Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File: LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier: TwCukHQocpIzgsOyM0bRdejKGJAmDqloONOnxwLsrm8=
Subject key identifier: FC:F3:55:25:B8:3D:81:AC:4C:E7:FF:14:9B:97:AB:D4:EE:BC:87:63
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 019849D2E3B1DE868E5E08CF2E425673CED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number: B6
Signing time: Sun 27 Jul 2025 03:00:14 +0000
Manifest this update: Sun 27 Jul 2025 03:00:14 +0000
Manifest next update: Mon 28 Jul 2025 03:00:14 +0000
Files and hashes: 1: 0ibK2rFO285XcmwVBGiaWy0mCcA.roa (hash: oJQ8kk++bxBUXY2O47Q7nsX7PbhR5uG9qTYOOM+oaS4=)
2: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: +zlaNNSu27J4HEanKG/VnNifh0XxQEd8W5dKIybl3O0=)
3: _GUEYp_ZvXFjTzg6X0GYxguDxqk.roa (hash: ILywVwzLVmDK7onvjHWRnavh4R3aawRApY/DmqcCPJA=)
4: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e3:b1:de:86:8e:5e:08:cf:2e:42:56:73:ce:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Jul 27 03:00:14 2025 GMT
Not After : Jul 28 03:00:14 2025 GMT
Subject: CN=fcf35525b83d81ac4ce7ff149b97abd4eebc8763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:27:f0:64:52:96:04:c3:dc:ec:6b:d8:6f:
56:e0:74:de:a4:f7:e1:bc:19:77:8a:f9:18:42:c8:
32:01:42:0d:41:83:07:6d:b0:3c:4f:f6:d8:c8:69:
1f:35:11:72:60:fe:fb:fd:d4:e1:15:10:83:c8:0f:
0e:b5:10:b2:42:47:d1:35:cd:6a:4a:8f:40:d0:9e:
c7:a3:06:a1:e8:07:64:14:b8:20:6d:ff:3c:7f:17:
5a:fc:c1:5f:c9:9e:3e:dc:18:7a:3c:ff:79:83:04:
fb:7e:7a:9a:ae:79:c0:46:42:fd:7f:36:a4:63:78:
e0:49:59:3a:b7:ad:bb:14:52:a9:f1:80:17:b6:6f:
91:e6:65:44:f8:bf:33:c4:e4:61:df:28:7e:5c:40:
5a:a7:62:12:ec:e6:5e:f0:ad:14:08:1d:a2:46:1f:
01:d5:43:c2:9f:57:51:3a:78:e7:17:e7:11:43:8a:
ad:1e:62:4f:8d:f3:05:8c:ea:26:16:21:c6:4d:6e:
d9:fc:b2:38:5c:6e:4a:e0:05:b8:78:db:9a:12:d8:
35:59:bc:1b:42:03:f6:f3:b3:e6:9d:32:3b:b1:99:
a2:77:cf:55:93:60:04:9d:3e:96:40:58:83:a5:8f:
a1:b6:65:94:7a:29:53:07:91:b7:c9:c0:07:0a:f9:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:55:25:B8:3D:81:AC:4C:E7:FF:14:9B:97:AB:D4:EE:BC:87:63
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a7:c6:dc:8c:f1:26:d8:61:0c:f6:ce:61:06:fb:21:fc:58:
6f:c3:b1:5f:c5:55:4a:f1:6a:ec:80:db:d2:d9:16:3f:a3:9e:
5e:97:b6:7d:60:01:a1:60:43:09:13:35:3b:d8:8c:7c:77:f5:
69:da:d3:d1:9e:4f:57:09:3d:b4:fb:0b:46:d1:5e:20:76:fc:
c5:2c:01:b3:cf:9a:98:9c:2f:0e:f9:ae:4c:43:28:d7:b9:5a:
5b:10:0c:89:9c:b7:f5:35:97:3a:43:33:df:b8:c6:97:02:b2:
73:af:a9:ae:b4:6c:f1:a4:92:85:73:4d:c9:af:0a:ec:f4:07:
37:ed:10:ed:29:05:17:b6:c5:b0:27:ee:68:b4:4d:8e:d8:b8:
5d:54:4b:56:f9:3c:4a:a7:1f:a3:93:23:9e:ba:74:b8:9d:5b:
5a:69:0d:aa:e3:67:9f:fe:22:6c:bd:1f:b3:22:93:2b:cf:70:
c0:b7:6e:ef:f9:3e:2c:8b:08:de:f4:e8:7a:f1:a1:3f:74:74:
6c:0d:96:ba:a2:d8:02:6e:38:fc:33:2d:f5:3f:6b:1f:2e:09:
24:a6:08:cd:bb:30:4a:f8:fb:3f:92:72:b9:fb:2c:39:5c:29:
13:16:c6:4d:3c:2a:54:19:79:8d:5d:1f:7b:93:a4:16:86:e2:
6f:fe:75:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0uOx3oaOXgjPLkJWc87XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTYxNTY3Y2IxMDk5ODU1MTE3MDA4ZmQxZDM2YWE4YWRh
OTZmYWYwHhcNMjUwNzI3MDMwMDE0WhcNMjUwNzI4MDMwMDE0WjAzMTEwLwYDVQQD
EyhmY2YzNTUyNWI4M2Q4MWFjNGNlN2ZmMTQ5Yjk3YWJkNGVlYmM4NzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK8n8GRSlgTD3Oxr2G9W4HTepPfh
vBl3ivkYQsgyAUINQYMHbbA8T/bYyGkfNRFyYP77/dThFRCDyA8OtRCyQkfRNc1q
So9A0J7Howah6AdkFLggbf88fxda/MFfyZ4+3Bh6PP95gwT7fnqarnnARkL9fzak
Y3jgSVk6t627FFKp8YAXtm+R5mVE+L8zxORh3yh+XEBap2IS7OZe8K0UCB2iRh8B
1UPCn1dROnjnF+cRQ4qtHmJPjfMFjOomFiHGTW7Z/LI4XG5K4AW4eNuaEtg1Wbwb
QgP287PmnTI7sZmid89Vk2AEnT6WQFiDpY+htmWUeilTB5G3ycAHCvmslwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzzVSW4PYGsTOf/FJuXq9TuvIdjMB8GA1UdIwQY
MBaAFCymFWfLEJmFURcAj9HTaqitqW+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYTcxNGUtYzdkMy00N2I1LThjNTct
Y2FhN2Q1YjQ4MmM1LzEvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYTcxNGUtYzdkMy00N2I1LThjNTctY2FhN2Q1YjQ4MmM1
LzEvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMafG3Izx
JthhDPbOYQb7IfxYb8OxX8VVSvFq7IDb0tkWP6OeXpe2fWABoWBDCRM1O9iMfHf1
adrT0Z5PVwk9tPsLRtFeIHb8xSwBs8+amJwvDvmuTEMo17laWxAMiZy39TWXOkMz
37jGlwKyc6+prrRs8aSShXNNya8K7PQHN+0Q7SkFF7bFsCfuaLRNjti4XVRLVvk8
Sqcfo5Mjnrp0uJ1bWmkNquNnn/4ibL0fsyKTK89wwLdu7/k+LIsI3vToevGhP3R0
bA2WuqLYAm44/DMt9T9rHy4JJKYIzbswSvj7P5JyufssOVwpExbGTTwqVBl5jV0f
e5OkFobib/51ww==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:52:37 2025 by rpki-client