Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: xGHL0YuQIi2uZqQFj8qAaNoEMAa8SnDw1RKlJrcjxhA=
Subject key identifier: F0:F6:EE:E0:19:68:8A:0C:D4:F1:F9:6C:6D:00:15:D1:C6:CE:82:E6
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 0199FC2189CFF5BDA189FFE23F97A1314CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: G2yz5IOuIAolOcaG3P6KU7S_ojw.roa (hash: YoDPpfODBV4pY6slsVIzzeOYSsO9aQhlE67f77Baq04=)
2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: bra4NUnTYYhHy+l7K3oGJVCngN4cY5RBeLLr86Pvf4w=)
3: U7qdvgQTZuazD7khWQNd3uaoOL0.roa (hash: Fj9WtkU6QlHWuY1U49vHtYwI5RRHEp1X8dmWs3lWyeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:89:cf:f5:bd:a1:89:ff:e2:3f:97:a1:31:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=f0f6eee019688a0cd4f1f96c6d0015d1c6ce82e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:4e:c4:7b:ae:00:36:a9:a1:f2:3c:90:00:
8c:3c:78:e7:d7:cd:2d:b4:ee:ff:9b:5e:d4:cc:5a:
4e:42:42:04:ce:9a:75:67:42:de:b1:b6:5d:60:1f:
28:b3:4b:43:e0:10:99:2a:ef:12:11:a7:7b:77:0a:
b8:02:ad:ea:69:4e:d4:e7:7d:8a:88:7f:b6:b4:bd:
cb:88:63:94:98:a0:22:81:39:e4:ea:38:33:7c:90:
1f:49:7e:b3:e1:20:0d:4b:62:b6:0a:a2:1e:fa:4b:
72:7c:ee:ed:f0:6a:bd:31:cc:ca:63:d0:b0:d2:58:
ff:31:4a:01:5b:a2:59:7b:da:ac:1b:ca:c6:8c:8f:
32:77:47:1c:95:07:58:92:57:88:2b:f0:8f:a9:cb:
af:9e:23:d7:34:78:ba:0e:46:d3:57:f7:71:3d:b7:
84:58:45:7f:f3:9b:de:42:0b:64:bc:ec:4e:aa:46:
58:2a:e9:55:b9:96:00:c4:7c:42:33:6b:59:bd:22:
4f:cf:3b:a2:f3:3e:da:27:0b:f9:87:f3:96:b9:47:
ae:74:62:a0:5c:f9:88:fd:cf:ee:00:22:f5:17:b8:
08:6c:5a:8b:27:1c:d6:7c:e6:73:3d:5c:da:2f:72:
fe:02:bb:f4:74:08:1a:ee:e2:f2:f3:cd:97:ca:69:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:EE:E0:19:68:8A:0C:D4:F1:F9:6C:6D:00:15:D1:C6:CE:82:E6
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:41:a3:73:22:60:83:28:d5:b3:29:08:88:c6:2b:e8:bb:21:
ce:db:d2:f9:12:69:de:f0:b9:7b:ea:03:dc:87:47:aa:2b:da:
d8:29:d1:bd:a3:5b:d6:b8:f9:6f:6b:fa:6d:d2:1d:ce:68:02:
1c:ed:dc:51:b9:dd:5a:9b:b3:fb:a4:a1:fd:56:e3:62:0f:f7:
c1:56:e9:2e:b5:2f:1c:66:ff:87:58:b3:bb:32:bb:30:2e:84:
1b:55:71:07:58:52:e6:2c:31:05:f8:cf:e5:90:f4:17:e8:00:
cc:22:e1:4c:33:e3:12:db:53:e7:47:14:bd:45:07:f2:d7:06:
bf:f0:19:5b:5d:c5:ad:42:52:85:ad:39:9b:63:80:fd:e2:59:
c2:99:d8:66:e6:53:47:12:46:da:f2:8d:34:8d:ec:49:e4:22:
e7:b4:3e:8f:63:f4:2f:48:d3:80:64:89:cf:7e:b9:78:f2:ee:
2d:7b:2a:d4:d0:c9:27:0c:48:e9:8c:c7:5e:ae:b2:04:31:06:
71:58:31:3b:15:59:86:05:51:83:43:43:3d:a3:c2:17:47:eb:
e2:36:97:9f:31:b7:11:50:25:d2:01:46:16:c7:a1:0f:a2:9d:
49:e8:a6:50:5e:7b:43:9e:45:8f:20:3a:94:14:e5:c6:ed:43:
b2:05:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:29 2025 by rpki-client