Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: 3Fm1JEkEGQhNmK0D+tkSRnNcFGSRcCYoXiUqE5ETrRQ=
Subject key identifier: 48:AB:A8:E9:B5:1F:41:CD:92:D8:51:67:BD:16:7B:4C:32:E7:41:6E
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 0198439A4324322E952D1241C0F231BFB7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0C03
Signing time: Fri 25 Jul 2025 22:00:39 +0000
Manifest this update: Fri 25 Jul 2025 22:00:39 +0000
Manifest next update: Sat 26 Jul 2025 22:00:39 +0000
Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=)
2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: g3K22Dl2eK/TzfiAEeRncrxCGes+cZc3vwauRpgwsSY=)
3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:43:24:32:2e:95:2d:12:41:c0:f2:31:bf:b7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Jul 25 22:00:39 2025 GMT
Not After : Jul 26 22:00:39 2025 GMT
Subject: CN=48aba8e9b51f41cd92d85167bd167b4c32e7416e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:11:f2:56:c4:5b:58:56:43:11:1d:74:9c:
d2:80:67:a0:d5:a3:5c:30:ef:94:99:c8:1d:b8:10:
85:0c:3a:a9:34:94:d4:10:8d:17:cc:19:58:9a:33:
5f:25:c4:db:36:03:af:ea:67:6a:d4:63:a6:51:d2:
64:29:0d:2f:5e:74:d2:29:16:cb:91:29:4e:6a:f6:
54:91:c6:d0:ee:15:8b:65:86:5d:17:b7:fa:a1:80:
04:f1:c1:ed:d7:86:d3:fa:83:f9:4b:d0:7e:43:f4:
53:ca:ba:22:fd:ae:ab:a6:03:56:78:fb:48:10:ae:
89:f2:aa:ad:57:61:fd:a1:f8:61:8e:77:00:25:11:
83:53:79:d3:c6:9c:1d:ac:b4:bf:e8:69:b8:fa:28:
3a:98:0f:56:a6:93:63:93:d5:fa:34:70:fd:6f:6e:
ed:77:9a:8d:d7:01:e2:df:e7:67:bf:37:76:c9:c1:
d7:11:fc:82:9a:70:05:3c:f6:08:4d:87:56:9a:f9:
7b:05:38:73:0c:46:f2:e2:93:b2:65:df:e4:2f:47:
5a:e9:e2:1e:49:a7:26:60:97:02:36:98:46:e9:ae:
a8:e7:1e:c5:b5:f0:67:df:a9:f4:5f:d6:08:47:80:
5f:60:2e:d1:ca:2e:79:39:83:71:0c:c1:78:f0:0f:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AB:A8:E9:B5:1F:41:CD:92:D8:51:67:BD:16:7B:4C:32:E7:41:6E
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:0f:a6:2c:fb:43:a9:6d:c3:f6:36:52:db:60:65:a5:82:
0a:e5:ef:3a:1b:d3:07:8e:68:2e:ec:dc:d2:b7:c5:da:6a:8a:
35:18:d1:34:68:99:a4:d2:14:e3:d4:66:1e:81:53:e7:4c:a5:
db:9b:38:1a:71:9b:b2:92:fc:75:fb:1e:a1:63:9e:db:a6:e3:
c1:9d:c2:52:41:55:d5:90:c6:e7:f1:6a:d9:03:85:62:82:91:
a9:46:fb:c1:1a:19:c4:41:e5:38:89:54:b8:82:be:81:08:8a:
64:10:c5:24:d8:95:94:fa:cc:7c:9a:51:b0:2e:0a:b4:01:ae:
63:f7:bf:c5:1f:2f:a5:05:9a:df:e7:a3:8f:30:6b:fc:42:a6:
10:0d:5c:46:d3:88:53:9a:3d:3d:9c:83:7b:f9:70:64:70:03:
58:94:6e:c0:5b:cd:c0:65:d5:6c:df:47:d7:fc:8c:7d:58:f6:
be:14:ed:7b:82:0f:3b:5e:f4:ff:7a:f4:9d:20:8f:d9:fa:02:
8d:91:82:1b:33:33:1b:ab:ef:54:41:a2:ef:87:7d:e4:c7:81:
c0:ea:d6:41:95:7a:e7:76:4a:9c:10:95:a7:39:46:1c:27:7d:
6f:f9:9a:dd:a4:b6:6c:44:7f:0e:d7:de:a0:c5:ab:42:ba:d6:
bd:23:70:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 23:59:16 2025 by rpki-client