Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier: +tZQTys2qI2sZFxoh9tns5L6tHKLj5w7m+DP4vW2cvI=
Subject key identifier: 77:D3:1F:1E:BD:A0:98:E7:11:AD:72:62:21:CA:1F:CD:18:28:FF:7B
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 019650B63BD689161F5D799A110B74ECC3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number: 118F
Signing time: Sun 20 Apr 2025 01:00:42 +0000
Manifest this update: Sun 20 Apr 2025 01:00:42 +0000
Manifest next update: Mon 21 Apr 2025 01:00:42 +0000
Files and hashes: 1: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: tdpCJHRCehwT2j9a+8GtSBL60i6xkA79opmjirJg1ls=)
2: f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa (hash: gXMbVjSWssRl5pUSyy0mfRaHyNZzTR/Z01nmT1EQCvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:3b:d6:89:16:1f:5d:79:9a:11:0b:74:ec:c3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: Apr 20 01:00:42 2025 GMT
Not After : Apr 21 01:00:42 2025 GMT
Subject: CN=77d31f1ebda098e711ad726221ca1fcd1828ff7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:86:d0:6d:e8:8a:63:4c:e6:0f:13:88:68:
93:25:03:a8:34:bd:c0:f6:7c:bb:df:0e:77:92:ae:
c5:39:b0:6f:98:f8:44:c9:9d:bd:c5:85:1e:c9:cf:
e3:96:f9:18:d9:24:16:e6:4d:b0:68:ef:fd:d8:11:
36:66:7b:91:4d:61:c2:51:da:4d:d9:83:6b:83:ef:
fa:2e:fc:44:ac:c6:e5:07:7e:4e:3c:0c:f7:73:ed:
72:61:93:43:d2:0b:16:60:57:a4:fb:17:d3:6e:d9:
e7:00:6a:be:f9:3f:42:07:91:83:27:71:ef:52:1f:
2c:e9:6e:aa:b5:b4:87:ce:02:25:ec:07:93:30:d9:
01:3a:52:4b:10:48:8a:6d:10:f5:00:2a:b4:cb:ef:
8d:6c:6e:96:cf:ae:5a:a7:d5:d1:6a:25:7f:dc:ab:
c1:f5:30:75:48:83:7f:1e:95:4c:90:d1:ab:b7:4d:
00:0f:e2:b0:3e:6e:f6:ea:6c:13:89:40:3d:c5:e7:
1e:70:4c:b8:34:73:a5:a2:99:69:fd:59:97:10:80:
fa:9d:e5:d5:56:76:68:6e:07:f9:2b:1b:08:90:2c:
2e:07:83:da:72:53:47:42:b0:cd:da:3e:b3:c1:bf:
74:aa:5e:7b:42:17:9b:76:79:29:71:e2:4d:f2:d9:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D3:1F:1E:BD:A0:98:E7:11:AD:72:62:21:CA:1F:CD:18:28:FF:7B
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ab:86:af:70:f4:10:71:5c:ca:31:ee:e4:27:8e:94:d1:83:
de:a4:b7:ac:43:67:6e:a6:bb:45:a8:9d:2b:b5:a9:59:7c:c5:
8b:4b:ab:e1:16:b5:64:fb:74:7e:8c:6d:e0:4a:2d:55:49:12:
56:05:e6:e3:da:ad:7b:b5:25:ed:35:81:9c:8c:bd:43:2d:02:
12:2e:7f:77:5f:d3:85:4f:e0:91:0c:46:c5:4a:2c:fa:56:98:
6f:52:ed:73:73:9c:66:5b:0f:1b:d8:b1:2f:83:cc:df:66:29:
ad:70:1f:8a:f7:45:21:95:c6:60:28:d6:70:fc:18:09:37:5f:
06:71:80:a4:a8:89:9c:79:24:79:b9:80:ea:0c:ab:f1:8d:ae:
5b:bb:88:0f:ce:38:37:1a:00:8a:33:22:f5:9c:c1:82:48:d3:
e5:6e:ad:e7:16:61:ba:14:f1:60:0a:08:79:93:79:b9:2e:db:
20:5c:3a:44:85:c3:f8:b1:6e:61:72:a0:1f:9f:a7:e5:d2:f8:
ec:3e:3b:94:d6:b6:de:dd:3d:da:e6:41:33:e2:fb:61:77:9c:
65:13:6a:59:1a:92:59:88:ea:cd:7c:88:4f:ee:fd:03:ec:4c:
e0:71:8e:1b:72:57:6a:cb:66:fd:18:63:02:c7:3e:74:46:f5:
ca:1e:90:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQtjvWiRYfXXmaEQt07MP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTYxMzc3NDk1OTljMDNjN2I0NzJmMTQyYzcxOTY4MDAw
NmI2ZTYwHhcNMjUwNDIwMDEwMDQyWhcNMjUwNDIxMDEwMDQyWjAzMTEwLwYDVQQD
Eyg3N2QzMWYxZWJkYTA5OGU3MTFhZDcyNjIyMWNhMWZjZDE4MjhmZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeeG0G3oimNM5g8TiGiTJQOoNL3A
9ny73w53kq7FObBvmPhEyZ29xYUeyc/jlvkY2SQW5k2waO/92BE2ZnuRTWHCUdpN
2YNrg+/6LvxErMblB35OPAz3c+1yYZND0gsWYFek+xfTbtnnAGq++T9CB5GDJ3Hv
Uh8s6W6qtbSHzgIl7AeTMNkBOlJLEEiKbRD1ACq0y++NbG6Wz65ap9XRaiV/3KvB
9TB1SIN/HpVMkNGrt00AD+KwPm726mwTiUA9xececEy4NHOloplp/VmXEID6neXV
VnZobgf5KxsIkCwuB4PaclNHQrDN2j6zwb90ql57QhebdnkpceJN8tmv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfTHx69oJjnEa1yYiHKH80YKP97MB8GA1UdIwQY
MBaAFCymE3dJWZwDx7Ry8ULHGWgABrbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82ZmNmNjYtOGU4Yy00ZGJiLThjZjAt
NTAxOWQyYzM4OGRiLzEvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82ZmNmNjYtOGU4Yy00ZGJiLThjZjAtNTAxOWQyYzM4OGRi
LzEvTEtZVGQwbFpuQVBIdEhMeFFzY1phQUFHdHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKuGr3D0
EHFcyjHu5CeOlNGD3qS3rENnbqa7RaidK7WpWXzFi0ur4Ra1ZPt0foxt4EotVUkS
VgXm49qte7Ul7TWBnIy9Qy0CEi5/d1/ThU/gkQxGxUos+laYb1Ltc3OcZlsPG9ix
L4PM32YprXAfivdFIZXGYCjWcPwYCTdfBnGApKiJnHkkebmA6gyr8Y2uW7uID844
NxoAijMi9ZzBgkjT5W6t5xZhuhTxYAoIeZN5uS7bIFw6RIXD+LFuYXKgH5+n5dL4
7D47lNa23t092uZBM+L7YXecZRNqWRqSWYjqzXyIT+79A+xM4HGOG3JXastm/Rhj
Asc+dEb1yh6QpQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:56:25 2025 by rpki-client