Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: zTGftyOra5pkgk6KcgCo3XCtI04ixKJkH58R+1LEmgg=
Subject key identifier: 05:FE:44:2F:81:99:34:16:3C:31:A4:70:0A:4D:B7:19:8B:BD:C7:5B
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 0196C9BB6CB68F7AA32077A3E1C418B62154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 13:00:25 +0000
Manifest this update: Tue 13 May 2025 13:00:25 +0000
Manifest next update: Wed 14 May 2025 13:00:25 +0000
Files and hashes: 1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: 7dV3z0mDB3u2TxLpkpvwrA1r+loGshiIaRAoKmygEbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:6c:b6:8f:7a:a3:20:77:a3:e1:c4:18:b6:21:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: May 13 13:00:25 2025 GMT
Not After : May 14 13:00:25 2025 GMT
Subject: CN=05fe442f819934163c31a4700a4db7198bbdc75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:cf:ac:4f:26:86:5a:65:f8:f2:16:34:bd:
2a:87:fe:fb:5f:22:49:53:6d:b0:dc:2a:0f:55:bc:
dd:51:9f:e7:b3:61:13:c3:b3:6c:b1:21:eb:b4:4b:
ff:b9:49:57:7f:23:43:03:31:73:b5:58:6e:18:53:
c5:ce:de:f9:9f:1c:14:bc:22:14:61:4a:ae:b1:c5:
d0:f9:54:f2:bf:50:b7:8d:be:a3:bb:60:f2:b7:0a:
22:96:64:8e:12:25:89:9f:77:c4:cc:c6:a8:a4:04:
e1:75:f5:b0:03:78:13:fc:44:a5:95:2e:2b:57:c2:
0a:47:5e:5c:5b:d4:cf:62:72:42:01:b8:65:ed:41:
53:ee:b6:58:d0:12:9f:f3:71:19:aa:2f:2f:a4:6d:
b3:7f:49:92:89:47:b2:af:42:d9:95:5c:d3:01:06:
6f:fc:c0:b7:1c:a8:c4:a5:fb:53:8e:5b:db:69:13:
a9:6a:12:cd:ec:14:b2:b7:0f:2c:5b:7f:e5:e0:ea:
2c:4d:61:2a:16:dc:be:40:23:ab:3c:67:83:ed:a6:
8a:8c:81:12:5c:0c:6d:06:b2:97:e4:d3:6e:ea:24:
fd:92:03:99:07:61:f2:44:61:b7:6b:e8:32:93:ce:
55:9d:87:d0:40:b0:d4:9d:32:43:49:a5:73:90:76:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:44:2F:81:99:34:16:3C:31:A4:70:0A:4D:B7:19:8B:BD:C7:5B
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:48:11:df:e1:38:64:b6:83:80:46:31:7f:a9:72:c2:89:f8:
ce:9a:f7:e2:82:c5:cb:a5:17:f2:21:6b:ca:c7:d6:ad:59:1f:
04:6e:2d:c0:bc:5a:ff:32:05:ac:54:a7:63:68:75:6e:88:37:
13:04:22:91:50:bf:1e:92:f1:7d:a5:bf:8c:4f:54:d5:90:e9:
30:a9:22:0c:63:da:c4:df:ce:96:41:07:31:25:89:6a:8c:bc:
74:96:31:e4:38:75:ad:4e:66:52:b0:33:74:19:ef:db:ba:93:
94:cd:62:b9:6f:e4:62:97:e7:ed:d1:be:84:72:87:f5:ca:18:
b6:23:cf:17:7c:14:f1:90:0d:4e:ad:af:da:8f:cf:ae:b5:24:
44:63:3a:c1:c9:5f:74:d0:71:b5:11:8f:d7:b6:f0:ca:bd:bb:
b3:e9:6b:bc:cf:75:02:a7:13:a3:50:05:71:c8:49:e2:87:df:
c7:08:dd:b6:f4:a1:56:f9:58:e0:d0:c1:4d:c3:e1:ab:e6:97:
16:62:26:b0:7b:5b:83:04:50:30:37:eb:ad:35:af:0c:c2:ea:
2f:09:c9:b3:c4:78:d9:75:f3:d6:4a:0c:c4:be:74:d1:08:11:
56:d3:3d:fd:11:14:e4:b6:02:6f:34:59:24:2b:e6:6a:6a:72:
cf:c2:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:45:09 2025 by rpki-client