Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
File: LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json)
Hash identifier: +fCCl+JjWGOtPq38jJwaNlGAovEOjn7s94Qdw5lLQdo=
Subject key identifier: F4:E2:5B:BD:C7:1B:1E:A8:CF:BE:88:0B:FC:34:B7:CC:FD:42:69:48
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Certificate issuer: /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial: 019A01B507BF9F743B56F201D79BC301E5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
Manifest number: 0E57
Signing time: Mon 20 Oct 2025 13:00:32 +0000
Manifest this update: Mon 20 Oct 2025 13:00:32 +0000
Manifest next update: Tue 21 Oct 2025 13:00:32 +0000
Files and hashes: 1: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: nltforg0o21eUsEbWpJo5a5Gc+s/eD0fsdz5YE4MTDE=)
2: YwSn1lGGwl7KLAZTYR2zvBndC9g.roa (hash: 8r7UZf1B94Wo3xzBwCz0diJ6mM+rBducaQI/NNaX0EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:07:bf:9f:74:3b:56:f2:01:d7:9b:c3:01:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Validity
Not Before: Oct 20 13:00:32 2025 GMT
Not After : Oct 21 13:00:32 2025 GMT
Subject: CN=f4e25bbdc71b1ea8cfbe880bfc34b7ccfd426948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:c0:de:15:fb:85:52:bb:ca:f0:ff:45:80:
5a:37:46:02:96:6a:55:f6:22:99:26:f1:37:3b:8a:
11:20:bb:21:c7:f1:98:bf:f5:8b:f3:70:14:5c:c5:
f5:61:36:81:a8:29:29:83:f5:14:f0:0a:09:7f:9f:
47:55:b5:2d:d9:fa:9e:d4:9c:07:d1:07:c3:0d:ce:
3b:84:d0:74:84:26:c2:f5:55:f6:1c:e3:b5:8d:06:
e7:97:74:4e:b7:6c:b1:d2:a3:8a:22:4d:5a:1e:31:
1f:3f:e2:c4:1d:f2:99:3a:a4:1d:0a:c0:fd:49:da:
5c:4e:c3:03:c0:9b:10:83:2c:b9:d5:88:90:46:cd:
c0:61:13:45:1d:fe:04:4a:36:64:27:ea:90:3a:9a:
e5:57:19:6b:c9:9d:09:cf:17:fb:a2:84:5e:84:94:
e3:99:1e:33:e4:2e:58:db:ff:8c:3c:1c:24:d7:86:
d9:58:e9:02:8a:2d:8f:3a:74:9d:82:6f:38:17:17:
85:22:c9:22:91:23:a0:ab:8d:99:b9:4c:65:19:9a:
e0:10:34:cb:b4:06:2b:b1:ad:5e:18:41:fd:3e:ee:
8e:a8:94:8e:48:a3:34:40:ca:cd:ea:51:9c:83:07:
9e:25:20:58:73:53:21:c2:3c:bb:d4:e4:df:d8:55:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E2:5B:BD:C7:1B:1E:A8:CF:BE:88:0B:FC:34:B7:CC:FD:42:69:48
X509v3 Authority Key Identifier:
keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:13:63:e3:2e:15:7b:1e:32:42:1b:11:6b:15:85:f1:d6:38:
22:58:5b:41:22:2d:f8:6c:ba:89:37:1d:34:0d:cb:3b:3d:9a:
27:54:10:e3:46:44:9d:ac:83:09:82:f0:8e:3a:23:e6:c2:60:
dc:f7:29:03:cf:a2:b6:f1:5b:3b:57:d7:c7:82:05:22:a1:f7:
d5:e2:e0:0a:c8:fe:85:80:ea:83:b5:c6:ae:cf:81:2e:b2:cd:
0c:b9:42:40:1b:b7:86:9d:75:a5:e3:65:ca:f1:de:56:ad:19:
df:09:a0:b6:6f:10:70:43:a2:40:2d:91:ba:64:63:87:13:38:
70:33:f0:6e:47:a4:c0:1a:ac:9e:7d:80:8a:f4:62:dc:6f:80:
0c:a2:5c:32:b8:0e:38:eb:af:16:da:99:3a:c5:7d:a1:64:5e:
26:54:58:68:68:fe:9c:87:ea:03:e9:d0:3d:ef:ec:ec:78:71:
e5:c8:58:f8:c8:68:29:68:e2:28:d0:33:cd:0a:e0:ab:c9:09:
56:e1:ee:54:f4:aa:95:11:d3:a1:ed:6b:f7:4d:d9:89:11:71:
23:f4:5a:4c:29:43:26:8d:03:92:41:a7:97:cc:d9:2c:ba:ee:
02:97:fe:0b:72:25:0e:03:35:4e:33:e9:49:ef:95:54:72:ac:
f0:9a:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:47 2025 by rpki-client