Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: JVLV1Jo7SPsgomaeGm8bVDnn3i3U6TWoTePNlTO6tvk=
Subject key identifier: 44:EF:0B:4F:7D:BE:5C:76:46:17:A8:3B:1C:45:A9:41:6D:D1:D3:92
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 019A714A1D51F7BFFA94D3A5E22C274832D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 0FDA
Signing time: Tue 11 Nov 2025 05:01:13 +0000
Manifest this update: Tue 11 Nov 2025 05:01:13 +0000
Manifest next update: Wed 12 Nov 2025 05:01:13 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: mpJkrgYKy3e3zxlRsTwrx4khZB9PsD/bGO9gKoykJA4=)
2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1d:51:f7:bf:fa:94:d3:a5:e2:2c:27:48:32:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Nov 11 05:01:13 2025 GMT
Not After : Nov 12 05:01:13 2025 GMT
Subject: CN=44ef0b4f7dbe5c764617a83b1c45a9416dd1d392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:77:99:bd:f3:b7:4b:4c:0a:4f:33:35:6e:
eb:1d:d2:40:8e:c5:b8:35:1f:94:9b:c0:43:fe:05:
31:13:45:17:96:24:de:f3:10:b2:97:45:f9:c4:10:
6b:c1:03:6b:a7:be:f4:ba:c2:d3:d1:e8:c4:c0:14:
89:60:a1:03:f8:c9:17:e0:5f:15:e1:ef:fe:84:a0:
4c:3e:44:80:71:46:b0:61:88:0d:c3:71:28:7c:6a:
1d:7a:36:58:3a:66:26:0f:94:96:82:84:78:51:f7:
52:b4:4a:d7:1e:5b:cb:70:fd:e1:4f:24:70:e1:5e:
46:c9:7b:87:ff:b6:e5:93:88:73:8b:82:1c:a6:c6:
e4:90:2f:df:2c:12:83:eb:79:47:5e:d6:05:85:22:
3a:d9:1a:3c:f9:30:2a:2a:da:05:f6:c1:32:9e:46:
1f:9a:74:71:86:ee:d3:97:66:57:d3:2d:4e:54:38:
49:f9:f7:51:b9:3e:7b:5a:fa:c3:8d:b0:ab:df:cf:
6a:45:b6:b6:4a:9d:02:43:26:46:12:de:83:a9:df:
65:0c:11:36:5e:81:a4:b3:6b:b2:38:53:40:b3:cf:
a2:ab:a1:c8:e8:a7:c9:89:56:0e:f2:56:f0:35:f1:
8e:0a:eb:c1:9c:7d:b2:a3:ed:40:cc:8e:f8:ec:e8:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:0B:4F:7D:BE:5C:76:46:17:A8:3B:1C:45:A9:41:6D:D1:D3:92
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:46:10:83:11:74:a2:6c:fc:6d:3f:20:6b:eb:b5:db:21:3f:
7a:cf:b4:27:03:ea:58:49:83:4d:55:0c:40:ea:21:60:28:b4:
a8:f9:cd:b6:fb:84:c3:95:57:7b:c8:53:6b:4a:97:5b:97:d6:
55:d5:fb:8e:84:ed:22:f1:ac:2c:80:2d:06:33:5c:67:12:58:
da:6e:81:df:94:da:c7:22:84:ce:77:52:03:94:7d:99:ff:a9:
e1:c7:43:bf:e9:a9:52:ab:0e:bb:b4:45:0c:24:8d:67:64:7d:
14:ab:df:4d:35:47:f1:74:51:66:a5:e6:dc:c9:21:1f:6e:21:
9d:5b:e0:6d:da:fb:b3:e4:44:49:8e:53:a9:97:b9:12:2a:f9:
78:3a:b3:8a:c8:84:05:c4:4d:26:f2:92:b0:fb:39:ae:a9:f5:
f1:8a:38:ae:11:04:4a:58:18:9e:e0:6e:d4:b0:5f:71:9b:c1:
65:85:10:7b:66:0b:9b:39:73:23:db:d6:c0:25:86:a1:9d:e2:
fa:fa:c6:44:43:50:6f:fa:70:db:4e:22:d6:fe:16:69:20:e0:
15:ed:30:7a:4c:c6:c9:cd:25:2d:44:3f:21:48:7d:d3:06:ff:
ea:ff:ca:bb:df:bd:61:5b:30:c0:51:d6:1b:69:0b:89:37:3c:
ba:76:6c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSh1R97/6lNOl4iwnSDLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1
Y2QwZTQwHhcNMjUxMTExMDUwMTEzWhcNMjUxMTEyMDUwMTEzWjAzMTEwLwYDVQQD
Eyg0NGVmMGI0ZjdkYmU1Yzc2NDYxN2E4M2IxYzQ1YTk0MTZkZDFkMzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzed3mb3zt0tMCk8zNW7rHdJAjsW4
NR+Um8BD/gUxE0UXliTe8xCyl0X5xBBrwQNrp770usLT0ejEwBSJYKED+MkX4F8V
4e/+hKBMPkSAcUawYYgNw3EofGodejZYOmYmD5SWgoR4UfdStErXHlvLcP3hTyRw
4V5GyXuH/7blk4hzi4IcpsbkkC/fLBKD63lHXtYFhSI62Ro8+TAqKtoF9sEynkYf
mnRxhu7Tl2ZX0y1OVDhJ+fdRuT57WvrDjbCr389qRba2Sp0CQyZGEt6Dqd9lDBE2
XoGks2uyOFNAs8+iq6HI6KfJiVYO8lbwNfGOCuvBnH2yo+1AzI747OiQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETvC099vlx2RheoOxxFqUFt0dOSMB8GA1UdIwQY
MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt
MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5
LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUYQgxF0
omz8bT8ga+u12yE/es+0JwPqWEmDTVUMQOohYCi0qPnNtvuEw5VXe8hTa0qXW5fW
VdX7joTtIvGsLIAtBjNcZxJY2m6B35TaxyKEzndSA5R9mf+p4cdDv+mpUqsOu7RF
DCSNZ2R9FKvfTTVH8XRRZqXm3MkhH24hnVvgbdr7s+RESY5TqZe5Eir5eDqzisiE
BcRNJvKSsPs5rqn18Yo4rhEESlgYnuBu1LBfcZvBZYUQe2YLmzlzI9vWwCWGoZ3i
+vrGRENQb/pw204i1v4WaSDgFe0wekzGyc0lLUQ/IUh90wb/6v/Ku9+9YVswwFHW
G2kLiTc8unZs7w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:52 2025 by rpki-client