Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json)
Hash identifier: 5ZTxmUm+akA3ZIBUCG186twt02YI1Bk29pCTClJsDgM=
Subject key identifier: 21:98:A0:5F:A9:52:1C:06:0A:BD:F7:8D:68:CB:A6:A5:53:9B:8B:3B
Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa
Certificate serial: 0197499F2ACD3AE230B841E53A3CDF8E2AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
Manifest number: 07A2
Signing time: Sat 07 Jun 2025 09:00:57 +0000
Manifest this update: Sat 07 Jun 2025 09:00:57 +0000
Manifest next update: Sun 08 Jun 2025 09:00:57 +0000
Files and hashes: 1: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: oR9BR4ib+s0EGtFyQEr+zYk5B1u46WzJtrO+Z6/r3N8=)
2: cj0dff8EdsGG8DaopETeofzcldw.roa (hash: 06o/5+ZmJQt03Z2LLNo5k4a7U1bSw5gDTRAuW+tjkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:2a:cd:3a:e2:30:b8:41:e5:3a:3c:df:8e:2a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa
Validity
Not Before: Jun 7 09:00:57 2025 GMT
Not After : Jun 8 09:00:57 2025 GMT
Subject: CN=2198a05fa9521c060abdf78d68cba6a5539b8b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:5c:8f:0f:c0:05:e8:23:f5:c6:56:0d:9b:
c4:d7:ca:d2:ff:0e:4a:ea:65:9c:52:be:35:bb:96:
e4:ae:b9:cc:05:01:31:b2:7b:97:ed:69:73:da:c9:
9d:de:f7:25:65:fd:37:cd:02:39:41:43:0f:c7:c9:
02:58:1f:de:47:ad:62:34:0f:d2:ee:38:43:a5:de:
28:a0:ac:d9:46:4e:f2:01:44:e1:18:b8:14:c1:3b:
da:57:13:93:b7:b9:16:46:77:75:fa:78:44:bf:27:
c2:91:69:6a:1a:62:7b:ac:8f:ae:7c:19:b6:ff:1c:
7f:c5:39:b7:8f:30:a3:42:92:e8:3a:d7:89:ce:fa:
d8:3f:48:cf:58:3a:90:a1:ae:4d:c7:2e:59:c6:d1:
15:39:9f:72:c0:4f:5e:fe:f2:c4:6a:92:33:b2:82:
e6:60:5b:da:38:f7:e8:1e:64:0e:71:ad:3b:34:e4:
c9:e6:ac:a5:b8:07:0a:93:41:74:20:02:f0:04:83:
88:d9:d4:32:34:43:c3:45:36:af:06:07:e8:46:62:
5a:60:e4:b1:fc:80:5d:36:80:18:dd:3b:eb:c1:67:
9d:d1:e7:c2:27:98:98:91:a0:fd:78:80:2c:75:09:
0b:a5:88:03:f8:3e:aa:f4:65:97:f0:1d:64:fd:f6:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:A0:5F:A9:52:1C:06:0A:BD:F7:8D:68:CB:A6:A5:53:9B:8B:3B
X509v3 Authority Key Identifier:
keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8c:61:6e:69:81:db:9a:88:69:c8:a6:23:89:58:bf:a7:66:
c9:78:d7:13:5d:8b:4c:db:08:7d:97:a2:ad:42:cf:2a:4b:8a:
57:5c:9b:1b:86:32:c0:c7:01:d2:33:5d:ec:87:cb:20:4b:00:
48:e3:6f:46:6f:f5:3f:56:95:0e:3b:d2:57:38:b4:04:d7:c6:
74:53:36:1f:cd:65:af:62:c7:90:18:b1:b2:b3:95:a1:ef:89:
f1:0f:45:8b:1a:e9:d9:2f:54:df:2b:1d:23:41:e9:1e:7e:fa:
5a:38:e9:24:9c:18:d7:82:2b:c3:2e:84:d2:bc:7a:cb:86:9f:
16:c9:1e:c6:88:77:32:4a:1f:75:75:5d:76:40:83:a6:3e:da:
10:99:1e:d9:81:64:c8:76:aa:f9:00:23:bf:da:cc:c5:df:83:
c9:0e:0a:dd:b6:2d:ea:29:19:d6:25:da:3a:6c:8f:da:b7:20:
7e:fc:5e:b9:f8:31:a1:ae:55:25:59:c6:53:57:0d:32:76:15:
44:68:9f:97:c7:f1:7f:a9:97:89:df:9e:51:41:7e:81:3e:27:
40:bb:6b:a4:95:e1:a8:58:d3:83:00:c2:6d:39:c7:d0:83:e2:
6f:ab:fd:97:80:f1:27:11:d7:1c:c4:23:da:49:98:c1:c0:5a:
59:50:81:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnyrNOuIwuEHlOjzfjiquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWM4NGNlZWM1N2IzNWZhMzk1MzRhZTIzMDA5YWVhODIw
MjM5YWEwHhcNMjUwNjA3MDkwMDU3WhcNMjUwNjA4MDkwMDU3WjAzMTEwLwYDVQQD
EygyMTk4YTA1ZmE5NTIxYzA2MGFiZGY3OGQ2OGNiYTZhNTUzOWI4YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Fcjw/ABegj9cZWDZvE18rS/w5K
6mWcUr41u5bkrrnMBQExsnuX7Wlz2smd3vclZf03zQI5QUMPx8kCWB/eR61iNA/S
7jhDpd4ooKzZRk7yAUThGLgUwTvaVxOTt7kWRnd1+nhEvyfCkWlqGmJ7rI+ufBm2
/xx/xTm3jzCjQpLoOteJzvrYP0jPWDqQoa5Nxy5ZxtEVOZ9ywE9e/vLEapIzsoLm
YFvaOPfoHmQOca07NOTJ5qyluAcKk0F0IALwBIOI2dQyNEPDRTavBgfoRmJaYOSx
/IBdNoAY3TvrwWed0efCJ5iYkaD9eIAsdQkLpYgD+D6q9GWX8B1k/fYctQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGYoF+pUhwGCr33jWjLpqVTm4s7MB8GA1UdIwQY
MBaAFCyshM7sV7Nfo5U0riMAmuqCAjmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYt
ZWRlNzBjOGVkNTEzLzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYtZWRlNzBjOGVkNTEz
LzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIxhbmmB
25qIacimI4lYv6dmyXjXE12LTNsIfZeirULPKkuKV1ybG4YywMcB0jNd7IfLIEsA
SONvRm/1P1aVDjvSVzi0BNfGdFM2H81lr2LHkBixsrOVoe+J8Q9Fixrp2S9U3ysd
I0HpHn76WjjpJJwY14Irwy6E0rx6y4afFskexoh3MkofdXVddkCDpj7aEJke2YFk
yHaq+QAjv9rMxd+DyQ4K3bYt6ikZ1iXaOmyP2rcgfvxeufgxoa5VJVnGU1cNMnYV
RGifl8fxf6mXid+eUUF+gT4nQLtrpJXhqFjTgwDCbTnH0IPib6v9l4DxJxHXHMQj
2kmYwcBaWVCB0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:04:44 2025 by rpki-client