Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json)
Hash identifier: ogqrH1BdXVYJxK3yAmwUvwqnAJU7mo1I9tWBOraOIso=
Subject key identifier: BF:EE:1E:D4:34:62:43:10:73:B7:B0:CB:A0:CE:40:E7:DD:1C:8E:52
Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa
Certificate serial: 0198D583DA57C4A3BA572662A8192388D11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
Manifest number: 086F
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: a2QjPgr2O8mNvlYOEP1E3W4KfciYnV8b1EliGxnWQ/k=)
2: cj0dff8EdsGG8DaopETeofzcldw.roa (hash: 06o/5+ZmJQt03Z2LLNo5k4a7U1bSw5gDTRAuW+tjkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:da:57:c4:a3:ba:57:26:62:a8:19:23:88:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=bfee1ed43462431073b7b0cba0ce40e7dd1c8e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:c4:b1:d0:66:0a:8d:b1:50:6e:1b:43:7b:
97:44:a9:88:d8:8c:54:f6:a3:85:4a:f0:5a:5a:e9:
8f:c0:23:7f:37:ef:4a:7c:f6:03:ed:65:97:5c:fc:
22:c6:c9:4d:3c:81:0f:2c:1a:03:1c:f7:c5:9a:0d:
72:16:ca:67:85:33:ad:ad:4e:f6:f9:c7:01:af:e2:
d0:35:00:6b:a9:0f:59:55:ad:5a:5b:67:7a:e7:36:
05:bf:b4:21:05:ec:90:30:a7:72:a5:e8:fa:a1:44:
e4:b9:da:c8:fe:4d:6f:e3:c5:83:dd:96:94:d0:a6:
43:f2:f4:95:f5:f7:44:87:65:3d:9d:c8:b8:77:cf:
28:4b:1c:2d:ec:be:73:98:be:fc:5e:94:c2:99:1c:
b9:3b:a1:b8:40:d6:c8:4e:66:be:05:e9:a8:b4:c1:
d4:f8:a4:2e:54:75:65:52:aa:f2:50:3e:9f:26:4c:
94:cb:5f:7f:97:b6:6b:4e:62:57:25:d8:a1:81:77:
15:ff:80:59:df:f4:c5:06:c2:9a:70:13:40:28:50:
30:e1:e7:d2:19:2f:55:12:c9:ec:8a:da:e0:fd:8a:
3c:b9:0c:f3:6d:8e:8c:a8:af:bc:1b:ae:4f:57:02:
e5:1f:39:01:40:2c:73:13:2c:5a:90:17:1e:c2:2a:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EE:1E:D4:34:62:43:10:73:B7:B0:CB:A0:CE:40:E7:DD:1C:8E:52
X509v3 Authority Key Identifier:
keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a5:cd:2e:de:33:00:a7:67:0f:35:30:14:90:83:ea:e6:3c:
8d:3f:f2:ba:e2:0e:55:54:59:ef:e9:27:d9:20:16:94:b3:aa:
03:ac:f6:4c:c1:62:c7:77:f5:79:6b:6b:02:5e:2a:12:fd:b0:
e5:37:55:2f:df:d4:ab:cb:af:3c:15:f8:cf:2e:30:d8:29:ff:
40:76:c4:b1:33:c5:db:f2:07:75:ec:66:65:99:ce:f0:d7:ac:
fc:09:51:a6:e6:76:0c:79:7f:59:b0:ac:1f:61:cf:da:82:3a:
d3:93:07:99:68:aa:ad:7b:ef:3f:6f:b4:ec:94:d3:ad:44:6f:
9a:4b:a0:30:dd:8b:b0:33:06:3a:c8:c9:e4:9d:90:f1:30:80:
55:1f:c5:01:3f:e7:f1:25:4b:c8:18:52:85:60:58:b9:de:4a:
96:6c:3a:b5:2e:17:d2:e7:89:60:35:61:01:56:92:6b:dd:13:
6b:14:77:7e:92:f7:0b:87:95:74:4f:7e:dc:23:85:ff:d9:f3:
8b:d8:d8:aa:94:c4:e0:63:aa:94:c6:7f:06:e1:7a:f0:97:45:
54:89:67:05:f5:86:1e:4f:02:81:9d:93:0c:bb:bf:92:07:62:
5b:5b:6a:72:75:7d:f3:6f:a5:6a:fd:ee:1d:ec:73:89:09:80:
a0:8a:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:20 2025 by rpki-client