Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: zLPAAHU7q1Zw8e1/jQPlI+dIiVCDroewMJqfCX0rmlM=
Subject key identifier: CB:F7:F4:EF:05:8B:44:07:4E:2C:1F:91:95:A0:2D:73:60:43:F0:FB
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 0197B6A17C6AE1FDA8B7D952530A31734773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 0B86
Signing time: Sat 28 Jun 2025 13:02:05 +0000
Manifest this update: Sat 28 Jun 2025 13:02:05 +0000
Manifest next update: Sun 29 Jun 2025 13:02:05 +0000
Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: BCLlX00Ofp/8mV3CzYyscYDZ8wVPwSewhC9gFE+qSKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7c:6a:e1:fd:a8:b7:d9:52:53:0a:31:73:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Jun 28 13:02:05 2025 GMT
Not After : Jun 29 13:02:05 2025 GMT
Subject: CN=cbf7f4ef058b44074e2c1f9195a02d736043f0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:af:47:5c:e9:e6:d7:c4:35:68:14:7e:60:
25:99:11:a8:66:6e:fb:56:e6:f7:c2:76:55:f4:50:
5f:a0:d8:72:37:f5:3a:a5:93:75:27:29:e2:27:a4:
84:16:de:5f:ba:b1:39:fb:bb:09:2d:fe:a3:f1:f7:
bc:96:59:8a:45:e0:83:c6:42:85:cc:ab:4c:1f:b2:
9e:69:ae:55:a1:30:d4:83:33:54:65:b3:92:38:33:
a9:01:a6:93:df:e8:33:91:32:fb:7b:08:07:d7:e7:
cf:73:7e:e4:67:54:f7:6a:23:81:9d:82:aa:33:9c:
54:26:65:3b:31:56:33:b4:ed:76:0f:11:a8:7c:ab:
cf:e9:7e:ce:e9:44:81:00:9b:a0:f1:19:33:35:ea:
58:5a:07:4c:6a:d4:27:db:86:1f:6e:df:20:73:44:
2d:49:ab:54:4d:f7:06:97:50:44:f2:23:a3:22:50:
54:ee:98:e6:f4:de:f6:7b:c6:5f:39:ee:db:be:c1:
70:25:eb:46:73:45:39:82:b8:9c:f1:74:87:eb:70:
52:bc:3d:f2:3d:54:19:26:60:38:6b:69:a5:32:c7:
33:cf:fe:4e:0b:1e:63:d6:59:65:e7:81:20:30:81:
24:36:6b:d2:0a:1e:4a:af:57:57:89:8e:f7:cf:80:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:F4:EF:05:8B:44:07:4E:2C:1F:91:95:A0:2D:73:60:43:F0:FB
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2e:ed:9f:40:9e:54:50:80:c6:71:f0:d4:9a:14:6e:39:0f:
ab:2b:60:c9:af:2f:94:43:51:cb:4b:16:ed:74:4a:42:ea:43:
68:c0:b0:fa:4c:2f:97:f9:8e:ed:7f:74:8e:7d:92:09:19:64:
dc:fd:4c:3d:9d:fe:d8:19:73:8e:b0:04:fa:30:21:59:39:6b:
b5:3b:44:28:2e:aa:c3:5f:4a:16:87:3e:52:a4:99:7f:78:85:
7f:ac:13:1e:7f:f0:a2:73:a0:68:43:98:02:10:40:c1:3e:0c:
6d:01:5e:53:93:57:1c:b1:ed:6c:a2:b7:53:75:3a:04:26:1b:
fa:d1:7f:6c:27:af:6a:d6:48:f2:5b:d6:e7:f5:c5:b7:42:13:
ae:75:23:5a:7d:76:05:ca:54:7c:9e:64:fa:b6:48:ff:a6:fb:
36:0f:43:8f:d8:30:de:ff:5e:e9:65:42:5a:2e:a2:a1:5f:58:
ad:94:7f:46:36:0c:d9:56:3e:2f:56:09:7c:43:17:7b:c4:cd:
93:b0:0b:e8:87:c9:b0:50:b7:8b:3d:7d:2b:8f:f0:cd:45:97:
3b:38:be:06:84:6a:9b:2d:5a:87:91:6e:14:08:ed:97:50:58:
86:91:33:fe:24:fa:78:b5:a2:a0:12:38:1d:6c:d0:bc:81:18:
27:f0:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:20 2025 by rpki-client