Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: O+U+A8s6ri7GrI4uhUgQEAvLWUiEqmfqnRE8Fd+WtD4=
Subject key identifier: 49:BC:C0:71:76:23:54:B1:CB:C0:85:94:FE:AC:99:5D:D8:95:24:C8
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 0197B820DD278D8A4163D1B66976EA8A8686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 0E71
Signing time: Sat 28 Jun 2025 20:00:50 +0000
Manifest this update: Sat 28 Jun 2025 20:00:50 +0000
Manifest next update: Sun 29 Jun 2025 20:00:50 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: ikTeyjM4vg9ypFK8sZkULY5cLr0EEmiP3cmOIU74BJ0=)
2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:dd:27:8d:8a:41:63:d1:b6:69:76:ea:8a:86:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Jun 28 20:00:50 2025 GMT
Not After : Jun 29 20:00:50 2025 GMT
Subject: CN=49bcc071762354b1cbc08594feac995dd89524c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:5f:0b:c1:9e:84:26:36:38:69:65:f2:f4:
f8:16:6c:5d:d8:af:b4:95:a8:aa:e0:70:fe:e9:a2:
04:e7:66:11:d1:02:7f:b2:50:c6:e0:71:d2:e5:5b:
d1:7e:55:6a:11:17:82:50:9c:1d:f0:f8:31:32:fe:
f7:a2:15:b1:43:96:6d:86:13:3b:71:ba:9e:96:43:
3b:57:b5:2f:fa:83:7b:83:ec:16:bf:42:2d:41:91:
b0:3f:3f:27:19:11:ab:f4:41:8d:6b:e5:01:3c:18:
65:a5:25:54:29:e5:0e:7c:c3:e9:69:07:fd:19:26:
05:7e:8a:3d:ab:b0:72:2f:8d:57:f1:6b:17:b9:2e:
5b:58:6a:34:fc:81:20:1c:db:76:99:b1:d5:b8:2a:
70:cf:3a:b3:26:c4:fe:47:71:66:de:eb:7c:d0:a1:
46:2f:34:b5:e9:09:69:19:8e:09:f1:11:9a:b3:f4:
45:00:b3:ac:ee:2e:41:da:d7:38:b6:a5:1b:3e:84:
37:fc:c3:c1:5b:14:02:6f:d4:4a:2c:da:3d:a5:a0:
39:d0:9d:e7:26:3a:8b:cb:37:65:43:25:5d:34:c7:
67:9f:b8:f0:b2:01:e2:5d:28:c7:8a:a1:9c:c1:f9:
29:4d:a4:5b:40:9d:32:0a:4b:a3:4c:a5:71:dd:c7:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BC:C0:71:76:23:54:B1:CB:C0:85:94:FE:AC:99:5D:D8:95:24:C8
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:60:72:45:dd:eb:e7:46:0a:8a:32:ae:d6:13:90:19:8d:43:
1a:03:00:11:9e:7c:63:a5:b1:87:f1:cd:f0:f3:c9:42:1e:9b:
9c:74:4d:2b:89:9b:4d:21:9d:da:43:fe:d4:73:15:c6:0d:cb:
af:e8:db:a8:63:24:27:09:f1:37:d0:73:ee:a2:a6:7c:6b:f8:
47:f1:f7:96:10:ef:a3:cc:db:c9:e3:93:93:81:e2:a8:e1:11:
90:06:ba:d6:da:90:f7:b1:2a:a3:b4:f8:59:bc:55:91:87:9a:
57:8f:1b:23:16:77:37:bb:3b:ed:6c:dd:32:a2:14:61:70:81:
97:04:7c:43:f7:ef:a0:7e:68:aa:b7:1e:66:82:9d:f3:50:6b:
9a:fc:d7:6e:cd:be:61:93:bc:7b:eb:01:2c:a0:77:a6:bd:de:
e6:93:d8:b5:9e:3b:70:82:7d:1c:90:01:e0:6e:d7:84:f3:40:
4d:96:24:a8:1f:81:fc:e0:50:a6:a7:ed:ea:50:14:fa:cd:01:
d3:d2:e6:e0:a8:21:b6:f3:4b:97:db:98:e7:9a:27:bf:99:5c:
8d:19:db:ad:11:d7:cd:a5:64:fb:ee:8c:c3:89:ea:9d:05:2c:
76:9a:07:d3:81:1f:27:4e:9a:f4:d2:73:b7:fd:aa:48:eb:5b:
dd:b9:cb:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IN0njYpBY9G2aXbqioaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1
Y2QwZTQwHhcNMjUwNjI4MjAwMDUwWhcNMjUwNjI5MjAwMDUwWjAzMTEwLwYDVQQD
Eyg0OWJjYzA3MTc2MjM1NGIxY2JjMDg1OTRmZWFjOTk1ZGQ4OTUyNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq89fC8GehCY2OGll8vT4Fmxd2K+0
laiq4HD+6aIE52YR0QJ/slDG4HHS5VvRflVqEReCUJwd8PgxMv73ohWxQ5ZthhM7
cbqelkM7V7Uv+oN7g+wWv0ItQZGwPz8nGRGr9EGNa+UBPBhlpSVUKeUOfMPpaQf9
GSYFfoo9q7ByL41X8WsXuS5bWGo0/IEgHNt2mbHVuCpwzzqzJsT+R3Fm3ut80KFG
LzS16QlpGY4J8RGas/RFALOs7i5B2tc4tqUbPoQ3/MPBWxQCb9RKLNo9paA50J3n
JjqLyzdlQyVdNMdnn7jwsgHiXSjHiqGcwfkpTaRbQJ0yCkujTKVx3cfYgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm8wHF2I1Sxy8CFlP6smV3YlSTIMB8GA1UdIwQY
MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt
MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5
LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGByRd3r
50YKijKu1hOQGY1DGgMAEZ58Y6Wxh/HN8PPJQh6bnHRNK4mbTSGd2kP+1HMVxg3L
r+jbqGMkJwnxN9Bz7qKmfGv4R/H3lhDvo8zbyeOTk4HiqOERkAa61tqQ97Eqo7T4
WbxVkYeaV48bIxZ3N7s77WzdMqIUYXCBlwR8Q/fvoH5oqrceZoKd81BrmvzXbs2+
YZO8e+sBLKB3pr3e5pPYtZ47cIJ9HJAB4G7XhPNATZYkqB+B/OBQpqft6lAU+s0B
09Lm4KghtvNLl9uY55onv5lcjRnbrRHXzaVk++6Mw4nqnQUsdpoH04EfJ06a9NJz
t/2qSOtb3bnLIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:30 2025 by rpki-client