Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: cQ3CYonpUnbR61nUWanq2kvHQWRj2T/ZgkOiJ/y2mi4=
Subject key identifier: 4E:11:43:10:E7:31:22:C5:73:80:98:FB:2C:04:AA:59:52:32:27:E1
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 0198D66130AA688900FE54EB906138392896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0C4F
Signing time: Sat 23 Aug 2025 10:02:30 +0000
Manifest this update: Sat 23 Aug 2025 10:02:30 +0000
Manifest next update: Sun 24 Aug 2025 10:02:30 +0000
Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=)
2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: Cnrdca037EHv4BOBzuheHmSCcZvkowi6xL3/WIBJB3g=)
3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:30:aa:68:89:00:fe:54:eb:90:61:38:39:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Aug 23 10:02:30 2025 GMT
Not After : Aug 24 10:02:30 2025 GMT
Subject: CN=4e114310e73122c5738098fb2c04aa59523227e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:7f:c9:57:39:ae:d3:d7:68:39:a1:75:4e:
09:fa:ca:0c:72:d9:67:41:79:ec:ce:e3:fc:94:56:
3e:bd:8e:96:41:d1:04:4e:d6:d7:be:71:1f:10:00:
f4:84:02:69:88:0f:b8:a2:bd:0a:92:28:28:9b:3c:
b3:ff:31:af:43:17:d5:73:c0:5b:9f:bd:5f:9e:84:
4c:6a:f1:2a:e0:dd:a8:22:ca:8b:3a:b5:51:5c:99:
95:c1:e5:24:18:93:69:fc:aa:d7:e6:6b:86:6e:c1:
60:11:ad:4f:3e:16:76:1a:e6:7b:4f:2d:33:a0:4f:
17:64:dd:bb:6f:24:9f:ff:59:ce:54:11:a1:5b:9a:
71:63:6b:fe:07:5b:d5:84:da:03:e7:a9:ee:bb:52:
79:2a:0c:bd:d6:c8:33:ac:fb:3f:63:ef:b5:09:ba:
f1:a9:c2:1d:b6:93:04:1a:36:80:44:fe:77:a4:81:
ff:42:28:81:4f:43:83:77:53:e0:03:a2:e4:29:40:
ee:d9:79:68:6f:36:22:74:d4:bc:c8:d0:a4:af:e3:
0b:87:e5:7f:f0:12:8d:b1:33:2f:57:7f:8f:58:7d:
31:36:2d:1d:1e:f8:d2:06:1d:2a:1b:20:54:27:ee:
21:dd:21:0a:42:6a:e6:68:07:ed:f0:ff:d7:8d:74:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:43:10:E7:31:22:C5:73:80:98:FB:2C:04:AA:59:52:32:27:E1
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a8:20:6f:94:e1:87:47:b5:de:09:c1:b0:87:6f:d6:1d:ac:
9f:35:16:49:ce:f8:3b:13:6b:77:fc:4b:61:b8:49:e0:98:ca:
ec:5b:f1:30:2c:44:bb:b0:0c:51:78:9f:03:09:24:eb:81:43:
1e:e8:ef:e3:ef:79:a4:9d:3a:cc:ef:6a:8b:56:7a:bc:9c:1f:
0a:7f:95:79:e8:bf:75:a5:d2:af:68:c9:8c:18:a0:81:60:1e:
2f:81:88:78:db:48:d6:34:77:00:fb:a1:19:40:57:a4:0e:56:
cb:17:33:75:50:09:72:4b:0f:91:df:f7:67:8d:61:67:f0:b7:
b2:f6:1f:21:cc:97:80:3f:b6:a1:b4:9b:ad:f0:6c:bd:9b:8d:
99:40:2e:12:ab:31:d5:43:e3:7c:67:fa:ef:b8:ec:c6:fc:1e:
e8:c6:69:a2:58:d5:90:52:ac:d2:aa:3c:38:ee:b5:43:fa:1b:
38:9c:61:6c:b3:86:e2:9e:76:9f:1d:13:ed:e2:8d:b7:04:3c:
d6:b0:90:e5:f7:62:d3:ae:82:6d:a7:5a:97:cd:c9:1d:31:37:
c3:ca:85:55:c4:60:f9:2c:dc:5c:2c:9c:94:b0:8f:f9:88:46:
83:51:df:8a:48:6d:2c:55:29:3f:8f:7a:9b:4d:f5:a5:dc:80:
54:7d:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:30 2025 by rpki-client