Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: zRexuu3MdGqwGZxl/KXDt6Xe0+r97+IsEw9N4+n1mTE=
Subject key identifier: B6:FF:BA:8B:44:C3:AE:56:A4:1D:74:48:A7:96:5A:BC:40:56:0B:E6
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 0197B6D7853911F16B8A9B19EC41E92D6F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 0F
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: z8O41tRtwfl6MvIDz0MqVRqXaoT5ZTW+7TiqS/WPBiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:85:39:11:f1:6b:8a:9b:19:ec:41:e9:2d:6f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=b6ffba8b44c3ae56a41d7448a7965abc40560be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:d2:81:37:3b:75:f7:b4:88:26:72:c6:49:
9d:14:79:86:eb:eb:64:86:f6:ed:cd:28:f5:5a:85:
ee:f0:8c:41:49:79:72:77:ec:86:56:07:9b:9c:c0:
8a:1c:f7:95:0c:ac:1b:3c:e8:89:30:96:0e:ab:0f:
a3:70:a8:d4:24:d9:2f:e0:e8:80:6f:22:89:75:26:
b1:d6:71:35:78:5f:c7:4c:e9:3a:91:ae:34:74:7b:
4e:da:11:8a:fb:96:76:d0:f5:85:79:06:07:26:31:
e2:ec:a5:1b:09:10:79:89:43:06:c7:f8:59:1a:45:
72:9d:8c:d8:1f:e5:ca:fa:04:f3:75:5a:2b:57:68:
36:42:df:e1:8f:fe:82:70:78:a9:39:34:55:74:6c:
cf:1e:e0:96:c9:d3:00:e9:cb:7b:23:49:60:61:97:
d0:94:d5:1f:85:ea:1b:4a:5d:26:ad:56:0e:79:1e:
e6:d8:95:1a:2a:7e:d8:4d:c2:a9:2b:9a:9c:5a:f4:
c5:50:13:dd:ed:ac:a7:9f:72:cc:7d:1f:a3:1f:40:
aa:19:e0:55:c9:bc:4a:9e:e6:a7:2d:b8:9a:5d:c1:
73:c2:b4:66:27:48:0a:b3:5a:f2:35:42:80:05:5a:
07:1f:02:87:b0:f0:39:d4:2d:34:4c:8a:87:4a:dc:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:BA:8B:44:C3:AE:56:A4:1D:74:48:A7:96:5A:BC:40:56:0B:E6
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:32:d9:dc:c4:71:68:a8:b5:52:d6:0b:92:8c:ad:a6:22:d3:
e2:f5:64:2d:b9:09:c0:ad:a6:99:91:a2:96:70:49:e0:8b:71:
fa:f8:eb:17:78:27:6a:ab:04:41:a3:ef:57:01:24:97:3a:ad:
11:a9:bb:fb:f1:38:06:96:1a:a6:82:fd:4d:2d:f7:7b:e2:07:
2c:4f:f2:8a:45:6b:d0:69:4c:2b:22:3c:7f:91:87:9f:7e:c2:
ce:63:d4:d5:dc:26:20:bc:e8:f7:b3:26:85:04:93:31:6d:f4:
b3:8e:b4:2e:e7:d2:91:05:3c:a4:64:c9:2f:a3:b1:a3:00:fc:
2f:3d:67:a1:25:df:33:90:23:fa:52:e3:dc:87:a6:f1:2d:6e:
07:c9:d8:1b:60:c3:7d:1b:7c:a9:af:fb:ae:2e:e0:22:12:de:
e5:d5:84:82:5b:55:7a:b5:5d:bd:37:ed:8d:5a:b5:cc:0c:68:
94:4e:b3:3d:74:f5:cd:6f:20:d3:24:53:97:86:e8:68:b0:cc:
b4:67:cd:cc:37:cd:51:9a:32:9f:55:88:f6:12:69:27:74:c1:
83:3e:27:51:0c:0c:a6:56:42:c7:d4:98:7a:e7:17:57:95:f1:
d5:da:08:7c:a7:da:d1:95:10:2a:47:81:59:20:01:82:5e:55:
d1:e3:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:42 2025 by rpki-client