Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: EW0wd+ocUg8CLUOjxkZcDg9m2XAeKL6MQeFVB8+jhVM=
Subject key identifier: B1:73:68:CE:52:CC:A2:F5:64:B2:A6:91:D5:1C:ED:08:F3:05:36:E2
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 0197B74554BC17D37AE4ED8952DE54275E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: 1t8t0VKrJY43HWUyn53NwmlNPminlBf72WzJszZAu5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:54:bc:17:d3:7a:e4:ed:89:52:de:54:27:5e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=b17368ce52cca2f564b2a691d51ced08f30536e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:34:c3:34:19:5d:45:63:41:1c:b3:50:77:f3:
31:b3:b3:98:80:30:a7:1a:4c:fb:75:f2:37:46:b0:
e0:1b:8c:9e:34:97:bc:6c:1f:49:5b:0c:b5:65:1f:
0a:6d:19:b5:5e:1f:1d:47:6d:00:bd:03:6a:d9:11:
fa:d8:74:33:0f:6b:6f:94:0a:01:79:98:52:98:5d:
5f:e7:11:fa:d9:0c:4e:d4:2d:35:16:90:0b:50:28:
50:26:bb:eb:b9:23:c7:5f:5c:15:14:f2:51:e0:bd:
c8:69:b9:8d:0a:82:e5:0d:03:8b:6e:51:3c:07:84:
98:84:54:81:fa:88:b2:fc:b7:4e:52:c1:78:a7:cc:
d0:63:fb:64:50:a1:9d:5b:b2:0c:08:ac:f3:75:06:
3c:37:44:66:c6:42:90:e4:dd:af:6a:26:51:10:be:
26:f1:72:1c:6d:01:45:b1:86:50:ef:4b:29:56:8d:
12:6d:a9:7e:b7:a2:c5:ad:80:1b:cf:ef:c2:23:69:
6f:b3:b4:85:bc:c4:c4:b5:ba:50:e5:06:70:af:f1:
2a:fd:31:6c:34:c7:ef:55:b1:ad:a7:fb:bd:18:0b:
32:7f:6f:f8:fd:7d:13:45:47:86:c2:bc:a4:a0:38:
8f:95:12:c0:30:2a:b3:4a:52:0e:3f:ec:1b:e2:1b:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:68:CE:52:CC:A2:F5:64:B2:A6:91:D5:1C:ED:08:F3:05:36:E2
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3f:02:8a:0f:29:9f:16:1d:62:30:70:36:43:22:bf:2e:f8:
d3:98:98:e8:d2:7f:ba:b5:73:f5:94:fc:6e:ff:47:ad:47:50:
50:ef:f1:3e:e5:9f:ca:2a:d4:68:03:bf:0b:7c:03:26:18:1a:
48:bb:fb:fd:4f:d5:24:1a:c9:5b:e0:cb:75:28:f9:ab:ec:b2:
06:b3:ef:4b:6f:d5:40:4d:b5:2c:2b:2b:a9:2f:68:63:93:5e:
54:b4:9c:ff:9b:32:f5:96:f6:58:93:58:03:82:17:54:1a:5b:
8f:59:c5:3f:4a:fc:8e:cb:b7:76:f0:78:22:1c:bd:f4:43:f0:
46:be:94:a1:26:2d:85:62:0e:82:67:47:da:16:62:1c:77:0e:
ed:d7:81:8c:7a:69:17:8c:1b:05:70:5a:5d:23:db:ba:95:b1:
73:24:07:a9:e3:10:d4:8a:4c:8f:6e:46:13:7d:03:d3:84:95:
d7:fa:e9:54:ca:49:28:b7:18:a4:f7:d1:6e:57:34:a8:b6:4f:
db:4b:67:ba:04:9e:c3:d0:41:74:f5:84:ca:a0:57:4f:74:f5:
7e:3f:ff:17:77:6d:3e:f3:a3:fa:9b:51:b3:24:30:f9:34:d6:
b3:b6:b2:94:93:9c:5b:28:e6:da:55:17:cd:bf:dc:85:6e:b7:
3e:c6:5b:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVS8F9N65O2JUt5UJ15RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkODY5NTZjY2Q3ZTNhYmI0MjkxZGQ1NGRiZDhiNDM0MmJm
OTU3Y2MwHhcNMjUwNjI4MTYwMTAzWhcNMjUwNjI5MTYwMTAzWjAzMTEwLwYDVQQD
EyhiMTczNjhjZTUyY2NhMmY1NjRiMmE2OTFkNTFjZWQwOGYzMDUzNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zTDNBldRWNBHLNQd/Mxs7OYgDCn
Gkz7dfI3RrDgG4yeNJe8bB9JWwy1ZR8KbRm1Xh8dR20AvQNq2RH62HQzD2tvlAoB
eZhSmF1f5xH62QxO1C01FpALUChQJrvruSPHX1wVFPJR4L3IabmNCoLlDQOLblE8
B4SYhFSB+oiy/LdOUsF4p8zQY/tkUKGdW7IMCKzzdQY8N0RmxkKQ5N2vaiZREL4m
8XIcbQFFsYZQ70spVo0Sbal+t6LFrYAbz+/CI2lvs7SFvMTEtbpQ5QZwr/Eq/TFs
NMfvVbGtp/u9GAsyf2/4/X0TRUeGwrykoDiPlRLAMCqzSlIOP+wb4hsJDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFzaM5SzKL1ZLKmkdUc7QjzBTbiMB8GA1UdIwQY
MBaAFC2GlWzNfjq7QpHdVNvYtDQr+VfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGIt
YTI2ZGUzMTNiMzRkLzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGItYTI2ZGUzMTNiMzRk
LzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnD8Cig8p
nxYdYjBwNkMivy7405iY6NJ/urVz9ZT8bv9HrUdQUO/xPuWfyirUaAO/C3wDJhga
SLv7/U/VJBrJW+DLdSj5q+yyBrPvS2/VQE21LCsrqS9oY5NeVLSc/5sy9Zb2WJNY
A4IXVBpbj1nFP0r8jsu3dvB4Ihy99EPwRr6UoSYthWIOgmdH2hZiHHcO7deBjHpp
F4wbBXBaXSPbupWxcyQHqeMQ1IpMj25GE30D04SV1/rpVMpJKLcYpPfRblc0qLZP
20tnugSew9BBdPWEyqBXT3T1fj//F3dtPvOj+ptRsyQw+TTWs7aylJOcWyjm2lUX
zb/chW63PsZbNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:53 2025 by rpki-client