Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File: LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier: XHXVXxKWbxPl1TFk84ZZIeRr5l6FzCHGMImc/n27t/w=
Subject key identifier: 0A:2F:39:EF:75:B2:F8:F1:05:8E:98:7E:E3:E2:1D:50:30:47:72:08
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 019932363021876132CBC76353EFA2466DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number: 141F
Signing time: Wed 10 Sep 2025 06:00:35 +0000
Manifest this update: Wed 10 Sep 2025 06:00:35 +0000
Manifest next update: Thu 11 Sep 2025 06:00:35 +0000
Files and hashes: 1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=)
2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: wHQMYZckScvy/HCp8XBwvIeqXBh/pZbnmzz0J+rRZE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:30:21:87:61:32:cb:c7:63:53:ef:a2:46:6d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Sep 10 06:00:35 2025 GMT
Not After : Sep 11 06:00:35 2025 GMT
Subject: CN=0a2f39ef75b2f8f1058e987ee3e21d5030477208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:18:ce:af:74:ed:be:2f:50:13:0a:fc:89:
2e:5f:29:a9:71:5e:8f:91:c2:32:bf:20:a8:d1:c6:
eb:4e:a5:aa:23:1f:c0:ad:46:39:c3:ed:99:9b:90:
a7:cd:e7:e3:73:d4:24:8d:26:a0:70:29:27:d5:b4:
0f:a1:26:1d:e2:80:41:cc:6a:d8:a1:55:5f:a2:d7:
5f:ce:ad:4d:76:59:2a:fe:dd:90:dc:ca:6a:f4:84:
01:7d:8d:d0:a3:9b:66:8f:28:8d:6d:bd:fd:2d:da:
56:dd:e5:90:6a:f4:cf:a6:67:57:cc:11:82:c8:af:
50:e3:30:20:75:2f:f6:55:16:52:5d:88:c9:31:04:
08:6f:85:ec:1c:10:a3:76:8c:47:04:04:c8:9e:8d:
44:f6:85:58:a7:61:e8:e1:c4:c4:13:5c:98:b9:a8:
1f:68:74:26:8b:00:6e:cc:1a:11:e2:ef:49:4f:f5:
b2:38:42:b1:27:9f:12:bb:38:a3:a2:58:5f:28:49:
ce:ec:df:e2:d1:65:00:08:e4:3e:7b:7c:b4:31:2b:
8d:e8:c9:7c:72:5e:a3:07:22:e0:2d:5b:94:21:e6:
02:96:3b:72:bf:6f:4f:63:5f:96:de:58:2d:e6:8b:
1e:69:d5:05:b0:8c:13:01:1a:7e:b2:e2:52:ea:ea:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2F:39:EF:75:B2:F8:F1:05:8E:98:7E:E3:E2:1D:50:30:47:72:08
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f8:1f:52:78:05:73:6d:25:04:01:8c:a5:b7:1e:ad:6e:fe:
30:11:eb:61:47:6d:9c:a9:0e:65:2a:6f:33:f6:99:3e:90:a6:
f1:86:29:95:ad:dd:af:f5:7f:de:f1:55:8c:b2:88:34:69:00:
24:6c:b3:bc:ea:ac:71:e6:a3:9f:e5:46:4b:ce:a5:42:13:50:
6c:52:ce:81:ff:2b:b1:88:d0:83:02:c6:bd:39:be:13:99:9c:
db:02:fb:6c:b2:05:f7:42:a2:ef:21:af:b3:69:2c:1f:43:19:
56:85:ed:bb:03:40:b7:1b:8f:db:bf:49:8d:ab:6f:b4:d8:c5:
4b:9b:6b:a6:f9:7b:04:2e:a4:bb:9e:4e:b7:1c:b5:b2:fd:d7:
ad:ed:41:41:1f:19:42:9d:5b:87:2b:d5:3a:ec:84:92:2f:57:
23:e2:9d:34:82:22:c5:fc:39:40:e5:98:6d:48:1f:a7:4d:74:
34:c6:ac:60:9f:b3:57:31:9e:6e:75:a9:a6:52:c1:c8:20:c2:
f0:05:d0:8b:28:ff:04:ae:29:5b:c4:32:52:8c:c5:1b:8d:c6:
d4:83:ae:d8:38:9e:71:9b:b6:f3:e4:5d:47:27:f5:d4:6e:8f:
d3:1c:15:68:6d:81:05:89:5a:db:83:31:27:0a:36:7f:e1:6e:
ff:cd:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:23:16 2025 by rpki-client