Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File: LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier: iryN7EtXvvN27JghPi+Ykg4WXpl8xwzjbJtsT1e9ypw=
Subject key identifier: 9F:7A:BF:06:1B:53:AE:51:40:C5:D6:8D:5F:CA:AC:00:E4:27:D3:2A
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 0199FCFD7FB2ECDA73ECF28C3322A0FE040D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number: 1488
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=)
2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: Hrwv1n6sdNILka+wCKBecUJ0yGdhHrGnJcbTW6sZcGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7f:b2:ec:da:73:ec:f2:8c:33:22:a0:fe:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=9f7abf061b53ae5140c5d68d5fcaac00e427d32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:77:b5:72:61:7a:3f:b5:43:a6:d0:ba:f7:
96:ad:01:33:07:97:5a:3a:a0:27:2e:94:f2:54:94:
f7:ae:e2:a4:36:92:0c:e8:e2:0d:c0:c8:23:d1:45:
e3:ca:73:c0:2e:13:e0:3a:64:48:5b:4d:76:87:51:
01:36:2a:95:e1:4e:d7:69:a7:64:9d:7e:dc:5d:60:
60:d7:c1:6b:f1:b9:6c:d1:c3:23:83:d0:e3:cf:ac:
a7:7f:dd:de:a0:9c:c4:20:a3:33:53:b9:f9:65:45:
54:10:94:8c:f5:81:7e:13:8a:6f:08:10:ec:6e:fd:
b5:76:2b:03:8c:c3:54:7a:80:78:5b:be:b2:bc:fb:
ab:0c:7d:bf:8d:4a:7a:62:5e:21:72:8a:eb:6b:52:
08:3d:23:59:85:f3:06:d3:73:2e:a6:98:0b:79:19:
ed:59:bf:3d:be:31:c9:f5:ca:7c:de:0f:5f:fd:3f:
69:92:a7:7e:1b:7a:c5:3b:d7:0a:4f:30:6f:5a:87:
25:d9:00:ca:db:12:00:aa:a1:94:0a:12:80:a3:fd:
da:64:e8:08:38:65:ea:f1:84:5b:42:15:23:83:1b:
1f:1a:17:35:05:cc:93:87:c9:8e:40:c4:8b:4e:11:
c9:70:21:e9:f7:5b:90:cd:f1:73:88:a9:bd:3f:1d:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:BF:06:1B:53:AE:51:40:C5:D6:8D:5F:CA:AC:00:E4:27:D3:2A
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1c:e4:33:ab:91:87:9e:94:4d:16:96:d8:9b:c9:ad:b9:d7:
12:44:16:f3:e5:43:0a:fc:36:44:51:2a:30:ee:4d:17:69:59:
69:05:2c:fc:f9:3b:f8:b0:6d:35:d7:3f:61:40:b0:4e:a7:8a:
30:54:5e:46:ca:bc:e0:36:89:c5:c0:79:3d:91:b7:fd:18:fe:
a7:53:b0:7e:05:a4:93:56:be:7b:46:e8:02:0d:b0:bb:c2:14:
cb:ee:d6:dd:71:bc:83:53:e5:27:83:61:c8:b9:7a:70:1e:c1:
e9:48:2a:30:b7:d1:b9:fb:c8:de:43:d9:36:6b:43:b5:93:79:
73:3a:d7:81:c6:12:a5:35:3c:df:1c:f0:d9:48:94:ce:31:7d:
31:e9:7f:a2:d8:bf:76:c4:f6:ee:55:ad:3f:e0:be:87:e9:4e:
39:e0:32:cd:62:80:86:53:e7:69:43:d4:b5:a3:a3:c6:f9:0d:
8f:73:a8:40:43:34:2c:a2:28:ea:0c:1d:a4:43:01:89:89:95:
fa:e6:a6:43:ce:c4:b8:97:55:7d:54:9d:d4:cc:c7:ec:ca:b9:
ff:7a:b6:5c:14:c3:30:4f:46:d5:a2:24:31:b7:76:d1:a3:26:
9a:86:fb:2a:22:ae:d5:6a:72:a5:3b:9b:b1:af:a2:4e:34:0c:
b9:e7:fd:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/X+y7Npz7PKMMyKg/gQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjA4NTQ1Y2E3MWM1NDk3ZjlhNDQ3OTVhMWMwY2E4YzRk
YmE5NjEwHhcNMjUxMDE5MTUwMTM1WhcNMjUxMDIwMTUwMTM1WjAzMTEwLwYDVQQD
Eyg5ZjdhYmYwNjFiNTNhZTUxNDBjNWQ2OGQ1ZmNhYWMwMGU0MjdkMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P53tXJhej+1Q6bQuveWrQEzB5da
OqAnLpTyVJT3ruKkNpIM6OINwMgj0UXjynPALhPgOmRIW012h1EBNiqV4U7Xaadk
nX7cXWBg18Fr8bls0cMjg9Djz6ynf93eoJzEIKMzU7n5ZUVUEJSM9YF+E4pvCBDs
bv21disDjMNUeoB4W76yvPurDH2/jUp6Yl4hcorra1IIPSNZhfMG03MuppgLeRnt
Wb89vjHJ9cp83g9f/T9pkqd+G3rFO9cKTzBvWocl2QDK2xIAqqGUChKAo/3aZOgI
OGXq8YRbQhUjgxsfGhc1BcyTh8mOQMSLThHJcCHp91uQzfFziKm9Px35EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ96vwYbU65RQMXWjV/KrADkJ9MqMB8GA1UdIwQY
MBaAFC8ghUXKccVJf5pEeVocDKjE26lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wZmVmY2QtMzYzYi00ODA2LWI5NGMt
ZGE4NWRlMTY2ODNmLzEvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wZmVmY2QtMzYzYi00ODA2LWI5NGMtZGE4NWRlMTY2ODNm
LzEvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhzkM6uR
h56UTRaW2JvJrbnXEkQW8+VDCvw2RFEqMO5NF2lZaQUs/Pk7+LBtNdc/YUCwTqeK
MFReRsq84DaJxcB5PZG3/Rj+p1OwfgWkk1a+e0boAg2wu8IUy+7W3XG8g1PlJ4Nh
yLl6cB7B6UgqMLfRufvI3kPZNmtDtZN5czrXgcYSpTU83xzw2UiUzjF9Mel/oti/
dsT27lWtP+C+h+lOOeAyzWKAhlPnaUPUtaOjxvkNj3OoQEM0LKIo6gwdpEMBiYmV
+uamQ87EuJdVfVSd1MzH7Mq5/3q2XBTDME9G1aIkMbd20aMmmob7KiKu1WpypTub
sa+iTjQMuef9SQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:27:58 2025 by rpki-client