Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: MFPPOTBFMacNfC0iANwmE7z0bgfAx/0I9F85gbsV6hE=
Subject key identifier: 42:86:6B:91:89:DA:53:7C:52:34:F4:36:FF:67:32:49:E6:61:39:EB
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 0199616B8C9737D91C2FA1D0B71B9E977D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 0130
Signing time: Fri 19 Sep 2025 10:01:02 +0000
Manifest this update: Fri 19 Sep 2025 10:01:02 +0000
Manifest next update: Sat 20 Sep 2025 10:01:02 +0000
Files and hashes: 1: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: yc+M44Z08hzgcTKT57Vo9qYphoKb1MJBbwxR3J29zUs=)
2: OhZtVLJsToPJ5XT9Ri4PQ-fSzP4.roa (hash: cEI9APBy77RnV/y58ZcNRskCn0uMdesQT/xyTSiVBjs=)
3: Zxk5-UNoTN_fe5rahHCdwdJyWVw.roa (hash: 0rHpKBpbLdp/1wBkgWFoF+psPXoi1NKt4eIQVUq7Q8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6b:8c:97:37:d9:1c:2f:a1:d0:b7:1b:9e:97:7d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Sep 19 10:01:02 2025 GMT
Not After : Sep 20 10:01:02 2025 GMT
Subject: CN=42866b9189da537c5234f436ff673249e66139eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:a1:ed:cf:fa:71:d5:c7:de:e4:d1:93:2f:
df:d7:56:5b:1e:0b:f6:46:b7:f8:2b:bc:50:d0:01:
3e:e5:10:a5:3a:e1:28:f2:33:65:1b:e4:ac:82:ad:
af:3b:b9:16:a5:a4:75:6f:d7:e8:35:ef:fe:72:fd:
22:88:e3:62:76:15:6a:66:b1:79:c8:eb:b0:3e:d7:
b9:72:cb:29:db:b1:f7:c5:52:c1:97:70:f8:f9:ae:
c1:f1:90:5f:15:f2:3f:10:5d:17:79:ba:04:fb:47:
24:05:97:1f:17:74:cc:88:b3:95:88:d3:64:ac:fa:
61:fd:8c:1a:23:35:e9:f0:fe:2b:21:ba:27:d5:07:
76:6b:a7:16:f4:89:f9:f0:fe:c8:92:e5:11:81:5b:
ab:12:1b:b2:88:65:14:d5:c3:c6:f4:12:ef:de:fb:
76:3d:1c:8f:b0:9a:e5:44:75:aa:c7:83:be:32:f1:
d6:8a:b3:05:35:5d:4c:7c:0d:95:f5:ce:fd:79:0f:
87:97:11:73:02:be:0e:8f:27:79:5f:63:b1:90:e0:
a1:5f:05:7b:cd:8f:39:ea:82:8a:d9:d0:e5:5a:3f:
38:12:e0:9a:98:24:9e:f3:f4:fd:49:f3:72:9e:fb:
3f:04:9c:91:cf:91:9e:51:9f:a2:41:1d:64:14:32:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:86:6B:91:89:DA:53:7C:52:34:F4:36:FF:67:32:49:E6:61:39:EB
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f7:e7:18:b0:15:66:54:da:42:77:88:ce:e8:a8:19:9d:b7:
3d:77:d1:de:75:f5:a8:d7:37:28:8c:63:0d:3c:16:46:ec:74:
5e:48:61:98:1d:09:f3:3d:94:4a:42:91:d0:1c:d0:44:9c:dd:
00:1b:6e:10:c8:21:ed:d4:15:e3:14:03:a3:7d:4a:78:87:9b:
d5:a2:30:86:2b:3b:4d:97:f5:ec:73:58:d3:d5:de:94:49:11:
f0:cf:fe:52:4f:8f:d1:58:58:56:45:d2:b3:5c:df:c3:43:f1:
09:b4:ae:9e:41:b1:df:c6:a6:a9:06:3d:aa:ce:4f:b9:26:6e:
d6:50:07:f4:14:47:2e:74:f7:d9:72:ba:43:54:61:6b:de:ab:
01:78:8b:e3:5f:85:ad:2e:f8:f9:d1:ab:3c:94:ea:77:d4:61:
7f:ff:7e:d2:1b:cf:1a:4c:3c:f1:4d:7c:3d:5f:83:a7:92:2b:
51:90:21:f8:09:01:e5:9c:70:6d:ac:47:d1:14:7d:57:23:89:
34:75:ee:5d:a5:dc:8b:e4:2d:37:b3:8d:fe:e8:80:7e:74:82:
16:09:97:5c:34:10:d1:76:87:eb:d8:d2:44:a3:2b:dc:f2:15:
74:31:2c:d4:70:b5:83:f7:cb:96:3c:61:52:bd:ae:4f:c7:ac:
0a:58:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:11:39 2025 by rpki-client