Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: 7WfM2ukV5gavXBM1cjujUnigaO5Y90QW0GnOm60UHFc=
Subject key identifier: A3:BB:23:16:B4:4D:2E:8B:82:B9:BD:8D:56:A6:6A:4F:28:58:CC:5C
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 0198D4A7F8FE2848C29D5CF83F1BB8AD9675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 0647
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: rtEb/T6eSpGDFY0luAlVCRmdfvPIro7O33a+l01SwCk=)
2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f8:fe:28:48:c2:9d:5c:f8:3f:1b:b8:ad:96:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=a3bb2316b44d2e8b82b9bd8d56a66a4f2858cc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:61:d1:cd:81:3e:ee:98:ea:95:b6:06:41:
27:85:d5:a6:5b:fc:56:9d:ab:77:2d:51:51:7d:30:
0e:c6:8c:c5:c3:e8:05:06:3b:85:24:4e:65:fc:0c:
e1:91:1f:76:87:64:ab:6f:15:18:58:12:1b:37:fc:
2c:b5:38:a8:29:e2:21:4c:98:78:09:a8:82:de:83:
f8:00:51:50:af:3d:fa:d5:6a:19:fc:5d:ff:9a:22:
4a:12:6c:a1:29:c6:3a:22:89:ec:4b:10:8e:d5:08:
3d:b9:4d:5f:0b:80:9d:66:28:d6:5b:04:3b:67:fe:
b7:fe:f1:22:09:19:53:66:08:87:da:65:17:aa:ff:
1a:60:fc:39:bd:2c:27:39:9f:10:76:66:f3:ef:94:
f4:dc:c4:2b:26:65:0a:07:d0:e9:e1:80:fa:b8:3f:
47:51:ba:a6:81:e1:03:56:f8:18:16:c5:8d:8b:79:
33:1f:ed:1e:89:b7:81:03:d6:5e:18:e9:2c:f1:0e:
35:1f:13:51:9f:d1:c5:76:7f:43:04:b4:6b:d3:38:
b3:70:82:dc:f7:00:9f:ae:43:e6:4e:64:f5:9f:66:
9e:dd:f0:65:df:69:e4:4f:7f:3e:8e:91:91:bf:58:
18:b3:ca:79:34:a3:26:a5:d6:d9:87:88:c4:11:d5:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:23:16:B4:4D:2E:8B:82:B9:BD:8D:56:A6:6A:4F:28:58:CC:5C
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:02:83:38:f6:51:02:87:bc:9d:c7:91:15:3f:1d:8b:db:90:
41:d8:6d:cc:1f:ea:08:18:99:d1:aa:50:90:f1:18:e9:d6:fd:
f1:3b:c4:fb:b9:19:03:fd:06:09:64:4a:4a:e3:e4:43:9a:13:
07:05:4f:85:63:a6:39:2d:31:e7:f9:d2:70:ac:06:d5:8d:fc:
6f:bc:6a:60:fb:88:4a:30:f9:23:c4:04:30:7f:12:c0:95:12:
46:cb:26:40:98:11:f3:eb:19:1c:e9:2c:03:28:b3:9f:c7:03:
69:18:22:f3:90:f0:40:ed:0b:0d:53:73:af:ee:d1:7e:40:cf:
db:16:d6:e8:e1:11:c7:dc:f5:f9:83:04:6e:e4:58:3b:fd:78:
b6:34:8f:b9:fa:f6:ac:07:ea:aa:0a:fc:b8:09:95:08:d3:6f:
00:2d:d8:bd:5c:ca:d2:87:da:d8:05:38:b1:bb:e7:8a:f8:aa:
e1:2b:45:5b:66:c1:e9:2b:7d:5b:c0:8a:73:42:74:39:b3:6a:
b6:14:61:6e:8d:d2:73:0e:a1:c6:4f:f5:35:e4:6a:62:b7:78:
eb:57:ec:9d:f3:84:ac:ad:2e:c5:02:3b:f3:7e:1e:96:57:6b:
0f:c1:55:5e:6b:f8:19:a2:2f:c2:f3:60:25:35:58:db:8a:92:
b9:5a:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:29 2025 by rpki-client