Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File: LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier: E4q8zJUBaJvOh1frrzJyoIh6Htxzxgwl0F+GMKNeNEQ=
Subject key identifier: F1:0F:AC:21:1D:BB:2C:DE:8E:49:09:F5:0E:8B:46:C0:1C:54:F8:0F
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 01976FD11CC81D7C3679C2265350A231C157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number: 45
Signing time: Sat 14 Jun 2025 19:01:04 +0000
Manifest this update: Sat 14 Jun 2025 19:01:04 +0000
Manifest next update: Sun 15 Jun 2025 19:01:04 +0000
Files and hashes: 1: 0ibK2rFO285XcmwVBGiaWy0mCcA.roa (hash: oJQ8kk++bxBUXY2O47Q7nsX7PbhR5uG9qTYOOM+oaS4=)
2: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: ceqw7RRxksSL78w9k7kVknyojwiS4ftXLqoBC6bla58=)
3: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:1c:c8:1d:7c:36:79:c2:26:53:50:a2:31:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Jun 14 19:01:04 2025 GMT
Not After : Jun 15 19:01:04 2025 GMT
Subject: CN=f10fac211dbb2cde8e4909f50e8b46c01c54f80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:12:34:b6:5f:02:f6:c3:04:2e:79:d4:a9:
24:90:1e:73:6a:22:34:6e:d2:0b:61:55:11:46:70:
97:04:3e:55:37:25:32:98:e9:6e:c4:c0:90:b3:f1:
08:73:0e:19:9d:f0:a9:eb:49:39:3a:36:63:34:6d:
76:03:03:7e:45:3e:6e:20:80:ba:09:c7:7a:32:d4:
d9:5e:31:52:68:b0:5c:a9:30:7b:eb:36:fd:9a:c8:
df:6c:85:a1:02:ef:cf:c9:db:fe:88:d4:44:94:6c:
a2:80:22:09:93:90:82:c0:d8:14:94:2c:ae:9c:b2:
7b:07:7d:aa:1c:3d:9d:ba:ee:50:bb:68:8c:0c:45:
c3:b3:12:44:6f:37:5d:02:4c:95:1d:12:44:2b:f5:
4f:3b:4f:44:4b:ef:dc:61:1b:4f:55:61:f1:1a:ac:
f3:24:dd:42:a6:61:11:7f:c2:d0:82:2c:7a:37:40:
6d:22:13:e3:cc:1c:b2:e7:c1:d8:5e:48:cb:6c:68:
ae:05:90:d7:a0:7c:a3:e9:f4:7a:5a:5b:43:07:ec:
67:f2:bf:b0:f0:43:49:d8:d0:da:7a:af:29:ec:4b:
7b:d8:27:3c:32:36:48:e3:a1:ab:74:5b:67:96:4e:
76:c9:d8:68:8f:6e:1e:40:85:e4:f6:7e:0e:83:3b:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:AC:21:1D:BB:2C:DE:8E:49:09:F5:0E:8B:46:C0:1C:54:F8:0F
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:21:48:d7:e3:fe:71:c0:c0:41:71:6a:da:06:91:b1:be:
97:9a:be:6b:c3:67:a9:3c:3e:1d:ce:a1:5d:77:3c:52:2e:8e:
af:db:7a:e5:d7:b9:96:82:ac:56:0c:27:c4:fd:81:ed:49:02:
79:30:00:cc:00:92:23:2e:e8:f7:76:e5:de:2c:ee:12:33:30:
e6:73:a2:87:30:30:32:e6:a2:14:b4:f4:89:82:4f:0e:f6:32:
6b:e1:6b:e6:52:cb:2b:fa:de:2f:87:bc:d9:18:d8:63:58:3e:
3d:40:14:4b:69:55:18:57:17:e0:ee:65:bd:70:8e:be:96:c2:
b9:f2:77:b6:1b:71:10:e9:ea:85:a4:70:fb:ca:7d:92:59:b2:
6b:30:fc:94:20:a1:90:77:dd:ce:a1:52:73:d5:c3:9f:25:fc:
01:c7:93:51:cb:4a:3a:0d:b6:2c:63:68:43:8e:49:0d:82:04:
69:f1:6e:e0:df:01:bd:ad:6f:f9:4a:99:2a:05:5a:84:5a:fe:
cd:c3:a8:31:b6:6c:8d:59:2b:55:0a:e8:ea:b5:ef:d5:d9:ac:
29:75:9a:92:59:75:7c:0d:ae:ca:94:9e:98:a5:aa:48:97:02:
f0:7a:56:b1:f7:f4:25:ca:21:87:0d:66:32:55:c0:1d:e4:14:
e6:c1:3a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0RzIHXw2ecImU1CiMcFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTYxNTY3Y2IxMDk5ODU1MTE3MDA4ZmQxZDM2YWE4YWRh
OTZmYWYwHhcNMjUwNjE0MTkwMTA0WhcNMjUwNjE1MTkwMTA0WjAzMTEwLwYDVQQD
EyhmMTBmYWMyMTFkYmIyY2RlOGU0OTA5ZjUwZThiNDZjMDFjNTRmODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S8SNLZfAvbDBC551KkkkB5zaiI0
btILYVURRnCXBD5VNyUymOluxMCQs/EIcw4ZnfCp60k5OjZjNG12AwN+RT5uIIC6
Ccd6MtTZXjFSaLBcqTB76zb9msjfbIWhAu/Pydv+iNRElGyigCIJk5CCwNgUlCyu
nLJ7B32qHD2duu5Qu2iMDEXDsxJEbzddAkyVHRJEK/VPO09ES+/cYRtPVWHxGqzz
JN1CpmERf8LQgix6N0BtIhPjzByy58HYXkjLbGiuBZDXoHyj6fR6WltDB+xn8r+w
8ENJ2NDaeq8p7Et72Cc8MjZI46GrdFtnlk52ydhoj24eQIXk9n4OgzuSxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEPrCEduyzejkkJ9Q6LRsAcVPgPMB8GA1UdIwQY
MBaAFCymFWfLEJmFURcAj9HTaqitqW+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYTcxNGUtYzdkMy00N2I1LThjNTct
Y2FhN2Q1YjQ4MmM1LzEvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYTcxNGUtYzdkMy00N2I1LThjNTctY2FhN2Q1YjQ4MmM1
LzEvTEtZVlo4c1FtWVZSRndDUDBkTnFxSzJwYjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5IhSNfj
/nHAwEFxatoGkbG+l5q+a8NnqTw+Hc6hXXc8Ui6Or9t65de5loKsVgwnxP2B7UkC
eTAAzACSIy7o93bl3izuEjMw5nOihzAwMuaiFLT0iYJPDvYya+Fr5lLLK/reL4e8
2RjYY1g+PUAUS2lVGFcX4O5lvXCOvpbCufJ3thtxEOnqhaRw+8p9klmyazD8lCCh
kHfdzqFSc9XDnyX8AceTUctKOg22LGNoQ45JDYIEafFu4N8Bva1v+UqZKgVahFr+
zcOoMbZsjVkrVQro6rXv1dmsKXWakll1fA2uypSemKWqSJcC8HpWsff0Jcohhw1m
MlXAHeQU5sE6OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:22 2025 by rpki-client