Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json)
Hash identifier: DEq4TjeSUPgELeUtPjzuWCE3qXNhpYkJ73GAIIlHS6s=
Subject key identifier: D2:00:E8:E3:F4:09:1B:DB:26:E9:0B:47:76:63:EE:53:7A:2C:8B:20
Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa
Certificate serial: 0197B9A1B714618876F9A7E5090178C84F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
Manifest number: 07DC
Signing time: Sun 29 Jun 2025 03:01:12 +0000
Manifest this update: Sun 29 Jun 2025 03:01:12 +0000
Manifest next update: Mon 30 Jun 2025 03:01:12 +0000
Files and hashes: 1: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: KglpiQKVw3JVLHtXksNXhoVkQHPoBd0GVxl3reoUViI=)
2: cj0dff8EdsGG8DaopETeofzcldw.roa (hash: 06o/5+ZmJQt03Z2LLNo5k4a7U1bSw5gDTRAuW+tjkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:b7:14:61:88:76:f9:a7:e5:09:01:78:c8:4f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa
Validity
Not Before: Jun 29 03:01:12 2025 GMT
Not After : Jun 30 03:01:12 2025 GMT
Subject: CN=d200e8e3f4091bdb26e90b477663ee537a2c8b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:6e:d3:29:eb:2a:e2:35:d3:69:cc:f3:75:
02:5d:99:e5:67:e6:12:f6:31:ca:be:66:9d:83:96:
77:ea:2f:f4:67:0f:15:1b:e5:d1:ad:bf:fc:12:e0:
38:dc:28:da:f8:0b:4d:a4:39:36:5b:a8:a2:8f:6a:
a3:3a:a9:93:df:d1:f5:f0:61:24:d0:c9:03:c2:9f:
fe:ba:aa:f3:fd:c2:73:86:b1:f2:6b:49:ba:a8:4d:
45:00:ab:f6:e5:b8:17:53:3c:c4:a7:8b:22:fa:7f:
c8:dc:28:4f:6e:6b:ae:48:f7:98:72:27:83:ca:69:
a9:69:63:04:9e:60:7f:e2:9b:d2:33:b4:c6:27:84:
aa:e5:13:d0:5e:63:6f:90:ed:b2:d1:3e:46:80:45:
e4:57:ff:64:4f:8a:3f:ef:51:80:fb:d8:41:46:ec:
19:6e:40:c2:c3:f3:54:9c:cd:60:d8:56:1c:b1:01:
5a:88:86:6a:64:ac:e2:8c:53:31:88:a4:f9:79:47:
f6:ce:12:a0:0b:12:5c:51:e3:86:01:8f:bf:b1:54:
d3:3f:44:fc:14:05:c7:00:f4:f8:46:61:22:dd:52:
2d:20:e7:16:60:76:34:de:e2:86:21:56:17:cf:29:
f4:81:85:7a:93:db:43:ae:02:6b:3c:1f:6e:23:40:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:00:E8:E3:F4:09:1B:DB:26:E9:0B:47:76:63:EE:53:7A:2C:8B:20
X509v3 Authority Key Identifier:
keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a8:48:b5:72:c2:eb:e2:03:6c:09:b8:bf:06:6b:3f:ca:6f:
81:96:7c:7a:fb:80:4d:bd:99:41:09:7c:fc:32:af:68:40:2b:
2d:a4:d7:d6:f0:dd:a2:7b:c4:7e:ff:33:cd:eb:f5:ed:f3:69:
09:4d:11:d4:bc:d3:ae:56:cd:bd:c6:fa:23:11:41:04:69:bb:
63:8d:2a:d2:74:91:6f:88:61:ef:5b:ea:7e:c8:69:35:86:83:
24:2b:7b:61:d1:94:dd:8a:63:99:6a:dc:aa:5d:c4:ae:34:b8:
e6:ab:58:c2:d9:e7:1f:0c:08:35:6b:75:5b:cd:f9:93:76:3b:
72:bd:ec:6a:36:cd:90:11:e9:1f:8d:49:c4:a4:db:a4:a2:82:
b6:c8:9a:44:a1:90:56:56:f5:5d:2a:6b:7b:8d:f5:43:82:2b:
c7:15:95:f9:15:c2:44:c5:c7:b1:bb:46:20:e7:93:44:cb:25:
33:e1:2e:97:87:eb:0d:27:c0:a9:6a:82:73:27:8e:5e:1a:11:
e6:34:ae:d2:e5:83:cd:63:a6:29:e5:f9:71:a9:fe:58:c9:c1:
9b:e9:f4:23:d0:42:ed:fb:6b:8f:76:81:0f:63:aa:5c:32:a5:
a2:49:e0:0f:33:41:42:4d:ba:e9:4c:4f:07:a7:f5:89:27:4c:
ad:0d:e6:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5obcUYYh2+aflCQF4yE9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWM4NGNlZWM1N2IzNWZhMzk1MzRhZTIzMDA5YWVhODIw
MjM5YWEwHhcNMjUwNjI5MDMwMTEyWhcNMjUwNjMwMDMwMTEyWjAzMTEwLwYDVQQD
EyhkMjAwZThlM2Y0MDkxYmRiMjZlOTBiNDc3NjYzZWU1MzdhMmM4YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOJu0ynrKuI102nM83UCXZnlZ+YS
9jHKvmadg5Z36i/0Zw8VG+XRrb/8EuA43Cja+AtNpDk2W6iij2qjOqmT39H18GEk
0MkDwp/+uqrz/cJzhrHya0m6qE1FAKv25bgXUzzEp4si+n/I3ChPbmuuSPeYcieD
ymmpaWMEnmB/4pvSM7TGJ4Sq5RPQXmNvkO2y0T5GgEXkV/9kT4o/71GA+9hBRuwZ
bkDCw/NUnM1g2FYcsQFaiIZqZKzijFMxiKT5eUf2zhKgCxJcUeOGAY+/sVTTP0T8
FAXHAPT4RmEi3VItIOcWYHY03uKGIVYXzyn0gYV6k9tDrgJrPB9uI0AmlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIA6OP0CRvbJukLR3Zj7lN6LIsgMB8GA1UdIwQY
MBaAFCyshM7sV7Nfo5U0riMAmuqCAjmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYt
ZWRlNzBjOGVkNTEzLzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82ODdjZDUtNjM0NS00ZjY0LWJlNDYtZWRlNzBjOGVkNTEz
LzEvTEt5RXp1eFhzMS1qbFRTdUl3Q2E2b0lDT2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzKhItXLC
6+IDbAm4vwZrP8pvgZZ8evuATb2ZQQl8/DKvaEArLaTX1vDdonvEfv8zzev17fNp
CU0R1LzTrlbNvcb6IxFBBGm7Y40q0nSRb4hh71vqfshpNYaDJCt7YdGU3YpjmWrc
ql3ErjS45qtYwtnnHwwINWt1W835k3Y7cr3sajbNkBHpH41JxKTbpKKCtsiaRKGQ
Vlb1XSpre431Q4IrxxWV+RXCRMXHsbtGIOeTRMslM+Eul4frDSfAqWqCcyeOXhoR
5jSu0uWDzWOmKeX5can+WMnBm+n0I9BC7ftrj3aBD2OqXDKlokngDzNBQk266UxP
B6f1iSdMrQ3miw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:37 2025 by rpki-client