Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier: 4pp+ygxYUrAGwCGqdTA3Wd2OlmoVl05rvz0zDlqet/A=
Subject key identifier: C9:85:1E:A7:A8:A4:D1:78:07:86:96:09:4E:B9:79:72:EC:81:7D:07
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 0197B7EA25B6E745746AD791B9DD256030DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number: 1249
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: zDCux19rLzt0whrnzQF/NIe1C+9eHdFFh1/yuAL1Fb0=)
2: f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa (hash: gXMbVjSWssRl5pUSyy0mfRaHyNZzTR/Z01nmT1EQCvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:25:b6:e7:45:74:6a:d7:91:b9:dd:25:60:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=c9851ea7a8a4d178078696094eb97972ec817d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:e4:2c:31:48:30:90:17:03:a2:61:b9:e8:
45:69:16:12:42:60:61:7e:7d:86:70:b0:66:b1:cc:
f7:96:c4:1a:19:ed:67:0d:ac:ff:0f:53:f8:c5:be:
71:28:21:ef:59:e1:15:4c:76:1c:2f:13:69:cd:71:
5b:c1:63:78:c9:3d:30:06:00:47:d0:4f:23:8d:9b:
ab:e4:6f:21:33:e2:61:f7:e0:c7:d2:98:79:a1:b5:
bf:da:52:40:05:11:62:88:e8:a0:b7:01:5a:07:d8:
45:06:cb:d8:43:0e:cd:25:a9:f6:af:3e:a9:61:60:
fb:84:f3:2c:78:88:92:f0:de:6a:11:5e:29:a2:96:
65:7e:46:5d:7d:6c:41:34:28:fd:bc:6d:e7:1f:10:
ff:0d:a9:15:6b:d9:5d:5a:21:89:61:70:6c:86:45:
e5:55:f8:6a:7b:f9:69:6d:1f:38:a9:46:6d:2c:70:
a0:55:63:79:5c:64:da:35:b1:58:d3:f9:c4:08:e9:
08:51:82:ce:ab:38:7b:92:56:b2:c8:35:7f:3f:79:
f7:81:69:1e:d0:e7:18:cd:9f:8e:d2:c6:f7:c3:be:
47:87:2c:30:af:c2:79:e9:2d:9e:67:7a:ea:47:b8:
0d:5b:77:3e:b9:3e:a5:15:78:c3:6d:a7:46:89:03:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:85:1E:A7:A8:A4:D1:78:07:86:96:09:4E:B9:79:72:EC:81:7D:07
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:0b:33:56:99:ac:37:38:ee:24:e6:a7:84:33:f8:5f:cf:
f8:54:50:24:e5:15:d7:ef:c1:2f:80:a7:b7:d3:bf:a7:bb:47:
0e:ac:10:e4:6f:68:d9:44:71:d7:17:1d:1a:55:5d:f0:df:fb:
74:5d:5c:4a:3e:7e:a0:45:83:82:5b:1e:4a:2c:58:2c:38:b7:
07:59:9a:ea:b4:a6:bc:cd:6c:6a:bc:d2:f5:e8:4b:a2:08:a5:
75:4d:9a:09:f5:3d:63:cf:94:a5:31:53:ef:b5:75:92:40:ba:
00:d3:61:7d:75:b0:b6:82:9d:3d:93:d2:b0:ac:1b:67:c9:fc:
be:4e:2b:87:04:a9:8b:73:e3:aa:c3:43:1d:eb:3f:c9:fb:67:
49:d0:aa:c3:74:4f:52:4b:d6:12:95:b8:a4:55:4f:6f:5f:36:
f8:e8:70:3d:cc:4d:6b:e4:a6:79:d7:55:70:2b:61:41:f5:cf:
1c:30:71:1a:18:27:41:a1:26:31:cb:c1:f6:16:65:bc:9a:cf:
54:e0:65:26:d5:4e:62:be:8c:95:51:92:82:fe:92:92:a4:cb:
ee:4e:23:e9:25:b6:dd:c7:aa:ca:b9:62:3c:6f:c9:f1:d7:cc:
77:54:31:a3:c5:14:15:41:39:b5:fb:f8:cd:b7:e1:e2:8a:02:
c5:0f:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:30 2025 by rpki-client