Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: RNUACk6rsdShmZdRk11SiGi2JAPUXsC/FXrMOKcxb7U=
Subject key identifier: B8:17:64:07:8B:94:34:78:97:39:50:A8:F3:D0:D8:91:C2:A9:6D:2E
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 019892FF0802F2EEA0742A59FFAE07EB3FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 08:00:43 +0000
Manifest this update: Sun 10 Aug 2025 08:00:43 +0000
Manifest next update: Mon 11 Aug 2025 08:00:43 +0000
Files and hashes: 1: G2yz5IOuIAolOcaG3P6KU7S_ojw.roa (hash: YoDPpfODBV4pY6slsVIzzeOYSsO9aQhlE67f77Baq04=)
2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: YUtmrekGpnUMPiAi8xWi9ZS3YLycoDtetbl6zmPJHwU=)
3: U7qdvgQTZuazD7khWQNd3uaoOL0.roa (hash: Fj9WtkU6QlHWuY1U49vHtYwI5RRHEp1X8dmWs3lWyeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:08:02:f2:ee:a0:74:2a:59:ff:ae:07:eb:3f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Aug 10 08:00:43 2025 GMT
Not After : Aug 11 08:00:43 2025 GMT
Subject: CN=b81764078b943478973950a8f3d0d891c2a96d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:5f:9e:66:c5:15:c7:c1:bb:9c:0d:65:86:
68:38:9a:70:39:91:29:88:94:1c:53:6e:c7:f0:25:
ab:96:44:87:64:3f:9a:98:40:ea:8f:d4:f2:cd:17:
34:7c:07:54:e5:e8:be:2a:d1:7e:1f:ba:d8:e3:f1:
3a:99:9b:c2:ac:a9:de:a1:a1:1b:46:f8:82:a0:0e:
d0:67:3e:c2:35:e4:e2:00:71:e5:0c:a9:18:68:50:
f0:07:41:09:f1:fc:64:a5:a7:1b:a7:60:4f:7c:30:
a0:33:f6:94:c2:7f:3e:ed:4b:a8:aa:5a:34:a4:19:
1c:b1:57:bc:1c:ba:69:1f:36:e6:d5:cd:25:31:40:
43:53:05:74:76:33:ae:67:bb:dc:13:2e:ed:00:2e:
d9:85:3d:87:e0:4d:29:a5:70:fd:6e:b5:eb:e1:32:
bd:72:46:9e:2f:46:34:d2:61:79:ac:aa:81:f7:a2:
b3:c5:3f:3c:5b:17:c8:a9:b8:12:ba:44:da:95:64:
6d:9c:2d:a6:9f:1c:65:31:1e:2f:d5:79:dd:d3:d0:
76:71:f4:d8:d2:75:26:20:05:38:af:f3:ff:16:ef:
e4:5d:4e:b6:79:68:cc:35:58:1a:f9:ef:7a:67:22:
7f:dd:c9:07:20:e2:0e:bf:49:90:06:04:69:94:89:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:64:07:8B:94:34:78:97:39:50:A8:F3:D0:D8:91:C2:A9:6D:2E
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:34:ed:c8:8f:45:c6:82:c4:67:f5:94:f2:94:64:94:eb:4d:
c6:37:c2:8b:c7:ce:17:ff:37:91:61:29:3f:66:8a:a0:5c:72:
0e:b7:06:ee:5e:18:18:87:15:e4:71:37:89:a3:23:8f:de:b2:
c9:e7:92:24:4c:4e:87:dc:9a:df:0b:ff:2d:4a:bf:75:db:e4:
3a:a6:83:b1:ad:56:58:47:ec:6b:1d:e6:62:29:b1:68:83:46:
c5:82:56:3e:23:32:84:52:7a:45:af:7f:bd:f8:84:8e:91:07:
f9:53:24:e8:e4:6c:41:d5:bd:ff:92:42:95:5d:4b:1d:a0:10:
cb:05:3f:e5:96:1e:79:ca:42:c0:a1:dc:ac:e3:88:a1:fc:87:
89:7b:04:22:60:7b:58:6e:52:87:05:9a:96:d4:d6:7d:76:a0:
2c:ed:a7:be:84:c6:42:8e:fc:8b:a3:ba:29:3d:6b:77:94:e8:
11:ac:b9:3f:4f:1d:c3:06:d8:d7:9a:0e:fd:52:5b:cd:d0:65:
7a:c7:30:ef:0f:d1:0c:4b:f4:3e:36:1a:25:29:cb:2c:6c:c1:
68:81:d2:de:03:36:ba:ec:71:73:82:fa:bd:fc:01:37:e5:14:
49:97:78:8a:62:92:ed:d5:5d:23:7e:06:c6:5a:c5:14:2e:f5:
a0:7f:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:27 2025 by rpki-client