Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File: LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier: BDJHhmgMu968iX5ZL6Zz/g4sZuoKRfxl14YltcDXuRw=
Subject key identifier: 9C:06:83:73:3D:B7:D4:D2:F9:CF:B8:E6:7D:CD:66:16:DD:65:20:A7
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 01974A0CDE76CE91399341934454D992D27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number: 31
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: XRW73WKemQdxTxsglYzMLIqXeRsgERUfKB/4tInC9r8=)
2: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:de:76:ce:91:39:93:41:93:44:54:d9:92:d2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=9c0683733db7d4d2f9cfb8e67dcd6616dd6520a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:18:5c:96:af:0d:77:62:0c:9f:0d:78:49:
ff:65:ce:a4:0f:38:b4:e0:d8:68:ca:f0:23:17:0d:
0e:b1:48:17:3c:72:4e:df:16:0b:0f:61:6e:6d:28:
85:c7:83:23:da:b0:1e:b7:f4:d6:d5:6b:41:d6:01:
39:be:ee:bc:a6:f0:ee:a1:33:d6:c5:40:8b:52:60:
e0:ce:d9:d0:79:3f:b4:2a:78:1b:98:2e:dd:01:c0:
5c:ee:5b:80:23:59:c5:08:9e:1c:38:11:af:8e:37:
d4:2a:e2:5a:83:cc:ec:c2:42:58:a9:25:bd:d8:ce:
22:e7:09:33:41:81:de:34:d2:fc:e0:99:03:c3:bb:
00:fa:26:80:8d:5a:3b:4e:38:54:6e:03:85:18:01:
7c:1d:54:d4:1c:c1:f0:df:b5:16:52:f6:c1:0a:38:
17:1e:f1:60:93:2f:e0:7e:77:66:57:10:30:c3:1b:
58:d0:70:3f:f3:fb:28:e0:fc:a8:7f:90:e4:c4:3d:
8c:cb:f6:b5:a0:ba:60:7a:e6:07:ba:a1:60:49:3c:
be:26:df:47:d3:cc:31:3a:60:78:92:eb:e3:a9:c0:
c5:2d:e3:cd:b1:d7:da:7a:14:58:9a:21:5d:10:3f:
27:40:40:24:c8:b8:a2:88:e4:6d:d7:89:70:00:93:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:06:83:73:3D:B7:D4:D2:F9:CF:B8:E6:7D:CD:66:16:DD:65:20:A7
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:9f:18:ec:86:c6:7c:97:91:37:f2:07:bf:a4:2d:f1:4f:28:
28:03:cd:ed:d1:a7:51:63:b6:31:18:cf:be:a6:11:d5:87:c1:
29:8e:06:1d:cc:fd:81:84:96:82:9d:83:47:37:d0:59:87:41:
90:8e:85:1a:f4:93:88:22:74:56:c8:2f:5e:9d:15:30:90:31:
80:79:c0:0d:1e:7d:8d:88:1f:2e:d3:49:88:d1:d9:0b:14:cb:
98:c5:f4:d2:bc:9a:66:b6:59:a4:a3:60:69:6a:33:d1:5e:d8:
c2:b1:cb:38:4f:2c:9e:58:e0:e5:b8:28:03:34:cf:48:62:f5:
17:a5:a7:ac:45:92:0f:4e:e5:fc:09:16:91:e4:b2:3a:83:3e:
16:78:88:9f:56:d2:15:f5:67:20:2f:a2:3c:c6:bd:fe:6a:9f:
5a:93:24:d1:72:53:98:c8:90:fc:83:19:cc:d3:78:f1:e2:d9:
13:3b:fa:c3:5f:cf:7b:d8:eb:72:96:3f:74:ac:65:4e:0c:03:
df:5d:59:22:9b:cb:b3:a2:28:dd:14:b8:06:0e:0e:eb:d8:32:
7a:3b:b7:53:52:91:69:b2:74:2a:95:ba:c9:be:27:90:fc:1c:
2e:8d:83:0c:13:18:cc:1f:ad:3d:5f:ad:fc:fb:8e:39:7d:8c:
58:de:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:35:05 2025 by rpki-client