
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: oF7uJ6i8c6T+1B6K5rpgEhG78AB1bA9ZWPpfogHc/Zw=
Subject key identifier: 15:88:C5:F2:1A:8F:0B:4B:83:09:6B:A1:CF:EB:F4:C8:40:1E:A7:A1
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 0199FC219DF0BFFB6ADD85491F8FD70CAC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 1424
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: iLnWEqOs5EcxESTwI/PLwUYlBGjSJWGrW5wCzrfUMXw=)
2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9d:f0:bf:fb:6a:dd:85:49:1f:8f:d7:0c:ac:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=1588c5f21a8f0b4b83096ba1cfebf4c8401ea7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dd:57:bb:3c:a8:e4:9d:f4:54:27:24:d9:f5:
bc:23:17:5a:ab:8f:41:b3:24:24:7a:0d:a1:6f:65:
e1:b8:3b:78:4f:1d:9b:75:98:5b:4d:f8:50:04:99:
69:47:d0:8e:f3:bc:c8:f3:5a:f3:e4:c3:59:0c:3e:
82:86:1a:18:0e:ed:e4:79:12:91:76:ce:2f:85:4c:
61:c3:de:9b:5f:45:3e:6f:0c:26:e7:36:19:36:41:
25:c6:d8:ac:c4:75:09:0e:6b:10:7e:bc:30:0f:14:
93:5e:c1:05:8d:58:54:0e:d2:b6:25:21:b2:e6:f5:
a8:21:5d:57:c5:fc:7a:eb:ad:14:e0:35:96:8a:ec:
e7:e0:49:af:a9:b7:94:01:37:b7:35:6b:4b:4c:6a:
87:0f:75:f4:9f:ab:3a:e4:f0:d4:9f:ce:7e:2a:42:
6a:5a:e3:36:ad:9c:ef:58:59:0d:25:13:b1:18:ee:
30:9f:3b:2d:ca:c7:69:a5:45:e3:8e:f1:8d:d7:7b:
6e:83:e3:c1:e7:1f:11:87:00:d7:38:21:43:70:a8:
9d:9e:e6:88:9c:cd:d1:89:d8:c2:70:01:9e:d8:82:
0f:6b:1a:d5:8a:71:6a:22:00:2c:cf:0e:6c:ff:52:
ed:59:34:08:a9:91:0c:7b:2f:95:54:07:d3:f2:09:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:C5:F2:1A:8F:0B:4B:83:09:6B:A1:CF:EB:F4:C8:40:1E:A7:A1
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ee:4c:94:14:2d:30:dc:12:cb:72:3f:74:06:ab:7b:3a:75:
31:8f:c6:d2:96:57:ac:d7:ab:ea:0d:67:bc:8c:e1:4d:e5:93:
cb:81:02:e0:79:85:14:e7:1d:33:8a:41:75:7b:6b:58:be:eb:
fc:91:e3:40:2c:e8:8f:1c:a0:7f:d5:ca:79:ab:1b:8c:03:32:
12:7a:5b:e5:56:df:54:8f:e1:a7:84:27:02:ec:ae:64:4e:3e:
f5:13:32:4f:9a:84:25:2c:4d:ee:de:3c:71:dd:46:a4:0c:b5:
2c:56:71:db:cc:c8:2e:58:67:75:fa:de:57:9b:f1:7e:ed:e8:
ff:21:72:39:73:7b:10:5b:c3:68:33:04:eb:c3:de:70:58:f8:
34:66:f5:c6:23:f2:72:af:40:0d:20:e8:cd:6b:18:76:c3:51:
69:ae:f5:28:38:d5:ff:1a:b0:fb:6d:bb:33:dd:6c:b7:9c:8a:
d8:84:a8:fb:84:63:df:2d:17:ce:92:6c:09:7f:65:12:cf:50:
95:c8:d1:11:7f:96:e7:90:26:f1:6f:85:5b:b0:e9:88:7b:e6:
39:29:9d:03:c9:09:30:0a:83:d0:2a:91:cc:4c:9c:99:d1:62:
90:25:08:fd:d6:dc:75:88:71:ec:4b:28:54:3e:c6:12:d5:99:
ec:16:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:57 2025 by rpki-client