Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: HR22FRgJXv7Q3p09gRn99GKgJjDN/gQ8HWoJm8Z7r1w=
Subject key identifier: 32:FF:74:23:6C:CB:69:17:18:9A:13:61:99:CB:67:7C:6C:D2:1E:9E
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 0199FBEB5493E4F6FABC7672B980CF08685D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 08E0
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: hNUTAvjXxaBbajNyLWc/4EXU2z0C/QWE89Quslv2pVk=)
2: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:54:93:e4:f6:fa:bc:76:72:b9:80:cf:08:68:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=32ff74236ccb6917189a136199cb677c6cd21e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:d8:36:3c:f3:b8:d1:60:e6:64:82:f2:1c:
fb:39:f5:da:44:43:7f:ab:73:35:da:62:50:6d:04:
e1:61:3c:fe:90:f5:18:a4:43:1d:d1:b2:d4:1d:d3:
ac:8b:9a:19:37:d0:ad:f7:0c:67:0f:d3:96:88:18:
c2:2d:48:ff:ea:ce:e3:70:0e:de:57:58:1e:ca:09:
f1:2d:39:6d:63:7f:9d:5a:a8:da:da:3d:35:4f:75:
d0:61:a7:d8:c4:98:85:3d:71:08:f5:58:30:04:c1:
49:df:b3:80:f2:f1:52:b1:aa:58:41:7e:bc:92:e8:
9c:a2:22:93:af:fd:72:4c:2a:8f:77:a5:96:8b:7a:
19:4c:98:5c:57:b4:10:40:08:3d:d4:e5:7b:ac:ae:
56:69:65:06:05:f7:b6:6a:6e:62:d6:66:d5:1b:a0:
e4:53:3a:89:37:8e:35:4b:49:38:7d:8c:49:06:34:
44:a2:3c:53:9c:1b:ec:e5:4c:78:86:3d:61:74:68:
77:c3:f9:ee:90:cb:58:eb:7a:c4:c7:67:87:85:e7:
9c:bf:63:e3:60:45:be:16:76:32:11:69:b4:cf:07:
d5:d1:17:bc:a2:91:5e:45:be:d7:e4:d4:47:ed:8f:
73:ad:95:92:aa:54:45:48:73:da:83:59:ea:5b:16:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:74:23:6C:CB:69:17:18:9A:13:61:99:CB:67:7C:6C:D2:1E:9E
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b8:f4:6c:a5:36:dd:85:63:cc:00:53:66:3d:59:0c:fe:b5:
35:8d:83:ed:83:fd:b1:78:64:55:2c:c1:e0:98:f5:75:f7:3c:
85:4b:32:82:e7:57:24:6a:84:b6:98:59:4b:9c:b7:02:9c:84:
17:74:a8:50:e2:ea:15:a0:18:41:7d:83:24:65:79:ea:f0:7a:
03:4c:61:d1:ce:fe:4c:bf:39:7d:68:6e:f7:be:cb:08:d3:5b:
09:a7:af:ff:37:31:35:45:fa:c7:59:cc:45:ce:ff:2f:70:b1:
de:bf:a4:07:e6:b5:df:ed:64:2d:6c:75:63:e4:39:a2:f3:e9:
03:d8:ec:b7:4f:9b:c7:a9:b3:82:80:ff:82:91:02:87:6a:00:
77:62:49:fc:b8:02:22:7b:a7:20:e8:ef:37:42:84:f3:43:c0:
43:f3:2b:81:86:db:09:4e:6e:1d:d1:92:de:45:a5:ac:3c:60:
33:7b:45:23:72:4a:76:74:69:8e:d4:71:cd:a0:e3:4e:8c:8b:
54:eb:99:57:ca:48:a6:57:be:3a:f0:c4:89:37:28:76:97:97:
b3:1b:ba:3e:14:d8:62:d3:1d:af:b2:b1:c2:39:9a:fc:ba:c2:
ef:de:3b:ca:51:10:b7:d0:11:b9:0e:bc:fc:a4:08:30:e1:61:
e7:f3:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:44 2025 by rpki-client