Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier: OmsTM+fyK/fbsJ/0BSdT/j17HPuliAwsQe0khCTnTQY=
Subject key identifier: EC:B4:6A:D1:21:CA:BA:10:A8:75:D2:DD:29:1C:40:FB:42:8E:4F:73
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 019923317E55F867F5AE77E4EC333EAEFB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 08:01:09 +0000
Manifest this update: Sun 07 Sep 2025 08:01:09 +0000
Manifest next update: Mon 08 Sep 2025 08:01:09 +0000
Files and hashes: 1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: JMY+NwGz64b3HCuAR5cE4bBWwhpflUWyb9ir7qOPvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:7e:55:f8:67:f5:ae:77:e4:ec:33:3e:ae:fb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Sep 7 08:01:09 2025 GMT
Not After : Sep 8 08:01:09 2025 GMT
Subject: CN=ecb46ad121caba10a875d2dd291c40fb428e4f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:c9:66:e4:4b:0e:00:bd:57:ff:a9:b7:0f:
8b:93:4a:79:a3:4e:23:b2:66:cc:fa:a3:91:7c:fc:
08:d3:8b:e9:20:58:35:39:0e:0c:ff:6a:97:5a:2d:
76:b4:4d:ce:73:47:51:ec:45:98:eb:a9:2a:17:53:
27:52:af:0c:98:f3:0e:02:02:88:9d:a5:7d:9d:76:
0e:6b:19:9f:21:54:a6:00:a4:45:0c:be:fa:a9:20:
c9:13:a3:e7:d3:40:59:6d:d2:d1:53:30:0b:bf:48:
b6:8a:d7:2f:97:dc:ab:12:25:59:0f:c1:c5:f1:9c:
b4:78:0b:01:26:86:5f:62:aa:4a:57:69:64:0b:a3:
4d:e6:02:83:0d:57:ca:29:6d:f9:7d:04:15:80:90:
d6:d9:c2:c9:ce:24:64:f2:95:db:06:16:3d:20:a1:
e9:4a:9c:74:cf:ce:21:50:1e:32:83:9c:0d:89:20:
e7:b4:32:a7:c1:00:8e:1e:3c:33:5e:c9:78:c7:5e:
90:c6:9f:ee:e7:4e:39:7f:96:fe:93:ef:29:86:a3:
ed:08:29:b5:85:ca:74:99:e0:f4:1d:55:74:46:26:
28:98:ac:a0:ea:82:42:88:df:39:e2:15:79:68:7c:
8e:4a:ed:36:fa:6d:b1:21:e9:ed:f8:8c:9d:c9:a8:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B4:6A:D1:21:CA:BA:10:A8:75:D2:DD:29:1C:40:FB:42:8E:4F:73
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:99:de:a9:33:cb:8f:59:6f:97:ad:b3:a2:dc:34:ea:63:96:
d5:9b:ab:a6:cd:97:b1:4f:d7:ac:67:43:21:3e:aa:08:b6:c9:
7f:02:30:ba:f6:c5:ea:53:0a:10:1b:7e:c5:45:7e:d2:ca:8c:
89:a5:43:28:f1:7a:ab:2d:6d:9f:1a:71:fc:e1:d1:a7:c7:23:
ac:3f:44:63:d7:0d:eb:ad:2e:23:68:74:69:bf:8e:21:fc:d8:
d8:7e:3d:3b:62:a1:d9:09:55:07:f3:4e:73:b1:9f:cc:d3:72:
54:97:d1:95:29:85:22:da:e3:63:5b:03:a9:f9:a8:79:27:b7:
eb:c8:f8:00:67:fe:b0:9a:ea:6e:98:84:d4:8c:ff:e1:22:62:
28:c1:3d:15:23:db:92:94:c7:1e:a9:3d:ea:45:81:10:d4:6b:
48:1d:9b:03:6c:12:84:19:b8:ae:dc:9e:ee:27:15:2e:79:30:
0e:01:b6:8e:ef:e7:1f:3b:f2:1f:29:b6:67:d9:ea:51:ce:69:
89:f2:f3:cf:64:b7:40:fe:c8:0a:4d:58:11:a3:d0:57:b5:63:
0a:a7:62:19:53:09:c6:28:7d:ad:ba:24:02:5c:89:98:18:5c:
46:5f:63:e5:1d:1e:2b:db:5f:52:64:36:0e:2c:7f:df:8a:0b:
c5:e6:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:09 2025 by rpki-client