Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File: LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier: vrhJrluYtKGq/5rmwTfYf+r0m3jjBBu5FeslHy4Z8+c=
Subject key identifier: BD:50:7B:9C:6B:75:12:54:1C:66:FE:9E:75:97:FD:BD:1E:29:60:1C
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 0198D583F4F89CC1E98F6C130E2FBFF88990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number: 13EF
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=)
2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: TthiSgLcENcgFQdKxMokudzngl9F7+Z29ydkELEnyfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f4:f8:9c:c1:e9:8f:6c:13:0e:2f:bf:f8:89:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=bd507b9c6b7512541c66fe9e7597fdbd1e29601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:42:2c:05:58:cd:36:c3:6e:e7:0c:90:cb:
18:b0:e8:0f:f3:5c:38:9b:41:da:c2:54:13:15:91:
9d:70:ed:c9:78:d0:2b:2c:b7:13:bc:7a:5f:3a:af:
a5:09:f7:7e:d0:86:bc:f6:24:2d:fb:af:b3:02:e2:
a0:29:6e:20:9b:1d:9b:5a:30:29:a8:ca:02:47:1e:
67:84:b7:24:c4:1b:3d:7f:43:01:a2:2a:c2:17:ba:
7a:e9:6c:31:f0:5b:f0:68:74:61:29:c6:1c:81:1f:
8a:43:7a:48:7c:45:86:af:89:2d:80:45:43:bb:b7:
4f:d0:3c:c6:4c:3a:3f:6c:89:6e:75:21:d4:84:58:
bd:5d:cb:61:5d:cb:e2:e6:fb:19:ff:fe:21:a9:f6:
ea:0b:f5:5b:ce:7f:20:d8:f0:05:eb:7b:1f:6f:92:
fe:89:39:4e:58:87:e4:a0:88:b9:ed:0c:c2:1a:9d:
82:e5:01:65:21:da:73:7c:61:f9:b2:38:fc:d1:1a:
3b:8f:b1:00:c6:ed:18:7c:38:f5:83:9d:f3:d8:ab:
60:bf:77:02:d4:e0:26:f9:24:06:5a:9d:eb:fe:fc:
8a:03:11:c9:63:24:9c:fd:83:92:dc:9e:4b:09:28:
23:22:78:3d:6a:26:a4:2f:8c:f4:90:26:da:fe:f9:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:7B:9C:6B:75:12:54:1C:66:FE:9E:75:97:FD:BD:1E:29:60:1C
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:68:e8:2d:ba:47:e7:bf:f5:f4:19:d9:6e:19:72:a9:1b:42:
5a:2f:3c:5e:94:90:51:49:e0:f4:69:0e:07:81:f1:03:d7:fb:
3f:3d:a2:ce:8a:3c:84:61:97:3d:e2:36:46:aa:36:0d:06:d5:
94:23:25:45:07:88:80:94:c1:ac:a1:a1:22:27:95:24:6e:e2:
28:6a:ef:a6:81:1c:03:02:0c:c4:4d:d9:9b:79:a8:37:a8:13:
a6:03:c4:8a:c9:ef:eb:39:23:b2:7c:db:04:1e:c5:9f:e8:f1:
85:3c:8a:86:ab:12:40:2e:f8:04:31:75:9a:b8:32:98:8a:a5:
fa:36:bd:f4:34:3b:00:a8:c2:43:05:d0:a9:9f:84:37:4b:17:
d9:16:43:50:47:d1:a1:03:83:de:72:82:e9:80:4a:c9:33:d1:
17:66:2a:d7:26:40:e3:ee:63:9e:c0:fb:79:42:03:43:4e:88:
e4:a2:6d:42:eb:18:2f:1c:97:77:3f:7e:34:2b:43:6e:08:b7:
7e:fb:44:87:f7:8c:86:63:ae:39:bc:e0:45:58:00:c9:7c:fb:
dc:c2:f6:67:dd:96:96:79:5a:4f:7b:97:4d:b2:d0:44:3a:c2:
c7:3c:f8:d0:c6:52:b8:92:3c:ac:5d:f7:fd:b5:97:61:fa:4c:
53:88:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:36 2025 by rpki-client