Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: dsM2/JLF0BJ3tm8+NiqiHkxFTIXCLX+wPg6Wqe1C5HM=
Subject key identifier: 2F:EE:B5:0E:6B:1C:93:58:34:F5:F6:B6:F0:A7:06:63:49:6C:26:F1
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 019771BF653B05DF57FED14AC2A6D71BF811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 158F
Signing time: Sun 15 Jun 2025 04:00:58 +0000
Manifest this update: Sun 15 Jun 2025 04:00:58 +0000
Manifest next update: Mon 16 Jun 2025 04:00:58 +0000
Files and hashes: 1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: 86/kB1MsVIPUlG5TyEmTNZaVBXbGFrCCXCI4AvE8qX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:65:3b:05:df:57:fe:d1:4a:c2:a6:d7:1b:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jun 15 04:00:58 2025 GMT
Not After : Jun 16 04:00:58 2025 GMT
Subject: CN=2feeb50e6b1c935834f5f6b6f0a70663496c26f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:48:f8:bc:96:11:39:e8:c0:fe:43:1a:31:
08:a8:c4:bb:b3:07:8d:db:d4:30:ac:67:35:05:a8:
a7:2b:81:65:3a:c7:63:b2:7b:fc:b3:61:57:46:a6:
d5:39:e2:3d:66:09:ef:04:6a:98:b7:a6:bb:64:a3:
cd:27:49:2d:54:e9:c0:6f:3e:cc:2c:fe:16:b6:8e:
96:65:0f:35:9b:5a:ca:d8:68:63:b9:fc:6b:6a:3c:
00:8f:e9:41:2d:75:08:4d:fd:7c:1b:de:db:a2:01:
7c:fc:08:fd:cc:15:8f:5e:43:91:58:58:e0:8c:50:
5d:92:8a:e1:05:81:f8:c2:15:9f:61:9d:43:16:08:
fd:1c:bf:0e:29:73:65:d5:06:c5:fb:f2:7b:72:7c:
07:48:fb:97:e0:be:bd:9f:6a:7e:af:3b:82:97:b0:
24:00:c0:e3:bd:18:3c:11:bd:4e:82:70:b9:44:50:
20:31:b7:24:30:c5:18:38:6b:b1:e2:cf:a6:38:de:
ce:fe:d4:2b:30:89:4e:61:da:99:9d:11:9c:72:20:
c6:4d:f2:51:2d:89:8a:2a:2b:37:38:2d:f9:35:7d:
b4:52:01:06:1d:50:40:f0:d4:52:11:76:43:a0:41:
3b:ea:5e:fd:1c:d7:ba:16:29:39:bc:b2:9c:b4:e0:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EE:B5:0E:6B:1C:93:58:34:F5:F6:B6:F0:A7:06:63:49:6C:26:F1
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:5f:e9:2e:12:87:b9:57:6c:7f:59:60:55:80:9d:9e:b7:
a0:ee:86:6c:38:e2:91:42:e3:f2:12:65:1d:a8:f4:84:61:a8:
46:73:f5:b6:d9:3c:89:bd:47:ae:0c:9d:42:ad:ba:5d:4e:bc:
1b:1c:f4:05:7a:89:10:27:5b:cf:bc:1c:02:c9:09:1c:36:99:
9f:65:fb:44:bc:53:a4:54:e2:14:ef:07:1f:6b:f5:b4:50:59:
38:91:f7:34:29:30:15:aa:e8:c7:94:19:80:0f:d4:75:e4:72:
95:32:bc:22:a5:d7:d0:c4:19:3f:49:2a:82:90:9c:2e:42:0e:
83:5c:f7:c5:cb:19:ae:95:be:38:bc:fb:88:de:20:99:02:4c:
78:16:bc:ee:31:ab:53:31:fe:5a:f8:45:c3:ae:9a:81:15:53:
bd:ea:88:bc:ea:06:ad:f7:9a:c6:8c:b7:1a:eb:5a:fa:d8:1d:
b1:cb:bf:e1:ea:26:3b:40:3d:8c:e0:88:4f:12:19:96:be:cc:
aa:a4:b0:09:cb:2e:11:da:f8:64:ee:3c:3f:35:5e:cd:f7:e0:
42:d8:be:d2:9e:25:16:0f:6c:a1:e0:d4:99:dd:82:ff:34:29:
07:38:90:af:42:0d:73:9a:d6:6e:f1:60:59:8a:5a:a4:3e:0b:
e9:14:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:03:44 2025 by rpki-client