Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: KRF0k+OG0LPgn3055Nvum3y1uo5KY9QX+AYxu6ZSHQM=
Subject key identifier: 5C:51:78:87:1D:1A:DC:C1:AF:F4:6B:D7:F4:12:F0:DF:C1:4D:C6:35
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 01975E6F55C0B385740F9A438C7CE657C32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 10:00:44 +0000
Manifest this update: Wed 11 Jun 2025 10:00:44 +0000
Manifest next update: Thu 12 Jun 2025 10:00:44 +0000
Files and hashes: 1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: 1wMONeQLwxEjPRop3gT4FRCGJyF28I5v3t35bIBi/w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:55:c0:b3:85:74:0f:9a:43:8c:7c:e6:57:c3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jun 11 10:00:44 2025 GMT
Not After : Jun 12 10:00:44 2025 GMT
Subject: CN=5c5178871d1adcc1aff46bd7f412f0dfc14dc635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:c5:d5:80:68:a2:c7:9c:83:6c:f6:b0:66:
d9:8f:b7:ec:7a:48:00:7b:20:1a:80:ff:94:0a:7f:
6c:c3:80:b2:10:67:56:49:18:18:c2:7c:8a:6c:a0:
da:23:7f:2f:44:11:61:13:d5:f6:b9:b5:08:87:ae:
7f:6d:b6:dd:92:1d:03:fb:30:70:23:cb:ba:e6:3c:
be:dd:7f:aa:98:33:28:68:8d:49:8e:6f:93:d2:a7:
b0:b8:da:c8:6a:4d:83:c6:b5:1d:f7:e3:63:2f:8b:
c2:86:53:05:17:8b:8c:55:6c:bf:42:09:dc:d3:04:
1f:fa:d3:73:7e:20:ed:de:70:2b:86:f2:be:0b:08:
a7:0b:4a:d2:6c:4f:a2:fd:89:2d:9e:2e:7d:64:27:
27:bb:09:c7:a7:6d:f5:20:22:49:45:df:62:14:0d:
2b:ff:e1:be:40:49:ba:54:2c:b4:30:ae:d3:8f:2c:
9a:35:df:9e:ee:58:18:6e:50:0c:b4:27:02:c9:6e:
5c:70:e6:0f:9c:2d:09:b5:0f:75:1e:c3:df:85:ca:
c0:a6:a1:48:4d:1f:c0:1f:52:12:ec:09:52:5d:0f:
ac:c4:a1:c0:8e:ae:bb:da:6a:fb:1b:47:13:98:f4:
87:41:af:c0:16:8d:0d:4c:1e:e0:67:ba:a4:e6:b5:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:78:87:1D:1A:DC:C1:AF:F4:6B:D7:F4:12:F0:DF:C1:4D:C6:35
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:93:2e:c4:a5:42:af:ff:29:c5:07:33:eb:1d:27:f3:d8:
19:2a:42:d2:dd:2f:52:df:82:8c:ae:bc:5f:52:a7:40:ea:75:
4a:04:d4:af:94:15:34:06:bc:22:e0:2e:46:27:8b:47:fb:72:
4c:88:47:68:9c:66:37:5b:22:95:a2:31:6b:64:1f:d4:b3:1f:
11:31:4b:30:64:d1:a4:ab:99:f5:53:db:e0:ad:60:35:20:8f:
7d:31:a9:ad:57:df:fa:97:c1:64:39:24:47:7d:8b:f7:bd:83:
41:d1:bc:9d:60:cd:8e:ca:9f:9b:ac:77:de:51:94:6a:1a:39:
ae:58:e1:4d:bc:5c:d7:cc:38:77:e1:86:28:72:25:8c:cc:1d:
31:4e:2d:98:cd:42:20:d5:ce:17:7d:b0:66:35:17:b0:ad:fd:
19:2d:e1:06:6a:90:a5:b9:65:30:8a:42:ad:2a:3b:fa:45:3f:
5c:73:d6:93:4d:dd:83:5b:9f:d9:e8:c9:a6:ed:a7:24:b1:1a:
74:ab:1b:11:1e:47:f7:e5:d4:7d:14:ad:71:67:f7:96:98:e9:
ee:7f:e4:7d:dc:61:5d:82:b9:73:35:97:13:a5:e2:b2:10:11:
68:d5:41:82:09:a3:93:cf:68:1d:ca:73:fb:fb:6b:f0:36:20:
3f:3f:37:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdeb1XAs4V0D5pDjHzmV8MsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjcwOWNiMzk5YzRlMTY4Y2NiZGExNmRiMTM2YjViYzhi
OTZkZDYwHhcNMjUwNjExMTAwMDQ0WhcNMjUwNjEyMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg1YzUxNzg4NzFkMWFkY2MxYWZmNDZiZDdmNDEyZjBkZmMxNGRjNjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3nF1YBoosecg2z2sGbZj7fsekgA
eyAagP+UCn9sw4CyEGdWSRgYwnyKbKDaI38vRBFhE9X2ubUIh65/bbbdkh0D+zBw
I8u65jy+3X+qmDMoaI1Jjm+T0qewuNrIak2DxrUd9+NjL4vChlMFF4uMVWy/Qgnc
0wQf+tNzfiDt3nArhvK+CwinC0rSbE+i/Yktni59ZCcnuwnHp231ICJJRd9iFA0r
/+G+QEm6VCy0MK7TjyyaNd+e7lgYblAMtCcCyW5ccOYPnC0JtQ91HsPfhcrApqFI
TR/AH1IS7AlSXQ+sxKHAjq672mr7G0cTmPSHQa/AFo0NTB7gZ7qk5rVlvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxReIcdGtzBr/Rr1/QS8N/BTcY1MB8GA1UdIwQY
MBaAFC8nCcs5nE4WjMvaFtsTa1vIuW3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt
MjAxNjdjZDQyYjgyLzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy
LzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSeTLsSl
Qq//KcUHM+sdJ/PYGSpC0t0vUt+CjK68X1KnQOp1SgTUr5QVNAa8IuAuRieLR/ty
TIhHaJxmN1silaIxa2Qf1LMfETFLMGTRpKuZ9VPb4K1gNSCPfTGprVff+pfBZDkk
R32L972DQdG8nWDNjsqfm6x33lGUaho5rljhTbxc18w4d+GGKHIljMwdMU4tmM1C
INXOF32wZjUXsK39GS3hBmqQpbllMIpCrSo7+kU/XHPWk03dg1uf2ejJpu2nJLEa
dKsbER5H9+XUfRStcWf3lpjp7n/kfdxhXYK5czWXE6XishARaNVBggmjk89oHcpz
+/tr8DYgPz83IA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:25 2025 by rpki-client