Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: V33U8AqJEbGGL+8nhvleomAjGiX2Hw8AY8d4Vwg1Bnw=
Subject key identifier: 06:39:87:4C:F5:DA:6C:88:12:56:94:74:3A:25:71:0A:8F:92:CE:11
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 019923D621A579F2C3F1B62069456BAA0D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 11:00:59 +0000
Manifest this update: Sun 07 Sep 2025 11:00:59 +0000
Manifest next update: Mon 08 Sep 2025 11:00:59 +0000
Files and hashes: 1: G2yz5IOuIAolOcaG3P6KU7S_ojw.roa (hash: YoDPpfODBV4pY6slsVIzzeOYSsO9aQhlE67f77Baq04=)
2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: lBfJB/UW6sv+IQHxjUzLZXq4AHlayl9UKQpLxSR9+I8=)
3: U7qdvgQTZuazD7khWQNd3uaoOL0.roa (hash: Fj9WtkU6QlHWuY1U49vHtYwI5RRHEp1X8dmWs3lWyeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:21:a5:79:f2:c3:f1:b6:20:69:45:6b:aa:0d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Sep 7 11:00:59 2025 GMT
Not After : Sep 8 11:00:59 2025 GMT
Subject: CN=0639874cf5da6c88125694743a25710a8f92ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:ec:2d:ff:c4:41:ae:34:ea:37:28:0b:86:
49:a0:d9:fd:65:d6:9c:5d:9e:12:22:55:93:2e:29:
da:cb:cc:20:01:12:de:f1:15:42:b7:59:8e:b3:95:
cf:63:19:5f:93:ce:0b:e5:97:5b:d7:a2:a6:ac:aa:
70:77:4f:01:6a:e5:33:34:ce:3a:2d:72:61:07:ef:
23:57:94:75:89:59:b9:77:5f:f9:f4:f8:a7:96:7a:
24:5a:10:3d:07:60:1c:a9:96:0e:63:a4:86:75:41:
19:1e:5b:07:fa:fd:26:e9:6f:cb:29:e8:5e:e2:2e:
22:da:11:17:69:30:22:48:42:30:49:0b:4f:68:11:
37:49:da:4b:c1:ef:5e:19:6d:97:88:d6:17:12:50:
de:0e:ec:bc:7a:06:dd:61:68:ee:ed:95:52:46:90:
45:eb:bf:d1:7e:da:bb:e9:1a:10:a0:56:e5:43:4c:
2e:e5:65:a6:45:f9:99:0e:89:1a:c6:3d:58:38:89:
b8:65:4e:66:ee:7f:5d:f1:37:82:2c:d9:3b:c2:2f:
3a:73:8b:cb:dd:ff:af:52:0a:a9:12:ef:1d:82:dc:
e9:95:ac:cc:e5:c8:45:43:6f:c4:8a:37:74:1a:ba:
c4:4d:27:59:03:13:00:c2:09:d4:09:f0:bb:05:e3:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:39:87:4C:F5:DA:6C:88:12:56:94:74:3A:25:71:0A:8F:92:CE:11
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a1:2b:3a:18:93:4d:ff:b1:f3:f2:c7:4a:02:9c:51:8d:fb:
8c:95:d4:08:24:c1:6d:a0:7b:ca:5d:21:3e:6a:a2:fa:ae:b8:
67:6c:c4:dd:e9:e4:4a:99:d1:de:90:a0:56:25:c8:9a:44:3c:
ea:33:58:e3:c7:1a:fe:11:2e:67:06:69:45:7e:fd:43:95:af:
81:0d:69:cf:2e:9f:fa:57:06:fd:83:8a:fb:f2:f0:15:55:c7:
99:fc:c1:08:66:c2:46:7b:1f:40:75:3b:01:01:4d:fd:59:e5:
84:64:74:a2:49:25:f6:6d:f0:94:11:a8:fd:3e:a4:15:32:89:
02:bd:b4:95:27:19:c0:c4:78:33:0b:17:9d:ad:35:4c:00:ac:
90:30:bf:07:63:1b:b8:a5:a9:1e:31:4a:bd:ab:00:17:37:0d:
af:b5:20:e5:1a:51:c9:4c:5e:8a:ae:37:83:95:3e:bc:0b:e3:
f2:c2:61:0c:e3:88:b5:a7:ea:c9:d7:8e:ee:f5:bd:32:23:a2:
6b:ab:fc:36:e8:69:98:09:a4:86:54:47:23:bc:e1:1d:a1:68:
8b:a3:aa:de:67:5a:22:2f:c8:ab:0f:2d:71:62:16:99:08:9d:
92:e1:2f:64:c4:70:2b:39:7b:02:ea:2d:26:8a:65:0f:b9:14:
2f:25:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:59 2025 by rpki-client