Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: /KTqCECClSCcp1bvsWym2aV6ZBuaQWjh8okZXZ95SN4=
Subject key identifier: 14:69:FF:45:9A:96:33:9C:23:3C:B9:5D:60:89:AB:B3:1E:37:60:1C
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019873E1F8C1E445F010703AB5B613AF39BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 051E
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: eHmASil1U93/qLVp/e5orkXoJKEMQONVDHUK69kl7uA=)
2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f8:c1:e4:45:f0:10:70:3a:b5:b6:13:af:39:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=1469ff459a96339c233cb95d6089abb31e37601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:fc:a3:8a:8c:e8:0d:8d:56:d5:fc:79:da:
fb:95:53:94:93:7a:86:af:3d:30:67:0c:d9:91:74:
71:d9:02:d1:c8:69:2a:fb:46:dd:23:2a:62:14:0e:
14:48:49:bd:bf:2d:2d:36:f1:a4:60:79:dc:be:9a:
4b:1c:20:5c:01:d8:68:42:ef:09:e5:33:e4:6a:31:
d1:06:f4:23:25:f0:71:47:1d:cf:c7:a0:a2:52:a9:
eb:f0:e8:6c:72:dc:fa:74:78:f2:8d:e9:b9:2f:a9:
0c:c3:95:74:4b:ec:f1:72:49:87:5b:27:77:82:9b:
f4:08:b6:8c:9d:26:1d:9e:89:a5:51:39:57:fd:e1:
f7:47:fb:85:ed:33:9e:3d:40:3d:8b:d2:9b:a9:53:
ca:1a:4e:ef:60:ea:16:ae:b1:9b:c9:10:93:cb:17:
a9:3d:13:f5:f1:9a:12:1a:65:5e:42:6c:67:6f:12:
fe:01:80:41:0a:69:a7:a3:69:bc:16:03:0f:42:75:
94:d0:ee:83:d4:90:64:4e:73:8a:5c:95:fd:96:70:
ff:93:7d:e7:fb:13:66:b3:98:5f:75:2d:b6:c4:71:
0e:45:ee:38:45:3b:e1:83:00:30:32:4e:0c:07:70:
5d:67:db:3e:a8:ba:d0:04:36:28:0d:31:80:d8:9f:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:FF:45:9A:96:33:9C:23:3C:B9:5D:60:89:AB:B3:1E:37:60:1C
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e1:1b:a8:64:63:2f:28:4a:6f:a2:d2:8c:ea:0c:91:83:18:
2d:d6:55:14:32:53:90:72:e3:25:a4:68:8f:af:8b:9d:b7:56:
06:b3:b1:26:09:c3:90:b3:75:6f:2c:83:9c:8a:d2:b8:10:af:
43:12:56:de:ab:40:18:3e:c6:35:ec:a6:3e:31:91:e8:b0:ad:
f0:91:4a:2d:ff:98:b9:a2:0e:66:d2:65:65:2f:3e:57:13:fe:
8f:3f:96:62:7b:f8:1f:1a:4c:3c:c7:79:ec:3c:83:1c:c0:05:
cc:8a:bf:6e:9a:98:e4:27:b8:3e:da:30:97:1b:19:bb:82:fc:
71:45:fb:26:d5:75:70:28:8b:7b:6e:38:37:ca:a0:09:26:fb:
b7:46:58:c3:fe:53:ea:56:9e:36:7a:23:f3:35:7b:9c:4e:ee:
bb:2d:42:49:7b:6a:d3:62:2d:a0:c0:4a:14:f8:ef:44:f0:1a:
31:2f:6a:88:b1:d9:f2:1d:a4:8b:07:21:03:c7:97:e6:5c:bb:
87:de:1d:bf:37:44:a1:93:f5:79:af:73:88:7e:c8:a1:05:52:
d0:ac:aa:ad:9b:6c:b3:f6:c9:a6:34:b5:0b:43:6c:6b:b2:26:
fd:3d:2d:cb:e1:b3:fd:b7:1a:dd:24:ae:8c:36:39:71:74:76:
8a:2f:38:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4fjB5EXwEHA6tbYTrzm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3
MjRlODIwHhcNMjUwODA0MDcwMDQ1WhcNMjUwODA1MDcwMDQ1WjAzMTEwLwYDVQQD
EygxNDY5ZmY0NTlhOTYzMzljMjMzY2I5NWQ2MDg5YWJiMzFlMzc2MDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVD8o4qM6A2NVtX8edr7lVOUk3qG
rz0wZwzZkXRx2QLRyGkq+0bdIypiFA4USEm9vy0tNvGkYHncvppLHCBcAdhoQu8J
5TPkajHRBvQjJfBxRx3Px6CiUqnr8Ohsctz6dHjyjem5L6kMw5V0S+zxckmHWyd3
gpv0CLaMnSYdnomlUTlX/eH3R/uF7TOePUA9i9KbqVPKGk7vYOoWrrGbyRCTyxep
PRP18ZoSGmVeQmxnbxL+AYBBCmmno2m8FgMPQnWU0O6D1JBkTnOKXJX9lnD/k33n
+xNms5hfdS22xHEORe44RTvhgwAwMk4MB3BdZ9s+qLrQBDYoDTGA2J+FPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRp/0WaljOcIzy5XWCJq7MeN2AcMB8GA1UdIwQY
MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt
Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi
LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+EbqGRj
LyhKb6LSjOoMkYMYLdZVFDJTkHLjJaRoj6+LnbdWBrOxJgnDkLN1byyDnIrSuBCv
QxJW3qtAGD7GNeymPjGR6LCt8JFKLf+YuaIOZtJlZS8+VxP+jz+WYnv4HxpMPMd5
7DyDHMAFzIq/bpqY5Ce4PtowlxsZu4L8cUX7JtV1cCiLe244N8qgCSb7t0ZYw/5T
6laeNnoj8zV7nE7uuy1CSXtq02ItoMBKFPjvRPAaMS9qiLHZ8h2kiwchA8eX5ly7
h94dvzdEoZP1ea9ziH7IoQVS0KyqrZtss/bJpjS1C0Nsa7Im/T0ty+Gz/bca3SSu
jDY5cXR2ii84tQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:52 2025 by rpki-client