Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: BnYP1zwGyKM45lH7gp4ZO87PJk/Zdgekmsr3sglQir4=
Subject key identifier: F2:31:23:34:A0:0A:51:AF:01:10:FF:C4:39:5A:45:DB:1C:32:E4:0C
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 0198D516160BE18B923D33A1D3AABFA78567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: A7
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: 2RLPKPvDSs3i2HR8_eugi8jwWnc.roa (hash: wcYNpPvYweifi8qy+TpJpPxYZ1uEH1ELvZbmF4K8Vuw=)
2: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: E9ArXoLEJ1ftLH4qY070GgXOJfveqGaSdfmgl4jNtkw=)
3: urOt64IcWjkGwHZxkqOCPUOEjR4.roa (hash: Rkv7UWJXHLiOXNWaX5iz/7GalanqXJANSGjIZFx+Xgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:16:0b:e1:8b:92:3d:33:a1:d3:aa:bf:a7:85:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=f2312334a00a51af0110ffc4395a45db1c32e40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:cb:7a:ca:28:90:7c:4b:a3:9d:8a:67:fa:
1f:3b:77:05:e3:19:3b:6c:bc:fa:34:93:1f:db:15:
3f:ea:ff:c3:50:8b:c5:0c:83:ae:37:b2:25:8c:36:
17:96:a4:63:ad:fe:d7:f3:f3:d8:da:5e:95:fb:3e:
09:6d:bd:03:62:0b:94:03:3d:fa:e5:e5:5c:2b:bd:
ec:6c:a6:4d:51:31:9d:5a:70:6b:66:7f:ed:42:72:
da:96:dd:69:4c:6d:c4:50:d2:d2:3b:e9:e6:96:56:
0d:49:ee:fc:24:e9:32:1b:29:8f:bf:bc:b5:e1:45:
18:db:f0:68:05:d4:38:a0:4d:1d:22:b4:56:62:0e:
de:fc:3a:a3:27:a8:a7:eb:91:7d:58:c3:7d:d2:7d:
51:c7:49:5b:0d:4c:67:91:59:80:52:6b:09:95:db:
5b:15:dc:ea:d0:a3:56:4f:de:f3:20:1c:08:c8:69:
cb:1f:91:fd:10:42:11:56:0c:b9:53:8d:40:9d:de:
7a:0d:8b:b3:ac:60:59:c6:a9:80:1d:d2:a2:33:40:
7b:29:93:96:c0:bd:b1:86:57:02:cd:b9:51:3e:e2:
55:47:60:0a:dc:5e:04:cd:9b:b3:9d:90:4a:c3:2d:
e8:fb:99:a9:f6:81:8e:08:94:28:f5:0f:94:d5:b8:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:23:34:A0:0A:51:AF:01:10:FF:C4:39:5A:45:DB:1C:32:E4:0C
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b3:45:c7:3e:af:19:e7:8f:02:7d:87:f0:78:70:f2:57:11:
41:ab:81:b5:fb:94:cb:70:60:bd:04:ec:b3:f6:cd:8f:ee:dd:
6c:53:35:8e:6c:54:ac:9c:83:4f:09:bf:0e:cf:82:d3:6b:03:
cd:cc:e2:d0:ba:62:17:75:bc:59:20:c8:6b:a4:94:24:d9:19:
37:d8:33:c9:1e:64:75:d7:59:21:55:0f:e5:b9:4d:7c:19:5a:
54:e5:bb:df:d7:91:f6:14:74:70:2a:59:77:94:19:2d:6d:4e:
64:02:c7:54:6e:b1:b6:11:44:11:d0:a2:9d:ee:f0:77:35:7f:
58:ac:a2:b3:67:5a:24:9b:43:7b:f2:7d:51:4c:c0:ba:94:05:
2a:1c:65:05:12:e3:dc:d9:01:a5:f3:56:94:ca:be:67:97:c5:
0a:9c:2b:8e:69:5e:f5:c3:26:a0:cb:c2:6b:6f:a2:be:ef:36:
a8:98:fd:1c:9c:6d:78:26:60:2a:c6:d9:e7:3c:2c:14:65:1f:
30:9f:19:1b:69:c6:dc:8c:52:bc:c0:48:0e:89:fa:af:93:8e:
07:54:cf:28:5e:96:69:56:4e:3a:1f:90:b8:9c:57:45:1c:2e:
f9:e9:a6:5f:35:c4:ce:1d:84:1e:3f:46:6d:c0:27:ab:0d:73:
e3:7e:76:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:02 2025 by rpki-client