Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: dmL+I64VuTr6vKimBkrgqH9IX2PVDgxvZBEGMfPVtgY=
Subject key identifier: 50:6F:16:65:33:E6:08:0B:67:5C:E1:6C:BA:40:BD:EE:0A:10:88:38
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 0196B9DAB83B8C0BFCE70174D47F20DD5767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 0530
Signing time: Sat 10 May 2025 11:00:40 +0000
Manifest this update: Sat 10 May 2025 11:00:40 +0000
Manifest next update: Sun 11 May 2025 11:00:40 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: pch0UNejkVVzLasxlQsked9yHkpihgAgdKk6I8vUDgA=)
2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:b8:3b:8c:0b:fc:e7:01:74:d4:7f:20:dd:57:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: May 10 11:00:40 2025 GMT
Not After : May 11 11:00:40 2025 GMT
Subject: CN=506f166533e6080b675ce16cba40bdee0a108838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:02:5f:aa:64:1d:10:ef:e3:e0:b0:42:94:
ad:69:d6:9b:16:53:99:2f:dc:46:68:19:a5:12:4a:
54:7a:0c:2c:fd:49:8d:a5:0b:bf:8d:5b:c6:e8:7e:
3c:b3:24:b5:06:25:73:12:28:3b:72:8a:df:23:8c:
62:4f:c7:7f:07:3c:15:ef:0a:14:22:f6:f4:2f:98:
26:6f:6a:33:9d:37:47:15:0a:3b:36:53:cf:b3:bd:
67:7a:8e:88:ed:86:43:e2:d0:cf:87:39:46:2b:16:
44:4d:19:aa:e5:02:8f:02:4c:a1:d3:04:27:fd:18:
cb:b2:ae:de:ba:00:62:5b:5e:ae:9a:f1:ff:4f:02:
ba:99:de:c0:fb:69:c2:75:66:b2:e6:0a:41:b9:49:
5e:96:18:72:6b:59:02:a0:8d:31:fb:22:fd:89:f2:
97:4b:bd:74:c2:58:f7:f7:1b:19:8e:2b:b8:06:93:
f9:b0:7f:a4:80:7b:64:07:0a:2e:0f:49:50:d1:8c:
52:28:f6:2d:9c:ea:f5:34:93:4f:46:49:76:e7:3c:
05:22:8d:6f:20:ca:ab:db:1b:4c:4a:82:d4:d8:1a:
6c:6c:95:30:b6:88:8d:79:3a:6f:30:c8:25:ca:45:
36:d5:13:2e:91:74:db:fb:7f:7e:bc:ed:5d:57:19:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:16:65:33:E6:08:0B:67:5C:E1:6C:BA:40:BD:EE:0A:10:88:38
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:73:84:1e:a6:7f:5d:93:95:31:60:cf:82:eb:b8:39:75:99:
39:ac:af:83:37:c5:70:35:89:a3:37:bd:c1:ec:d5:02:ae:d2:
a9:b5:6a:43:72:71:74:c7:94:61:08:6d:e4:25:9a:74:db:d8:
62:53:b8:3e:dd:3b:1d:41:48:9b:83:3c:fa:54:00:53:c7:0c:
c7:29:6a:35:28:ef:3f:21:02:17:3a:da:5f:41:cd:e5:4a:0c:
80:3a:69:95:21:4d:32:04:32:4a:81:80:49:5c:b0:83:4a:2c:
0b:c6:56:6b:f4:4b:f3:62:aa:1d:37:ba:1a:9e:4d:a6:fd:e7:
5f:ce:91:ce:98:74:19:1b:1c:00:be:2b:53:76:74:af:92:46:
97:e3:31:f8:e3:6b:e3:22:07:e2:31:ce:84:70:a4:e5:b5:b8:
8a:2d:8a:d6:f1:c4:fb:5b:63:46:f4:05:12:6b:87:86:04:2f:
cb:9a:14:a3:4c:3c:09:ac:68:0e:a7:bd:ba:43:0e:09:ed:b4:
53:b6:7d:fc:3b:bb:bf:82:0e:47:20:8c:a0:bd:2e:94:83:74:
d7:63:39:8d:05:b4:80:2f:bb:56:1b:50:08:31:7b:fc:7e:be:
8b:c7:12:a1:6f:91:09:c2:fc:72:ba:9a:91:e4:6f:9e:c7:fe:
e7:77:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:30:21 2025 by rpki-client