Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: ESf/+n9YUfisHvYO/iYk+gO0XUC1vtGy2ug1ZNRQZQA=
Subject key identifier: D2:14:91:1C:2F:7C:F2:9E:4D:D0:9E:65:DF:1C:B1:97:0A:09:AB:EB
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 0199FDD9EC419B8ABCE3625AC351D64E7FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 0181
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: Iy5OxfqL8OKBcpl9JhmEK+tCwFbHRo7rXz2GjXgvu1w=)
2: OhZtVLJsToPJ5XT9Ri4PQ-fSzP4.roa (hash: cEI9APBy77RnV/y58ZcNRskCn0uMdesQT/xyTSiVBjs=)
3: Zxk5-UNoTN_fe5rahHCdwdJyWVw.roa (hash: 0rHpKBpbLdp/1wBkgWFoF+psPXoi1NKt4eIQVUq7Q8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ec:41:9b:8a:bc:e3:62:5a:c3:51:d6:4e:7f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=d214911c2f7cf29e4dd09e65df1cb1970a09abeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:c1:5f:70:aa:8f:fe:f3:ac:19:40:71:f6:
6e:f1:f7:54:eb:b0:de:a2:d1:83:21:33:95:49:b6:
15:b3:44:50:4c:cc:f6:f2:e8:8e:be:af:33:7a:64:
94:34:d1:bd:9b:84:fb:46:b1:64:9e:ea:67:48:5a:
24:fc:75:c0:28:f8:4f:14:06:ab:66:fe:b3:d5:30:
25:a3:38:b3:a8:66:19:84:ae:ea:e9:50:25:31:76:
34:d8:b3:06:4d:b9:f5:5e:1e:0d:8b:92:17:dc:46:
0b:15:82:08:09:35:87:d4:d8:ae:83:49:49:75:01:
85:73:6e:92:6d:a3:c7:96:f7:a3:55:cb:7e:86:25:
d8:17:b7:6f:b9:fd:7f:27:33:58:75:eb:06:42:a9:
4c:5f:ad:16:64:e0:32:b9:a8:1e:39:36:e7:af:43:
da:e1:e5:a9:dc:bc:35:30:4d:9c:53:3e:af:83:f7:
27:b7:67:ee:33:63:fb:7b:89:e3:5f:2a:fb:54:70:
cf:00:2e:a0:9a:13:b5:a2:cf:3e:13:20:24:77:fe:
33:92:d3:84:ae:76:0d:4d:88:89:ee:30:3d:40:67:
0e:aa:65:11:ef:4c:fe:b8:0e:3c:a8:6f:f6:0b:ad:
cf:78:7d:c4:db:e4:f3:ce:27:93:cb:03:d5:b3:51:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:14:91:1C:2F:7C:F2:9E:4D:D0:9E:65:DF:1C:B1:97:0A:09:AB:EB
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d4:ca:47:14:3a:33:10:15:9f:54:81:a3:fb:0f:08:61:bb:
52:a9:29:ea:0b:60:f7:c0:41:35:05:79:03:5f:6c:0c:61:20:
b0:68:30:91:7e:f9:d1:20:df:e5:bd:2b:c9:9f:34:de:65:03:
fc:fa:8b:ec:20:47:75:02:71:27:a5:42:1e:25:e2:4f:f6:fd:
c6:ca:58:7f:94:23:a3:b4:1c:a7:99:c8:72:1d:27:47:8c:84:
c0:71:f6:7f:1a:33:42:73:7a:85:14:c9:84:02:4e:7b:c2:dd:
af:08:0a:e2:a5:79:eb:9c:4e:af:bb:b1:94:c9:7f:b9:49:c1:
31:a4:75:85:e2:c5:ea:aa:7e:b6:6d:84:d2:c4:07:73:e2:34:
c3:57:13:52:7f:24:8e:c2:60:1c:22:66:65:cc:c0:48:e3:8a:
59:e7:5b:5d:5d:62:8a:5d:d3:cb:40:bd:9c:8b:fd:2a:41:e4:
25:77:46:8d:9e:b6:64:48:55:43:e6:05:6e:8d:a6:bd:44:ab:
99:2f:7e:99:4d:80:ef:57:9a:cc:47:a9:fa:05:42:f0:41:2b:
13:a6:e7:49:4c:12:7a:34:8c:eb:70:f3:58:7c:89:65:7b:85:
a6:f2:70:c3:b9:43:58:f4:e3:41:e3:37:d1:9e:9d:5a:cb:50:
3b:df:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:05 2025 by rpki-client