Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: 3h4fPfq9unA6eDQS9vRPjR5i+VYLVL138Aw6l1P9cLo=
Subject key identifier: 2D:C1:A0:6E:BB:32:44:E5:39:27:D9:B9:A1:6F:A9:F6:35:A5:6A:62
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 019923312F388D64FF61737D8A3AA9D369ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 0F2D
Signing time: Sun 07 Sep 2025 08:00:49 +0000
Manifest this update: Sun 07 Sep 2025 08:00:49 +0000
Manifest next update: Mon 08 Sep 2025 08:00:49 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: slRK9zyUZwdyMnHAstSLdZ615wXwN0HlghelGRKDoks=)
2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:2f:38:8d:64:ff:61:73:7d:8a:3a:a9:d3:69:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Sep 7 08:00:49 2025 GMT
Not After : Sep 8 08:00:49 2025 GMT
Subject: CN=2dc1a06ebb3244e53927d9b9a16fa9f635a56a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:ef:cf:03:46:2a:c5:40:a1:70:43:1e:18:
2f:ae:1b:3c:9c:c1:34:a4:54:c8:c2:81:d6:57:df:
08:bf:0e:53:36:62:61:d8:18:ab:2f:a7:4d:01:ba:
69:91:8a:3e:f1:af:a9:7c:6c:19:ac:e2:28:a7:32:
f2:91:fe:c8:49:a8:4a:73:b4:f5:43:3e:49:f0:9e:
d4:4e:2c:af:cb:41:62:7a:ef:73:33:87:7a:e7:6a:
be:a9:cd:e2:50:d7:eb:3c:f9:05:a0:42:07:5e:ae:
15:6e:24:0b:38:be:83:b5:81:dd:4a:32:61:82:b1:
ab:53:fb:51:c4:61:e7:27:65:3e:92:86:9a:ee:bf:
e0:61:84:6d:b1:0b:8f:2c:26:c7:4d:9e:6d:0a:11:
70:9b:a7:00:b5:be:78:8c:39:59:ea:3d:66:1b:db:
65:3d:1d:ce:2d:72:fc:8e:f0:8a:64:1d:b5:84:e3:
ed:54:21:4e:89:20:3c:98:75:4e:1f:00:53:95:3b:
0f:01:5f:d3:e1:33:9b:46:f9:ed:45:71:8e:33:99:
86:26:be:e9:66:a9:f6:37:84:ef:e2:b4:2c:3b:72:
24:c7:58:da:43:93:a6:e0:e4:d8:48:19:2c:61:51:
34:38:8c:ff:02:d8:b1:2c:99:42:a2:c0:38:f6:12:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:A0:6E:BB:32:44:E5:39:27:D9:B9:A1:6F:A9:F6:35:A5:6A:62
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1b:e5:cb:96:88:67:c9:cf:0c:f4:4f:c2:3f:1b:df:b2:f9:
33:03:e0:d7:1a:23:4c:fa:2e:dc:0a:cc:d6:b1:a6:77:82:de:
0c:de:b2:8b:6a:b9:dc:b9:a9:f7:84:84:54:9f:d0:95:cf:24:
b1:67:b4:42:01:82:0a:37:13:4e:b3:d1:30:e5:ee:0b:d4:5b:
23:39:53:11:85:0a:9c:12:ac:6c:28:d8:f6:f3:1a:40:ea:8d:
22:ae:1c:6b:9a:09:aa:8a:3f:ea:90:d3:33:21:1c:90:58:18:
e8:57:ae:1c:94:2c:85:f0:e8:9b:b5:1b:f2:ed:69:f9:36:76:
13:e5:37:b8:f6:97:0b:43:eb:13:f7:16:aa:5e:6c:09:8e:09:
77:b9:28:dc:b8:23:8c:3d:7b:43:a0:c2:2f:1e:4c:bd:63:24:
f0:39:75:bc:3a:02:5d:79:e4:ae:f4:25:67:cc:ab:52:56:01:
4d:61:da:c8:41:fe:84:f5:1c:f2:2a:7d:71:10:cf:ed:90:45:
93:2c:34:8d:3c:be:2d:7c:9a:4e:08:ca:7c:99:80:f3:c8:74:
9d:b0:50:a1:f0:ff:2a:ec:ec:17:83:4b:f3:ba:7d:47:3a:8f:
96:75:63:97:c3:1a:7e:24:fb:0e:d0:06:ae:5e:69:49:0f:97:
4e:f4:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:46 2025 by rpki-client