Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier: D007P1qjh/ZhdGC4JG1kR0dpey3KsIBnrJSze4AoHlA=
Subject key identifier: 46:1B:43:39:D4:E6:7C:33:37:BD:A3:FC:29:B4:59:72:18:8C:7F:32
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 019848C0C3612C36A2C1C24E222ECE06177D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number: 1294
Signing time: Sat 26 Jul 2025 22:00:49 +0000
Manifest this update: Sat 26 Jul 2025 22:00:49 +0000
Manifest next update: Sun 27 Jul 2025 22:00:49 +0000
Files and hashes: 1: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: zl+716pe7cRHJ3G69rKxNf+1U5gjHMssB0It8aO4BwI=)
2: f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa (hash: gXMbVjSWssRl5pUSyy0mfRaHyNZzTR/Z01nmT1EQCvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:c3:61:2c:36:a2:c1:c2:4e:22:2e:ce:06:17:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: Jul 26 22:00:49 2025 GMT
Not After : Jul 27 22:00:49 2025 GMT
Subject: CN=461b4339d4e67c3337bda3fc29b45972188c7f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:a3:24:86:03:b8:15:d8:0c:1c:1d:e3:62:
b1:86:e2:73:cd:94:6a:f0:77:90:7f:47:b9:8c:e9:
67:62:d4:e3:7b:db:b7:c8:55:6c:ee:16:02:df:42:
ca:f1:3f:04:5b:36:0e:d7:a8:56:bf:69:ef:99:a7:
a6:34:07:c4:88:2b:bc:cb:84:be:06:e1:05:cf:af:
65:2f:3f:9c:5d:51:91:39:5b:b2:2f:b6:8d:4b:ae:
27:1d:01:e1:6f:4b:82:8b:2b:16:41:07:d2:a4:c6:
ce:03:32:eb:84:ac:49:78:a9:47:4d:ff:33:4b:fb:
9a:1c:d6:3b:c7:cd:59:d8:4c:e4:d8:6b:29:39:08:
df:f0:8a:39:43:19:8e:55:2e:3a:c1:6f:e5:68:88:
23:6b:b0:1e:91:08:13:72:04:36:c2:0a:5b:b0:7a:
34:f0:20:ad:fe:ab:0e:9d:ec:0c:b1:38:1a:df:75:
5e:48:ca:a6:3b:5c:6f:4d:7b:b3:fa:48:14:77:38:
35:48:ea:49:9e:42:9b:2d:34:72:45:d1:65:0f:72:
c2:41:fd:64:68:99:71:45:65:eb:85:94:21:88:a3:
4f:2a:6c:78:ef:7d:14:e4:c5:9d:9c:1f:39:00:72:
13:96:a9:ea:25:b4:8c:77:d8:3d:52:9d:0e:42:aa:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1B:43:39:D4:E6:7C:33:37:BD:A3:FC:29:B4:59:72:18:8C:7F:32
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b0:42:b3:af:a2:5a:db:03:7b:08:0c:9e:d9:2a:62:ad:92:
4c:7c:a1:cf:ba:6c:b1:94:5e:a6:e9:68:a5:0e:9b:98:2e:f3:
ac:ab:f5:a4:a4:bf:41:a5:80:cb:51:8d:0e:5e:13:1c:9c:df:
5f:63:f0:b9:16:82:53:93:ae:0e:9e:01:0d:3e:e7:6e:a4:c1:
fd:c2:80:b2:9a:29:10:ff:e1:f3:3c:62:42:d2:1a:b8:2e:89:
0c:be:fa:66:1e:d3:0f:43:55:bd:cd:df:c5:ee:60:01:36:d5:
86:0c:42:8c:01:3b:7c:56:c9:ec:f7:1b:1d:f9:23:37:35:3e:
71:5d:9a:4a:30:01:bb:60:25:74:b2:86:de:e1:2e:d3:53:3f:
0b:2a:0e:e0:97:6c:a2:5d:1d:74:e8:3d:b3:29:5c:76:33:43:
59:f6:1f:7a:da:1f:10:08:7a:0b:9f:c2:b1:b4:2f:61:12:cc:
69:75:0b:4e:24:6b:86:8a:9a:b7:36:a1:b8:9d:56:5d:36:f6:
e9:b1:c4:35:5a:d2:a4:5d:dd:a9:59:c4:f0:46:34:53:72:d2:
0f:01:ac:11:c8:2a:97:29:15:12:1c:0e:bc:bb:4b:38:01:4e:
dd:1f:3a:e7:f1:52:ad:a7:4d:4e:03:23:b9:54:3d:23:cd:24:
a6:16:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:48 2025 by rpki-client