Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: JYlQV/eYA8RRibCsM7z6AwCvb7ESVK2n7nLApYNKriU=
Subject key identifier: 84:0A:BB:CF:77:15:9A:28:F0:73:78:1D:D5:85:56:40:67:21:32:1E
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 0196AA306F153ED25C37C4F5993BB1CD59D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 0AFB
Signing time: Wed 07 May 2025 10:00:22 +0000
Manifest this update: Wed 07 May 2025 10:00:22 +0000
Manifest next update: Thu 08 May 2025 10:00:22 +0000
Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: +pbHNrITeIJHcZ5NjeWlcaAZKmM4ZdpqmeuK+uAktEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:6f:15:3e:d2:5c:37:c4:f5:99:3b:b1:cd:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: May 7 10:00:22 2025 GMT
Not After : May 8 10:00:22 2025 GMT
Subject: CN=840abbcf77159a28f073781dd58556406721321e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:94:08:9c:b8:7f:d5:cf:d2:6a:ae:3a:19:
16:26:9e:4d:e5:cf:39:81:3f:3b:85:e5:a3:9e:4f:
6f:ea:54:e9:8f:b8:06:b3:8e:b9:89:82:f5:ed:46:
f4:31:cc:70:45:2a:74:c4:7a:d1:b2:8e:df:f9:b6:
58:6e:6a:1b:b6:4f:59:e1:24:ac:52:7e:31:2c:55:
a4:c6:8c:22:5a:35:db:8a:63:54:84:9d:de:d4:a3:
31:e4:01:a6:2a:84:60:8c:f8:cb:ae:6d:b5:f9:85:
31:b2:bb:34:d5:5b:b7:21:bc:21:e2:92:76:3e:86:
b4:ed:b7:de:cd:e8:16:ba:34:93:0e:f1:c4:0d:29:
ef:f9:26:fa:71:bf:bb:a6:1c:06:12:29:b4:9b:ac:
b8:fc:d8:a4:45:a8:f0:4b:34:aa:f8:ab:3d:ff:48:
8e:e6:26:a4:f6:68:5a:62:1f:dc:93:0f:60:d5:e4:
e8:de:ab:d2:6a:2a:18:a0:15:4a:7b:6b:1e:6f:91:
51:d5:dc:ad:2c:05:a6:19:98:e6:0b:98:40:78:b5:
e7:bd:92:a6:82:bf:e6:9f:b5:93:c9:ff:c3:92:a8:
7b:dd:e4:9b:d8:2f:c2:34:81:40:67:7b:f6:18:92:
6b:3e:99:c7:0f:33:52:f4:33:9a:8d:98:c1:54:33:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:BB:CF:77:15:9A:28:F0:73:78:1D:D5:85:56:40:67:21:32:1E
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:7a:04:4f:62:69:e4:90:1d:5a:ac:54:fc:70:86:0d:57:
3c:97:90:2a:34:e5:72:8a:2d:2f:ac:a1:52:6f:37:e7:43:fd:
a1:8b:56:ff:c4:b1:8b:ce:4b:92:ca:9c:50:83:06:05:9f:b0:
75:5a:3d:ca:e1:ae:e7:0c:83:9b:8a:15:0a:4d:dc:4e:ab:f1:
5a:e6:ce:18:e1:19:bc:c1:58:ab:ac:ff:35:d4:3b:5c:16:d7:
e2:8b:59:d9:e0:5b:68:e6:b0:9b:de:5d:59:65:0a:23:fe:3c:
84:77:13:83:60:76:d5:08:e6:c8:d5:b8:15:08:d3:39:b0:3f:
ed:fa:4c:1a:54:6f:90:7c:41:f1:cb:2b:17:1b:47:08:16:7a:
b7:74:fa:16:02:bf:25:b7:0f:e8:c2:ba:c8:a0:8c:45:a8:1f:
5c:35:b5:cc:1d:2d:bc:52:59:22:6a:6e:02:8c:f1:20:fb:57:
34:4f:9f:a5:2a:cc:32:7c:69:19:10:1f:2b:ad:dc:1e:15:c2:
84:e8:68:ba:c5:2e:dc:aa:92:30:21:ce:06:ff:61:1f:0d:86:
ec:bd:a7:21:ad:b3:ab:16:a1:ef:d1:e7:17:3e:8e:c5:a8:5b:
27:93:78:04:e1:13:95:9a:54:3f:e6:d5:54:fd:b2:24:0f:6f:
c8:8c:f7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:57:41 2025 by rpki-client