Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: ck7BUMit0TPs2O2VIx6gZtSB75zzwnvtEiV1YTcBPS0=
Subject key identifier: 59:93:FA:87:51:92:77:E5:49:6B:12:C1:A9:4F:54:C9:5A:FD:34:A8
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019935016819D79A46F6555E57AA68C9A978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0C80
Signing time: Wed 10 Sep 2025 19:01:48 +0000
Manifest this update: Wed 10 Sep 2025 19:01:48 +0000
Manifest next update: Thu 11 Sep 2025 19:01:48 +0000
Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=)
2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: 8IwJT6w1u9pk5RikFpZsK5nxDZmX4+QwFsYGk8xCR6U=)
3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:68:19:d7:9a:46:f6:55:5e:57:aa:68:c9:a9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Sep 10 19:01:48 2025 GMT
Not After : Sep 11 19:01:48 2025 GMT
Subject: CN=5993fa87519277e5496b12c1a94f54c95afd34a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:c4:b1:3f:9e:17:d9:82:1e:5b:86:a5:44:
c0:9c:a8:56:ee:36:db:aa:b3:e4:7f:f6:5b:2f:50:
46:0e:d2:80:4a:b5:e1:d9:ac:6c:0d:c0:fc:9e:4a:
d6:49:c4:9f:bb:f1:ff:3c:6c:78:c3:d8:a3:02:d5:
90:88:b9:f5:a7:40:5c:cf:98:fe:eb:45:8d:33:cb:
97:f4:10:2d:58:bf:05:df:ae:1f:4d:98:c3:a8:ad:
be:7c:f4:02:89:34:ae:75:71:5b:19:82:62:b9:2e:
a1:e8:5d:c9:42:10:59:8a:d9:0a:f7:a5:3d:6e:b1:
47:7d:6a:28:f4:60:97:8c:f5:8c:83:d7:46:d2:6f:
ca:6a:d5:ec:26:ee:39:86:6c:47:51:9a:84:f4:3a:
6d:fa:8b:8c:80:54:87:79:b1:1f:00:be:4d:79:e5:
78:44:e3:e6:64:c3:82:30:66:3a:ab:ef:08:e7:c7:
55:7c:26:6e:20:05:a5:3f:d6:33:43:e3:a3:02:72:
23:c4:ad:3d:10:c1:7d:33:14:12:eb:9c:a2:4b:c7:
af:67:bf:ec:7d:b9:ff:5e:24:e8:2a:8c:93:5f:d9:
b1:52:82:7f:88:af:dd:da:d2:b5:f4:1d:95:87:f5:
aa:23:35:63:12:ab:8e:64:18:cd:c6:4f:4c:0b:37:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:93:FA:87:51:92:77:E5:49:6B:12:C1:A9:4F:54:C9:5A:FD:34:A8
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:7d:58:14:76:bd:00:ee:8a:05:78:ae:5b:3a:0f:59:cf:
4f:5b:3a:0c:ca:bc:4d:30:ce:1f:f8:d0:96:45:39:90:79:80:
60:77:72:30:c1:eb:f0:9b:90:2e:e9:77:6d:2a:41:a6:44:02:
bf:11:3c:2b:d0:71:38:2f:ab:c6:09:78:a1:54:ba:df:64:c2:
5c:e8:bf:c7:0b:6d:8c:6a:9c:f3:ed:b6:04:73:9f:4c:c1:11:
d5:6e:b3:48:c7:95:ce:95:47:1d:cf:3b:5b:4d:e7:5c:06:a1:
26:94:bf:30:63:8f:8b:89:d9:6c:da:97:16:49:16:8d:82:10:
37:b8:fc:f9:42:3a:a3:49:e6:7a:a5:eb:b7:9e:d1:1a:23:80:
67:6b:98:48:86:4f:df:d3:7b:e1:e5:9d:8b:e4:23:9c:f3:40:
8f:25:79:3f:fe:06:01:61:66:2c:6f:32:0b:1c:1e:92:8b:02:
2d:12:06:77:f7:ae:ac:41:2c:5e:ac:25:73:fb:37:2f:4b:f0:
db:89:8d:c5:26:d7:16:ef:c9:9e:e6:32:17:f7:22:15:f0:2b:
c5:fb:65:17:32:33:9e:c6:d0:ce:be:92:63:d7:5e:55:8e:43:
9b:63:86:3a:f4:86:fb:99:6b:bd:91:d6:d6:9d:46:08:7a:2e:
ae:fc:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:45:13 2025 by rpki-client