Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: HKra3fzXibedK8gu/Po1rGaY1M6xet/mD66I7oxl5OI=
Subject key identifier: 09:63:42:15:94:02:3D:8F:94:BA:E2:FE:F8:62:9D:E8:CD:42:47:D9
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 0197605DA9F22CE3752660DBE28A13D06826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 19:00:40 +0000
Manifest this update: Wed 11 Jun 2025 19:00:40 +0000
Manifest next update: Thu 12 Jun 2025 19:00:40 +0000
Files and hashes: 1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: 0aUHWst1aU8HQJx3bxByMJ1KIuKRdhw3TYA7fkuLF5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:a9:f2:2c:e3:75:26:60:db:e2:8a:13:d0:68:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jun 11 19:00:40 2025 GMT
Not After : Jun 12 19:00:40 2025 GMT
Subject: CN=0963421594023d8f94bae2fef8629de8cd4247d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:42:40:74:8e:03:66:a6:d3:c7:db:c3:0f:
b2:17:6e:fc:13:9b:ed:9a:63:87:1f:7f:0f:83:d0:
23:98:43:fc:55:31:fb:c3:d8:40:0e:31:78:e3:10:
57:ea:80:f1:c1:4e:bf:b5:c1:3e:f5:56:7d:c1:56:
98:15:27:3d:72:3d:e0:51:a7:bf:01:17:e8:de:c4:
0f:c3:95:48:1e:61:52:42:b1:56:b2:5b:0c:e7:35:
7f:83:5e:cb:ee:a4:a4:87:03:35:3d:c6:13:be:19:
f3:aa:fd:89:16:c9:9f:27:82:9a:08:db:29:2d:ae:
6b:49:61:65:4c:8e:62:38:4e:b6:de:4f:be:46:63:
93:a1:a6:d3:6c:27:4a:b5:8b:fa:34:ff:65:87:c8:
ca:a2:ad:5b:5a:77:d3:a6:3b:a2:35:71:ab:b5:0d:
f9:1d:9a:a2:a4:c3:86:1c:08:14:fc:60:9e:05:fa:
09:1b:a8:f0:b7:73:1e:35:30:cc:54:20:4c:60:35:
12:6f:72:06:9b:b6:65:cf:55:65:f6:4d:3a:a7:23:
32:ed:52:12:c6:b6:71:51:01:e4:96:b6:c6:57:34:
07:b0:4c:09:fc:4c:a2:86:72:ef:67:39:cf:3f:c5:
cf:f1:90:7d:b1:1f:7d:55:c4:f8:ad:60:e4:66:8d:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:63:42:15:94:02:3D:8F:94:BA:E2:FE:F8:62:9D:E8:CD:42:47:D9
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3b:63:30:60:37:1f:b8:4d:5c:42:39:3c:35:6d:7d:ff:74:
e2:b0:62:79:1a:64:dd:93:ff:c5:c0:9e:20:68:e0:c9:44:28:
b9:fe:dc:c2:17:f6:58:39:36:50:50:f6:aa:3a:37:46:57:eb:
03:7e:35:83:4c:4a:cb:66:e6:84:7e:3b:f6:9f:4a:be:40:68:
d6:62:ea:2b:3d:13:0a:ad:cd:95:0e:c6:c2:b9:00:43:5d:78:
31:14:79:9f:17:a8:0c:6f:b5:20:3d:cb:1e:be:6d:e9:e6:b9:
1d:16:bd:cb:34:fa:8f:40:65:f4:2c:75:e5:60:7d:1b:ff:e5:
02:65:b8:ac:6f:94:9a:fb:36:41:08:ce:85:e2:48:c2:6b:c3:
8d:49:9c:c5:d0:49:4f:52:fa:6b:74:2b:8b:ee:8c:ee:e2:8b:
45:a3:28:af:cd:8d:c6:e1:30:f3:14:b7:24:97:3c:4e:e2:3e:
61:10:3e:e1:08:3e:64:d9:ba:6a:0d:fb:9d:70:76:60:31:06:
be:2f:2b:3a:f3:d4:ff:5b:41:28:90:02:c5:22:12:f5:f1:a6:
44:76:90:8b:4b:8d:bd:6d:a7:9a:a5:bd:58:90:50:ad:72:b7:
5c:9d:7f:29:71:7f:91:8b:a1:3f:4a:fe:6d:69:c2:01:8b:bd:
e3:f2:f0:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgXanyLON1JmDb4ooT0GgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjcwOWNiMzk5YzRlMTY4Y2NiZGExNmRiMTM2YjViYzhi
OTZkZDYwHhcNMjUwNjExMTkwMDQwWhcNMjUwNjEyMTkwMDQwWjAzMTEwLwYDVQQD
EygwOTYzNDIxNTk0MDIzZDhmOTRiYWUyZmVmODYyOWRlOGNkNDI0N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iJCQHSOA2am08fbww+yF278E5vt
mmOHH38Pg9AjmEP8VTH7w9hADjF44xBX6oDxwU6/tcE+9VZ9wVaYFSc9cj3gUae/
ARfo3sQPw5VIHmFSQrFWslsM5zV/g17L7qSkhwM1PcYTvhnzqv2JFsmfJ4KaCNsp
La5rSWFlTI5iOE623k++RmOToabTbCdKtYv6NP9lh8jKoq1bWnfTpjuiNXGrtQ35
HZqipMOGHAgU/GCeBfoJG6jwt3MeNTDMVCBMYDUSb3IGm7Zlz1Vl9k06pyMy7VIS
xrZxUQHklrbGVzQHsEwJ/EyihnLvZznPP8XP8ZB9sR99VcT4rWDkZo3TmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAljQhWUAj2PlLri/vhinejNQkfZMB8GA1UdIwQY
MBaAFC8nCcs5nE4WjMvaFtsTa1vIuW3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt
MjAxNjdjZDQyYjgyLzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy
LzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDtjMGA3
H7hNXEI5PDVtff904rBieRpk3ZP/xcCeIGjgyUQouf7cwhf2WDk2UFD2qjo3Rlfr
A341g0xKy2bmhH479p9KvkBo1mLqKz0TCq3NlQ7GwrkAQ114MRR5nxeoDG+1ID3L
Hr5t6ea5HRa9yzT6j0Bl9Cx15WB9G//lAmW4rG+Umvs2QQjOheJIwmvDjUmcxdBJ
T1L6a3Qri+6M7uKLRaMor82NxuEw8xS3JJc8TuI+YRA+4Qg+ZNm6ag37nXB2YDEG
vi8rOvPU/1tBKJACxSIS9fGmRHaQi0uNvW2nmqW9WJBQrXK3XJ1/KXF/kYuhP0r+
bWnCAYu94/LwKg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:09:38 2025 by rpki-client