Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: UB2HbtMEgFgBWjDT7nhfDyseW8kNDT4fnL7A3vKXNCQ=
Subject key identifier: E5:BD:00:E4:36:F1:46:A3:5D:35:AF:0F:E0:F5:60:92:BC:CD:9B:B0
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019A300E9F290E7D3765497AF758EF36E1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0D02
Signing time: Wed 29 Oct 2025 13:00:55 +0000
Manifest this update: Wed 29 Oct 2025 13:00:55 +0000
Manifest next update: Thu 30 Oct 2025 13:00:55 +0000
Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=)
2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: uuAH/N4trjgckyVYtX5BzaTpsT0p2VXU11vXAeSMHT4=)
3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0e:9f:29:0e:7d:37:65:49:7a:f7:58:ef:36:e1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Oct 29 13:00:55 2025 GMT
Not After : Oct 30 13:00:55 2025 GMT
Subject: CN=e5bd00e436f146a35d35af0fe0f56092bccd9bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:c5:44:5a:1a:24:ef:e6:0a:a0:05:3c:f9:
c4:87:19:da:84:f6:e2:67:9a:f0:3a:2f:38:fa:40:
83:c3:e5:d2:32:f1:9d:e2:f4:c5:0f:71:ea:27:cb:
cb:c0:b8:8a:cf:e1:33:35:fe:76:3a:95:dd:b5:03:
a5:8d:0d:76:a3:bd:5e:ce:80:89:91:7b:20:5b:b2:
6d:ea:ce:af:46:37:19:3d:6d:04:28:7f:35:3a:3f:
04:67:70:d7:fe:80:e8:20:a7:ce:8e:94:9e:87:aa:
e5:e1:68:90:66:1f:e4:3e:d3:4a:9e:b7:9e:6b:17:
d1:45:9a:e5:15:c1:be:bc:d5:b2:d9:a4:7e:c6:5c:
d2:4c:09:33:e7:1f:bd:dc:4d:3e:e8:87:ee:0a:3a:
e0:7e:22:ce:21:40:ab:46:0d:d7:e0:be:15:d9:f8:
3f:d2:f1:65:96:6a:2f:cb:a8:47:d1:eb:b8:70:0d:
a8:be:53:e7:ac:2a:e3:39:64:13:dc:4f:80:fc:29:
14:6a:2e:d9:45:63:6f:4b:53:e9:13:8f:7b:72:82:
30:2b:c7:db:63:a9:86:ab:57:67:d8:d1:9c:31:f9:
52:f9:00:80:dc:1d:ff:47:4c:27:47:75:7c:dc:b4:
8a:21:a9:eb:44:db:44:11:13:e6:cf:4f:2f:22:d9:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:00:E4:36:F1:46:A3:5D:35:AF:0F:E0:F5:60:92:BC:CD:9B:B0
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:af:24:f6:d3:d7:eb:51:2e:41:bc:c2:a6:3e:59:6a:9b:3a:
e4:71:b6:63:ba:e8:c1:7b:ec:ce:44:f6:1e:2a:ea:32:39:74:
90:3b:de:d8:2d:e1:d6:67:59:34:05:45:13:f4:1b:bb:61:37:
4f:49:7b:43:75:01:fb:7e:4a:78:eb:ca:43:79:10:35:02:4e:
5a:96:2b:d5:cc:07:a3:0d:d0:d4:af:e4:c3:3c:61:e0:ee:4f:
d8:96:93:42:d4:15:1d:20:0f:45:b8:2f:ac:01:6f:0c:c7:35:
a8:4a:8d:67:df:85:8c:23:cd:72:76:dd:7d:c7:dc:9b:cc:d7:
4b:64:96:e8:c3:1d:c2:28:bd:65:57:9d:66:25:83:cf:54:46:
57:c1:c0:bc:5c:9f:f6:e8:a5:28:dd:eb:7e:1f:21:cb:97:e5:
7c:cb:0c:63:37:86:d8:0b:2b:ec:b4:0a:2b:0f:9e:e6:61:4e:
dd:97:66:ed:24:0b:78:f6:7c:14:64:67:3f:b8:d1:79:ea:e6:
16:77:ff:eb:02:94:01:dd:e1:31:b9:8e:7d:71:b1:4d:b3:9c:
3a:19:9b:41:52:5a:ec:e8:e5:c9:4d:95:41:52:69:af:36:91:
28:e6:01:67:eb:f9:26:81:e0:1c:92:14:c6:88:50:07:a8:56:
a2:4c:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:03:18 2025 by rpki-client