Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: oOJpMEdzHp44zkOgIA/RMJy1yrgjq/YAAKp3L2q/YC4=
Subject key identifier: EB:AE:1D:3F:B1:2D:FA:32:71:1F:86:C7:35:81:C8:71:30:9A:81:09
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 0198D5F192EB692F2A9C0FF9D90F89FA276B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 0F05
Signing time: Sat 23 Aug 2025 08:00:35 +0000
Manifest this update: Sat 23 Aug 2025 08:00:35 +0000
Manifest next update: Sun 24 Aug 2025 08:00:35 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: plbXMkFk9+mZeqfWU5+WJfdlyK9V4cU+Sg/l1U5PJvM=)
2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:92:eb:69:2f:2a:9c:0f:f9:d9:0f:89:fa:27:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Aug 23 08:00:35 2025 GMT
Not After : Aug 24 08:00:35 2025 GMT
Subject: CN=ebae1d3fb12dfa32711f86c73581c871309a8109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:ac:54:a9:ea:c1:63:1d:a0:ff:7f:32:5e:
a6:ba:c5:12:89:22:66:f2:0b:96:cf:71:b7:7b:e1:
d0:01:fa:b0:62:a1:1c:32:08:0b:bb:bf:3d:49:bc:
56:e0:cc:4c:68:9c:cf:ac:f5:05:d2:c8:eb:c0:8b:
55:3e:1b:0e:82:6a:4d:aa:bd:0b:31:e5:5a:ea:a5:
74:99:ef:86:d6:fe:03:1e:f1:d8:a5:bc:69:0d:da:
cb:9d:a3:ef:3c:d1:0a:79:db:1c:b7:74:d3:b2:c3:
b7:a2:de:11:e8:a7:2a:b3:1a:ed:87:d8:e4:ae:54:
c0:37:f0:d7:21:d4:ec:21:4e:fa:6e:ce:2f:de:22:
22:5f:8b:a2:c5:90:dc:5e:41:ba:62:10:95:a9:ee:
65:fc:15:d4:15:23:54:26:3d:fc:f4:2b:b3:bc:75:
5f:cb:43:27:6f:3d:7e:8a:03:63:50:47:86:0b:37:
60:46:39:c3:41:85:01:94:95:d5:be:7c:08:1e:f4:
10:f8:5f:67:20:75:dc:b1:57:a6:2c:fb:ff:da:2b:
f5:d6:a2:45:a5:2f:ee:ef:0d:4e:42:52:83:a1:b1:
f3:35:49:71:d7:20:44:92:f4:53:da:27:86:8f:bf:
8b:fc:e4:fd:9e:67:06:0e:a8:e5:bc:80:c2:ce:45:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:1D:3F:B1:2D:FA:32:71:1F:86:C7:35:81:C8:71:30:9A:81:09
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:87:da:79:9d:15:4a:1a:46:7a:df:36:77:b5:d2:9c:2f:21:
44:b5:39:c5:59:ff:0a:f3:ab:c4:ee:62:40:13:13:48:de:aa:
63:ad:b7:a3:1d:35:5a:8c:fe:67:39:c1:9e:d5:3f:66:19:a4:
4d:b7:30:43:48:5b:c4:88:b4:e6:28:11:8d:c2:ad:23:9a:41:
65:f9:72:a4:28:0b:00:5e:b8:c8:7e:9e:2d:21:a6:94:16:9d:
10:36:50:84:ae:a9:ea:60:01:b9:b2:63:24:ab:d0:b2:f8:72:
fe:7c:62:ff:ac:c9:21:42:41:53:d8:de:be:5c:f5:14:80:ed:
7a:99:e2:d7:e0:56:01:ea:49:01:12:d2:c0:9b:87:82:dc:1c:
bf:b3:41:6d:0d:57:7b:d7:a4:b0:12:59:fa:7e:7c:1b:6a:62:
45:7b:7e:07:15:66:5c:dc:78:fb:6b:d3:79:df:40:ca:1b:52:
2f:cb:36:e6:dd:45:6c:26:3e:f3:27:ac:c0:e3:c7:23:27:85:
01:a4:c8:4a:79:f5:0e:fc:b8:1d:3c:18:3b:c6:45:4d:65:77:
0d:e1:10:af:ac:03:11:80:92:23:b0:dd:09:fe:30:28:e8:29:
cc:60:5c:3e:b0:9e:a2:da:f6:9e:ad:01:71:c9:b0:52:2b:19:
ed:9b:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:54:10 2025 by rpki-client