Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File: LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier: EMRTcocsllTAnshCsa5b7koKGB0z8gFB8tdwFxmbKhw=
Subject key identifier: 9D:4D:30:21:83:7A:40:3C:87:5F:B2:E9:5E:BA:4C:85:94:BE:98:49
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 0198D6CDFFB1377BD94F48E054299AD843D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 12:01:21 +0000
Manifest this update: Sat 23 Aug 2025 12:01:21 +0000
Manifest next update: Sun 24 Aug 2025 12:01:21 +0000
Files and hashes: 1: 0ibK2rFO285XcmwVBGiaWy0mCcA.roa (hash: oJQ8kk++bxBUXY2O47Q7nsX7PbhR5uG9qTYOOM+oaS4=)
2: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: 4DTYqTulG6WS6sVLF967pWxD/wyR0vtaI5KGfjmFfNo=)
3: _GUEYp_ZvXFjTzg6X0GYxguDxqk.roa (hash: ILywVwzLVmDK7onvjHWRnavh4R3aawRApY/DmqcCPJA=)
4: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ff:b1:37:7b:d9:4f:48:e0:54:29:9a:d8:43:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Aug 23 12:01:21 2025 GMT
Not After : Aug 24 12:01:21 2025 GMT
Subject: CN=9d4d3021837a403c875fb2e95eba4c8594be9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:79:4b:47:73:75:7e:65:c4:55:59:4c:dc:
15:44:bb:54:ca:a9:20:68:88:ef:64:a8:da:dd:7f:
0b:e8:f4:ce:0f:8a:b9:69:be:20:ff:d8:95:85:fa:
20:e5:ed:9a:cb:09:76:bb:b0:7c:10:88:67:f5:37:
c5:35:24:c2:62:e7:43:1d:6c:9e:38:68:80:f9:01:
a2:04:57:85:1d:b1:b5:41:c8:d3:13:76:0f:aa:02:
3f:95:99:ec:b2:29:2a:98:59:6d:c7:80:fa:cf:40:
d1:1d:5b:03:0d:61:e2:60:fb:98:9c:3c:ec:ef:73:
d1:36:f5:7e:d4:c5:ef:d0:42:18:6a:9b:5e:ee:8f:
c0:4a:42:1f:33:af:37:82:a4:83:0c:2f:76:e0:db:
0d:d7:b7:43:6a:e0:94:ad:21:1f:6f:70:77:37:dd:
bd:c3:5e:7f:9a:9a:36:46:5a:86:5b:13:07:2a:4d:
4e:8a:43:60:3b:45:97:5f:b9:93:5e:52:2f:d0:1e:
ef:8d:e0:15:2b:5c:8f:9d:44:c0:0f:fd:b0:59:93:
f7:38:0c:58:28:4a:7c:cb:52:f0:9d:06:9c:05:11:
e5:96:47:98:86:43:d0:7e:25:c8:0e:b5:3b:cd:a0:
08:f6:d6:e9:97:a6:be:04:dc:e7:c7:e4:72:bb:45:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:30:21:83:7A:40:3C:87:5F:B2:E9:5E:BA:4C:85:94:BE:98:49
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:96:c4:9e:37:8f:d1:6b:78:de:6a:90:67:49:98:a2:4f:21:
e9:eb:07:ff:c9:26:7f:66:53:e8:5c:03:50:03:1b:ad:93:a2:
60:59:b5:41:fc:ba:5e:67:4c:d2:54:bc:f6:7a:c4:76:eb:08:
4b:c5:20:31:d6:34:77:4c:b4:16:a4:3e:fe:40:9a:6b:cb:73:
05:4c:94:0e:0e:f1:ec:7b:9f:93:9f:ec:37:5b:84:ac:e3:1c:
24:80:34:2a:31:0f:a8:6b:d2:1e:30:ac:7b:6f:98:47:68:a5:
72:2e:cd:50:38:3b:b1:98:6d:9e:f0:bb:5b:27:41:5e:7b:84:
cf:ad:a0:a5:39:0d:b1:5b:54:ac:1a:6d:1d:b5:c3:0f:7f:e4:
5b:f0:94:1e:1f:55:8b:fb:45:1e:e2:04:90:f9:f6:1b:ef:2c:
70:39:2e:31:60:92:b8:5f:86:07:f9:19:f5:44:92:cf:47:23:
8e:11:b8:bb:87:43:75:b0:20:13:2a:4b:2a:ed:2a:c7:84:fc:
b3:3a:96:4b:a3:bd:92:d5:63:8d:54:2f:0b:ac:aa:ad:ea:82:
5e:47:2d:f2:91:d9:a1:96:5e:64:58:f8:c5:b5:43:f6:c1:6f:
f1:ac:ae:3c:60:43:55:f3:06:b3:5b:a2:ad:c3:11:c3:ed:a4:
fa:fe:4c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:08 2025 by rpki-client