Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: ODoJILo7U5QTkLZ5dqhQS3M3D7dSM4bCkeqghlA5uu0=
Subject key identifier: 61:5D:B4:6D:34:9F:69:07:4C:D4:80:7D:0B:87:E9:BD:1F:E6:A0:BF
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 0199FC8F8B0450156A5E1709951A0805CC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 16F4
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: uhePhypk7RcrL/R/EzbuFWUWZuEDMMSmGwlI5oYC5GE=)
2: R2RDzykQAbza4085lewohvYZtmU.roa (hash: adeMuE5omufxyAqTiuGENNm2Zw8WMI+lsuIVfr4zgng=)
3: sTYYfE-ujsVTDXjz9Y8hd0TFvlE.roa (hash: ljd/bgs17GlLF7Ke34S9FfTJmNrgp26W4UM6Jrr4R8E=)
4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8b:04:50:15:6a:5e:17:09:95:1a:08:05:cc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=615db46d349f69074cd4807d0b87e9bd1fe6a0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:6b:f8:fc:29:12:c4:d6:f2:3d:8c:4a:d5:
fb:27:62:13:7e:6c:2d:a5:b3:67:6e:86:d5:17:64:
55:84:af:5b:ed:4d:47:77:aa:9e:a4:d9:e6:61:70:
5e:60:9c:66:b0:9a:78:38:a7:3a:f9:11:6e:04:6f:
5d:8e:18:cb:96:d9:c4:a5:ea:ec:3b:7a:36:91:81:
bf:e8:2b:65:4a:1c:9e:86:b9:30:80:29:76:a7:0f:
bf:4b:d0:49:06:52:f4:d3:36:35:b2:0b:f4:f3:e3:
24:79:fb:93:b9:8c:bb:ca:d7:0c:1f:d1:af:11:6b:
93:60:0f:d7:9d:6a:db:25:bf:c8:c9:24:b4:2f:39:
4b:90:e6:5d:8c:00:2d:e2:43:0f:92:08:37:4d:b9:
99:28:16:f1:a1:2b:42:c3:31:1c:cc:b1:a8:5f:fa:
92:7f:0f:e6:ce:1a:83:93:9d:3f:a5:74:26:5e:80:
a5:58:04:e8:37:8c:2c:e9:e9:cd:15:28:cf:14:c3:
8c:34:43:71:11:46:6e:01:cd:8f:e5:55:91:32:f4:
81:bb:86:4e:54:48:4b:8c:8e:2f:54:2b:ee:fe:20:
d4:91:60:c6:03:d0:8a:b4:47:8c:8f:47:22:9d:70:
f2:0d:06:35:74:25:1c:82:e3:c0:16:81:72:93:47:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:B4:6D:34:9F:69:07:4C:D4:80:7D:0B:87:E9:BD:1F:E6:A0:BF
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e6:3b:22:67:db:34:21:9f:63:df:27:a2:b6:c4:29:9f:c1:
15:da:c0:55:5f:58:9c:91:a7:bc:06:13:e9:11:e4:3b:ca:d0:
00:e4:cd:b3:72:ab:26:44:3d:7a:04:d6:78:03:60:65:db:70:
ff:eb:e5:88:b2:a5:f6:72:86:8d:0b:45:76:e6:69:99:c8:4a:
09:c3:d2:99:0d:c1:63:79:ea:1b:6f:5c:37:fe:4b:b8:1a:95:
ce:4d:f9:78:76:22:5c:1a:b6:fa:34:a9:76:10:88:80:2c:0e:
f2:04:e5:8c:df:c4:89:4b:91:83:8b:75:3d:a9:b0:aa:69:67:
12:03:81:a9:fd:f0:a6:1c:3d:cc:8b:86:de:4d:70:61:76:b8:
16:37:df:3a:36:3a:9d:a2:7f:09:38:e2:9f:c0:c4:39:55:1e:
04:17:79:97:64:76:c2:65:1a:61:90:60:95:f9:87:a4:2a:fe:
dd:b4:42:44:9f:ee:04:63:ea:f8:1e:85:18:29:62:dc:72:77:
42:58:90:60:92:f0:35:27:0c:9e:d3:bc:bb:f1:c9:a0:28:45:
3e:66:4e:43:46:bb:8e:a5:c9:ea:b3:74:15:ca:22:19:cf:35:
a5:a7:08:63:c7:7e:d9:e2:f8:f9:ce:a7:d3:87:a2:c5:ed:1e:
0e:3e:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:38 2025 by rpki-client