Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: r+pjlZJqhI2yCCvKKZIZBSQSEEv8joUJSaY3291PN4A=
Subject key identifier: 56:4B:D8:BA:7C:F1:12:81:7B:EE:81:AE:2F:6C:3B:57:A6:93:E6:54
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 019A0F709F474A96D04FD13D7F41F6F9C307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 16EA
Signing time: Thu 23 Oct 2025 05:00:30 +0000
Manifest this update: Thu 23 Oct 2025 05:00:30 +0000
Manifest next update: Fri 24 Oct 2025 05:00:30 +0000
Files and hashes: 1: G2yz5IOuIAolOcaG3P6KU7S_ojw.roa (hash: YoDPpfODBV4pY6slsVIzzeOYSsO9aQhlE67f77Baq04=)
2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: 01OAjXn0gVlzA8iGtrOGRty2YPCBEcfmEMaDDv//vRw=)
3: U7qdvgQTZuazD7khWQNd3uaoOL0.roa (hash: Fj9WtkU6QlHWuY1U49vHtYwI5RRHEp1X8dmWs3lWyeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:70:9f:47:4a:96:d0:4f:d1:3d:7f:41:f6:f9:c3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Oct 23 05:00:30 2025 GMT
Not After : Oct 24 05:00:30 2025 GMT
Subject: CN=564bd8ba7cf112817bee81ae2f6c3b57a693e654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:b1:7e:3c:56:17:6f:ab:b6:cd:8c:3e:21:
f9:ad:48:c6:c0:34:3d:48:50:ab:04:43:7d:09:05:
59:b0:1e:94:94:4f:71:c4:03:d3:92:86:25:7c:6d:
75:89:5e:fa:eb:89:99:09:6b:0a:3c:3a:b5:fd:26:
23:85:1c:e1:6f:ce:53:67:f8:ae:83:2b:ea:87:64:
7b:ba:39:2f:d4:c0:8e:6e:bf:f1:f6:78:7b:18:22:
1e:76:26:60:bf:49:4f:df:3d:04:7e:89:2d:f1:b2:
dc:30:36:18:b0:40:23:e4:df:19:e8:49:53:83:62:
a3:54:1f:67:47:7a:a1:50:17:3b:2e:22:bd:3c:ba:
26:18:14:ab:5c:ee:81:6e:40:dd:f4:ad:a4:b2:89:
16:1b:fc:01:cb:d1:fe:ca:6e:39:fc:c0:5b:fb:cc:
b1:ad:b1:64:b9:b3:03:9a:64:31:6f:a3:b5:49:45:
69:eb:dd:0b:a8:52:47:fe:26:6f:b4:9a:29:f3:75:
6f:f1:84:b9:a6:43:94:b4:53:a0:7f:d0:de:46:7d:
77:55:04:ce:06:63:bf:57:b3:1e:38:19:fa:b0:79:
98:c5:b6:e0:12:18:24:fc:0a:53:85:38:2c:6d:15:
28:42:98:0c:f0:22:c1:13:a7:a3:01:c7:72:ff:06:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4B:D8:BA:7C:F1:12:81:7B:EE:81:AE:2F:6C:3B:57:A6:93:E6:54
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f4:b1:b0:7d:2e:9a:fd:91:57:5c:d7:dd:01:67:ed:83:09:
6a:96:21:9a:48:08:aa:53:a7:16:4c:93:6f:27:6e:8e:95:14:
8e:b8:66:a1:2e:a2:bc:c3:92:2f:28:75:55:99:a5:07:8b:dc:
af:62:da:3d:cf:48:f9:4b:ec:d0:1b:bf:fe:b3:31:80:16:8a:
78:f0:69:c4:64:1d:3a:30:09:76:cf:54:bc:1c:a8:f6:3f:ee:
fe:f2:b6:5e:a1:7f:a2:4f:ef:7a:0d:11:3f:9c:b4:4e:cb:1c:
40:31:11:ae:dd:e6:97:ec:c9:34:53:21:eb:c0:f3:40:85:39:
f0:2c:64:5d:7a:29:4b:17:da:64:8c:cc:04:3a:e6:cf:bd:9d:
7d:31:f4:0e:6a:0e:94:5f:97:1b:e8:c3:03:cd:d8:a4:c1:6a:
99:81:09:2d:5a:61:f8:4c:6d:45:21:7b:00:e6:ce:b4:9c:58:
24:2a:66:7f:4e:4f:a7:85:65:98:79:e6:71:4a:03:b8:4f:0b:
2c:aa:a0:43:5d:fb:6c:8f:8d:42:b3:d0:c1:80:77:0b:72:0f:
74:e1:e5:cb:73:db:58:ad:17:a7:b7:72:73:71:d2:3b:8c:5b:
33:ca:b6:7f:7c:ab:fa:14:8a:c7:3c:70:09:18:c5:ba:e0:99:
59:31:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:49:17 2025 by rpki-client