUioORrTEl4=
Subject key identifier: 3D:CE:0D:CC:19:32:D8:53:CD:18:81:10:DA:EF:A0:27:18:8C:F1:D2
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 0198D51624AC43F00D0616EA016C32FFEF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: Kb1hHSMwvwnBVQpNYUxA2piSCWh0Wmx38I7XhIV6yRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:24:ac:43:f0:0d:06:16:ea:01:6c:32:ff:ef:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=3dce0dcc1932d853cd188110daefa027188cf1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:c0:08:93:b6:78:b8:e7:3d:ba:3a:b4:de:
d3:76:eb:e5:a7:57:02:b9:cc:27:55:92:f3:f7:27:
d1:84:76:d4:61:9f:44:19:9d:0b:b3:bc:12:67:f3:
73:c6:ea:f3:b2:f7:4f:b4:3c:f1:56:05:32:03:55:
f7:6f:0c:79:99:cc:b8:0a:66:c1:43:6a:a8:bd:bd:
8d:0e:ed:c5:7a:74:1d:9f:c5:0b:8a:5a:e2:e1:92:
77:89:19:9d:2f:8a:81:80:99:d2:a4:06:fe:4f:f4:
df:53:50:c3:c9:14:83:2d:24:11:9f:5e:b7:26:e8:
38:7e:65:17:9a:70:93:27:ad:96:3e:02:e2:10:12:
28:2f:d8:64:a2:27:b2:25:03:97:3f:36:8d:d3:06:
8d:fc:30:e7:b7:1a:81:58:3d:1a:2d:d1:85:97:03:
af:17:12:89:ba:c1:86:12:ed:f9:50:f0:1e:52:85:
37:ef:d3:92:33:3b:78:47:db:62:5c:01:8a:22:88:
4d:cd:e5:fc:19:b2:e1:27:0c:ab:ad:49:6a:08:bc:
d3:5b:bc:73:24:45:56:c8:f5:b1:87:c5:5e:7e:94:
1d:c0:83:23:c8:4b:fd:f1:6c:04:1f:e3:0a:26:4c:
3e:2d:b8:37:7b:99:0c:8d:4a:d3:49:dd:50:4a:c9:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CE:0D:CC:19:32:D8:53:CD:18:81:10:DA:EF:A0:27:18:8C:F1:D2
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6c:d5:9e:d9:5e:d4:ca:c2:8c:5f:02:24:0d:73:e5:68:d8:
0e:25:ab:6f:2d:f5:74:9f:31:7d:bc:e8:ad:fa:49:84:01:a8:
17:40:2c:e9:2e:63:71:a3:e6:1e:aa:dc:7e:9f:29:af:44:81:
d8:91:7b:67:e2:6d:4b:2b:4a:8f:b9:37:49:c4:bb:d9:b9:55:
21:31:eb:02:e1:50:cf:61:b5:3d:a6:fe:3d:ef:c6:ac:12:3b:
ba:08:9d:54:52:17:be:2f:db:7a:31:4a:7a:44:3e:1e:67:47:
d5:d3:af:24:5c:a9:3d:7f:9c:26:3c:97:22:cc:12:f9:33:23:
fd:7a:3f:c6:ca:5a:7c:93:58:ac:45:77:9e:5e:06:dc:a7:5d:
2f:b8:f5:30:6f:3b:0e:08:4b:06:cb:32:de:20:4a:a3:c9:37:
d5:fd:e9:d7:ea:5b:ac:47:84:62:67:fb:9e:94:ae:d4:3b:a4:
dc:ce:70:33:98:23:fd:65:4c:d1:ed:45:27:fb:97:dd:e7:dd:
d7:99:a7:5a:bc:17:33:09:fb:fb:dc:25:c5:85:8d:78:2c:9e:
6c:6d:9d:c0:b6:a6:4e:22:7a:04:17:dd:7a:18:06:33:df:53:
eb:bf:6d:23:3a:3f:29:2f:3f:06:8d:54:98:ce:96:2c:fd:b3:
be:b0:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:04 2025 by rpki-client