Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File: LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier: oIeH/bxe7Qxk9mghYuDma2u0f7Hgin/eIUh0KDAYnQo=
Subject key identifier: 44:8E:24:C8:C6:69:2A:DB:9C:F1:6C:87:44:BD:57:48:DF:D8:9C:AE
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 0196D3D13D97BE3664C4C3327944B71B7237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number: 12E5
Signing time: Thu 15 May 2025 12:00:27 +0000
Manifest this update: Thu 15 May 2025 12:00:27 +0000
Manifest next update: Fri 16 May 2025 12:00:27 +0000
Files and hashes: 1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=)
2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: V3NhphGiGPrhR8sI/wDtvn5NlQI4UReXy6iDfBw+H5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:d1:3d:97:be:36:64:c4:c3:32:79:44:b7:1b:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: May 15 12:00:27 2025 GMT
Not After : May 16 12:00:27 2025 GMT
Subject: CN=448e24c8c6692adb9cf16c8744bd5748dfd89cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:ae:9d:9c:34:ef:b1:61:92:53:d0:0a:9d:
1e:fc:c7:72:37:d4:57:0a:35:5d:19:7d:fd:a4:33:
2e:da:dc:a5:00:d4:35:91:1e:3a:13:c8:4e:33:60:
07:bf:8c:66:29:ba:1c:0a:ff:57:ec:22:13:1d:c0:
e3:d3:9b:a1:1e:cf:8f:47:70:99:12:a2:00:10:8c:
c4:66:53:79:97:90:55:7c:ce:40:d7:7e:f8:7b:74:
eb:0e:e8:ca:8f:36:b2:44:c5:2c:71:3d:86:df:d6:
d6:37:4c:9a:a5:4d:f5:e6:95:ce:a9:83:87:ed:06:
f2:ce:0d:d5:fc:2f:ed:b6:80:17:f8:4f:f2:cc:53:
b5:f6:e9:dd:f1:87:9e:3d:8b:47:0f:4a:57:47:fa:
82:3b:0f:54:cd:68:32:03:83:f1:43:b6:7a:82:5a:
c0:be:85:6f:29:4b:bf:f2:f8:ed:2d:f5:11:ec:cc:
a0:c0:82:06:c0:d6:e7:78:03:28:ca:5b:ef:5a:4b:
5a:13:21:0e:b0:4c:cc:bc:db:06:db:11:71:1b:01:
80:7c:a0:6e:08:d9:5f:b6:d5:31:d3:78:7f:91:d5:
fb:14:21:24:0e:98:b8:05:6b:e7:8a:f0:09:a7:a5:
e7:d2:88:8d:1e:4d:4c:98:a1:ed:4e:63:20:ef:de:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8E:24:C8:C6:69:2A:DB:9C:F1:6C:87:44:BD:57:48:DF:D8:9C:AE
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:54:97:43:bd:95:7e:4c:10:31:5a:e7:97:b7:4d:ed:2f:b0:
14:3a:23:8b:59:87:91:53:2b:49:7c:2f:ab:bf:60:bb:be:b8:
7a:cd:d1:ba:13:22:3e:0d:79:c0:4c:8c:71:f0:ef:68:6c:78:
51:db:f3:3d:25:3c:52:ab:71:53:52:4a:9a:67:68:a7:ca:8b:
ff:80:1a:bf:fe:47:c9:d9:2f:ad:a4:38:a4:55:da:e3:d0:24:
32:47:b3:06:82:4a:93:0e:8f:8f:6e:2e:7a:b3:1e:cc:e6:93:
3b:e8:ab:0d:6e:76:25:25:db:23:c4:04:36:99:cd:fa:51:9e:
17:58:e5:44:75:69:f7:44:d0:29:41:1f:9f:94:ab:e5:cd:cd:
02:95:0e:bb:ef:c9:4f:36:66:cc:e2:6d:9f:1e:74:83:d2:61:
d7:4b:0d:ae:b1:5b:d0:d5:38:b6:85:ee:07:6e:8b:e0:ee:d7:
42:d9:4b:28:c1:5a:7c:c6:57:db:49:47:37:33:95:f5:cc:fe:
20:00:c1:01:09:6f:65:75:90:ea:d3:e3:72:1c:b4:97:dc:d9:
fa:b8:94:da:df:aa:4d:be:89:e7:82:f5:b6:c0:78:7c:da:12:
f1:5d:3a:32:ac:7f:81:00:a8:6f:fd:25:6f:21:37:ae:0a:23:
0c:23:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:34:34 2025 by rpki-client