Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: 0v4/y6hP0lXKNV+S9WAhWgWnCqw/18WKXUyUDYNZ5a0=
Subject key identifier: 11:11:92:6C:57:CD:42:7A:37:CF:36:E3:0A:97:8F:75:30:D7:BC:2E
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 0199FD6B6D76FA85C2621BE7E9B19E43D38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 0F9E
Signing time: Sun 19 Oct 2025 17:01:39 +0000
Manifest this update: Sun 19 Oct 2025 17:01:39 +0000
Manifest next update: Mon 20 Oct 2025 17:01:39 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: EPxokg6cDmm1WAhy15I1AQAAGhWmSSbXtu6E9pd0Xhw=)
2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:6d:76:fa:85:c2:62:1b:e7:e9:b1:9e:43:d3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Oct 19 17:01:39 2025 GMT
Not After : Oct 20 17:01:39 2025 GMT
Subject: CN=1111926c57cd427a37cf36e30a978f7530d7bc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:c5:28:01:94:36:7b:d1:52:37:78:17:c7:
fa:5f:81:1a:f8:c1:55:83:a4:de:a1:9e:99:44:80:
06:b5:ae:7e:ff:3d:b8:69:8d:94:fb:4e:ce:9e:fe:
3f:74:9e:23:43:63:e9:35:8a:1e:38:fe:ea:b6:e3:
c0:d6:c6:2b:f3:02:5a:4b:94:ad:f3:40:3a:9d:ff:
cb:95:08:64:7c:49:15:ed:24:cb:d9:e8:22:d3:2e:
75:6b:42:59:de:af:c9:b2:76:e5:6c:1e:e3:ce:7d:
3e:2b:ce:cf:dc:61:4f:f0:57:e9:79:86:38:3e:e2:
9e:b6:63:e1:46:d2:00:a2:ed:5d:5a:4b:8a:32:b9:
fc:55:39:08:e1:af:68:50:4c:0f:84:a9:50:53:a1:
03:4d:e7:3f:a3:39:64:b2:9f:9c:0e:85:5b:bb:fb:
77:5e:f8:64:e3:42:c8:db:d1:d7:ba:a8:b3:8b:2d:
44:16:5a:f2:09:e3:6e:0f:b4:b3:99:e9:57:85:87:
aa:c4:91:e2:22:29:fa:35:46:83:f5:20:f9:24:94:
8d:ef:29:64:c5:fe:55:e5:8a:1a:ac:21:e7:7d:1e:
48:d1:b8:07:29:99:78:ca:6b:dd:62:b1:0e:34:0d:
b0:be:d9:23:63:f3:2f:49:4f:6a:c0:3b:3e:9e:50:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:92:6C:57:CD:42:7A:37:CF:36:E3:0A:97:8F:75:30:D7:BC:2E
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e4:3e:f6:4d:f5:8f:6a:30:1c:1b:00:2f:23:96:75:e8:8d:
c3:ba:ba:03:53:84:4a:f6:b1:01:84:44:4f:fa:e0:b3:20:72:
6c:53:ff:c0:d3:a9:42:d0:98:47:15:51:66:d1:a4:f7:92:c5:
f7:de:f1:5e:7f:af:3e:da:0e:a5:7b:8e:e6:31:50:17:f7:e3:
e5:00:6c:41:4c:fb:6f:be:7b:1f:a5:0c:26:06:83:32:c8:61:
6d:26:43:a6:ca:0b:7d:73:a5:2b:4b:c0:29:4d:2c:9a:e4:1f:
cb:5e:27:14:56:b3:5c:79:af:1c:e6:21:c9:ba:4e:bf:9f:74:
af:13:de:cf:17:b8:f1:2d:48:81:18:f9:6f:44:77:ca:89:cc:
47:63:46:75:c5:52:49:13:1a:bb:00:cd:38:a7:fe:0f:7e:9d:
8c:ae:22:0f:97:cb:ee:94:3f:ab:29:04:71:9b:06:cc:de:31:
e2:f1:f7:f0:14:f8:23:99:b2:d1:a8:0c:ab:12:92:54:9d:2e:
a3:d8:e3:7b:46:6a:fc:66:a3:6f:5e:35:48:aa:a2:17:eb:62:
a8:a1:c8:fa:69:2d:5d:8a:50:b2:60:c5:12:14:34:b5:80:ac:
ae:8a:80:9a:36:54:81:c5:04:3d:99:46:db:82:65:b1:05:7d:
41:b7:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:27:40 2025 by rpki-client