Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: RaQa1u3xLDzKz3LtiN6Thnm/f8dljz/Q334tUh8v6Yw=
Subject key identifier: 13:B5:8D:66:EE:A2:73:E7:51:27:EF:06:D9:A4:57:2C:4C:6B:97:B2
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 0197B6D73E60D6ADCE30542F7FF1F953279E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 05B3
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: 6lMvvADTQ7kX+wIgvy39MMc6SVvwicUi6ox4oRwJiPA=)
2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3e:60:d6:ad:ce:30:54:2f:7f:f1:f9:53:27:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=13b58d66eea273e75127ef06d9a4572c4c6b97b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:f0:0c:ac:9b:28:b5:c5:74:c2:2b:03:65:
56:8e:7e:fc:c4:3f:ba:7d:c7:b9:ed:d6:45:f9:b3:
71:97:fc:27:19:c3:40:f4:6e:f2:6f:98:20:0d:ae:
a0:f1:bb:4a:be:00:c5:90:1e:b9:b9:09:8e:88:b8:
4f:08:97:76:5d:ab:24:5e:24:21:05:0e:14:63:16:
d3:f9:f6:57:1d:73:b2:7e:83:7a:ee:fc:81:0e:93:
0a:2f:cf:a1:5b:eb:e3:a6:36:63:5b:ab:f6:2b:04:
94:b0:e3:fb:58:c6:e2:2a:7e:68:a1:08:a6:50:90:
9a:e8:60:26:e4:9c:71:55:00:5b:c5:f2:63:9e:ae:
a2:5f:4d:4c:58:18:db:bc:6c:86:46:53:72:7d:f5:
02:88:e2:70:0e:45:ae:80:46:4d:35:d6:a1:9e:03:
9b:b7:e9:8f:20:d1:f3:72:de:b8:15:d8:34:6b:b3:
ab:a4:5f:4e:e4:ed:55:e6:f4:e0:79:70:7a:e0:e7:
dc:85:b1:bc:c3:69:a6:ed:59:e4:8b:86:83:82:80:
3b:5f:a3:c3:e4:a3:f5:40:48:9b:bb:e4:90:f3:a3:
65:aa:24:34:63:5c:26:67:3c:f5:7b:5e:7c:d1:f3:
ef:9c:76:b1:b9:13:d4:a9:df:45:b6:8d:ca:bd:46:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B5:8D:66:EE:A2:73:E7:51:27:EF:06:D9:A4:57:2C:4C:6B:97:B2
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:76:00:48:83:fa:e2:d4:74:65:c6:64:67:e0:fc:63:59:d2:
5d:49:76:1b:3b:81:f6:6b:83:1e:1b:92:3d:93:28:d6:64:bd:
ac:dd:06:4e:e5:de:0f:75:30:41:47:07:cb:cb:b5:07:30:e2:
60:28:da:37:2c:ae:cc:f9:95:1d:16:e4:3f:52:84:3f:52:87:
e3:68:ca:75:12:b0:a6:d6:b1:4d:48:dd:22:50:0e:a3:0f:b1:
2d:09:d0:5f:e0:69:82:78:e9:6b:9b:4e:4f:d1:7d:ab:c4:5b:
46:77:06:7b:1a:18:7b:88:5c:5a:68:cd:4b:1d:27:3f:cd:39:
4b:48:ab:5d:03:44:1c:9f:68:8a:3b:33:aa:3d:00:9f:a4:3c:
47:94:ec:ca:2e:3e:fb:0a:9c:80:83:3e:c7:f4:28:fd:a9:e2:
ba:7e:92:1c:a7:09:26:a1:f9:be:07:27:06:40:df:e9:a4:c5:
17:67:81:d8:31:13:62:a6:52:ec:47:c9:78:f1:31:a3:f5:91:
c8:b2:0e:af:b9:c2:36:b2:12:8e:65:bb:9a:15:f5:3f:57:4d:
09:da:09:ef:de:f0:6c:33:61:a7:bd:38:6c:cf:2a:b2:62:79:
db:33:fa:0c:7e:49:c2:b9:b0:c0:d5:ba:0e:64:64:ce:fe:39:
9d:02:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:32 2025 by rpki-client