Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: KLAR9Y7rftGa4+8wguKrLjd5sxFIp0PGNCS/FiLJjRU=
Subject key identifier: 05:EB:AF:E1:3F:17:CE:9D:29:82:EA:E3:93:1B:6E:C7:99:40:2F:67
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 019768178F62BEFDA771D7218CF15AF3A443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 07:01:03 +0000
Manifest this update: Fri 13 Jun 2025 07:01:03 +0000
Manifest next update: Sat 14 Jun 2025 07:01:03 +0000
Files and hashes: 1: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (hash: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=)
2: HnWetEwt9SfzrdVumCWXipTmrGY.roa (hash: qo1xu7/QgUA3jqTLkS8KxhBD7n5/N/B5fF5rrLaAkS8=)
3: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: CJ6RDDHPbcdlGHYe5emgVqMWGna0DqzbA6OVMOmH4kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:8f:62:be:fd:a7:71:d7:21:8c:f1:5a:f3:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jun 13 07:01:03 2025 GMT
Not After : Jun 14 07:01:03 2025 GMT
Subject: CN=05ebafe13f17ce9d2982eae3931b6ec799402f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:15:b5:59:cd:33:ea:85:e6:af:99:e4:04:
4e:0f:f3:ba:31:bb:f2:31:58:dc:d5:26:61:11:2b:
7e:06:2a:7d:6d:7b:9d:48:44:36:a0:a9:d2:58:97:
d5:87:5d:38:36:13:a2:c6:67:83:da:14:88:e0:2a:
48:18:7b:01:47:2d:da:f6:ae:ea:ad:be:4b:08:cc:
31:f4:a8:e9:79:b0:f4:7d:a0:2f:27:89:ca:1a:4a:
5c:12:42:f7:54:6a:41:da:87:a7:68:53:4c:a9:98:
65:53:b3:cb:14:20:42:87:ee:bf:24:1f:68:50:dc:
f7:ff:f9:b1:13:b7:1b:66:c9:26:15:b8:56:22:26:
6a:70:7c:e1:af:9c:a1:73:50:23:e1:ff:e6:55:78:
9d:44:71:da:c1:d5:7c:87:ee:11:94:c9:c3:47:99:
ce:5c:3f:fb:15:d5:de:0a:99:e3:83:56:7f:c4:02:
a5:b4:a6:94:1b:06:ca:90:07:dc:02:99:9f:10:5d:
d5:15:e1:ed:eb:3e:9c:93:b1:94:11:b5:d6:23:5f:
21:66:7a:83:3e:09:8f:a4:43:27:70:18:ef:18:a3:
94:7f:44:ee:aa:80:0e:4c:2c:39:a9:6d:14:9f:3b:
43:62:ec:59:d5:ba:bc:05:c0:85:3d:a7:5e:c5:37:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:AF:E1:3F:17:CE:9D:29:82:EA:E3:93:1B:6E:C7:99:40:2F:67
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d6:e6:d1:94:2d:79:12:2b:35:10:8a:72:63:05:97:4c:ed:
73:85:1e:50:ce:24:bc:c4:70:f2:85:39:00:b8:e0:6a:92:2b:
75:75:04:47:d7:4c:c5:5f:65:01:af:fa:7a:ef:47:1d:67:f0:
e2:40:fd:83:33:6b:7c:de:d0:9c:de:eb:22:fb:dd:65:04:43:
6b:02:1a:ca:6c:15:56:7c:90:63:19:1e:52:87:0e:a0:cf:55:
5d:33:79:fe:a3:b5:96:86:12:d0:d9:84:4c:08:18:e0:d4:10:
62:07:76:72:c7:4d:c6:d4:ac:b4:6a:43:55:85:07:9e:64:30:
c7:84:df:53:18:ca:5e:d6:99:b2:28:12:39:05:b3:d1:1b:33:
86:de:6d:1d:ac:88:95:b1:85:a2:df:ec:ed:1e:dc:66:3b:16:
03:1e:ed:9a:f6:f3:fa:c9:f2:61:9c:dc:1d:74:64:ac:0f:ad:
17:0e:f6:82:7d:73:91:1e:bc:41:f7:36:ac:a9:cd:4c:cc:ef:
ca:db:2e:74:3a:b8:8c:12:82:13:78:45:4f:e1:2f:b1:af:56:
1f:fb:5e:c3:7e:2f:a2:c8:d2:a0:4b:55:25:1a:38:ff:af:14:
91:e4:25:76:f9:0e:6e:99:e6:15:46:76:8b:32:60:fa:b3:cb:
6f:08:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:07:11 2025 by rpki-client