Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: oQf8K/GjuNxUJwSSnsyXbrA00+ewXjBUAZ/LGOA1ibI=
Subject key identifier: D9:A0:17:37:B1:ED:BA:43:B8:56:C6:B1:5E:6C:99:5E:E0:58:8B:B2
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 019A50E2CD48AD99CF96E34D7EFFBDDC9041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 01AC
Signing time: Tue 04 Nov 2025 22:00:32 +0000
Manifest this update: Tue 04 Nov 2025 22:00:32 +0000
Manifest next update: Wed 05 Nov 2025 22:00:32 +0000
Files and hashes: 1: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: u6h7iSBWOs1HSho44KEyI/lwWQKZZ/fP8cuz+wiz0f8=)
2: OhZtVLJsToPJ5XT9Ri4PQ-fSzP4.roa (hash: cEI9APBy77RnV/y58ZcNRskCn0uMdesQT/xyTSiVBjs=)
3: Zxk5-UNoTN_fe5rahHCdwdJyWVw.roa (hash: 0rHpKBpbLdp/1wBkgWFoF+psPXoi1NKt4eIQVUq7Q8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:cd:48:ad:99:cf:96:e3:4d:7e:ff:bd:dc:90:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Nov 4 22:00:32 2025 GMT
Not After : Nov 5 22:00:32 2025 GMT
Subject: CN=d9a01737b1edba43b856c6b15e6c995ee0588bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:51:42:b2:52:03:ed:bc:51:d5:0e:a5:e0:
52:db:d4:4f:0a:32:72:60:e3:28:21:08:aa:e8:bf:
9e:d2:4f:0b:24:57:5f:6b:53:8c:65:07:5f:64:00:
db:ef:43:71:81:7e:30:03:77:4b:91:23:7a:ee:dd:
3d:9e:61:f7:54:d1:29:e1:bd:8d:4e:7f:99:61:8e:
e4:e5:48:dd:b3:77:a4:e0:66:1c:39:f0:9a:2d:f9:
d6:54:45:45:6c:53:37:7d:fc:fe:14:53:96:a3:f5:
ca:64:25:d9:7c:e9:e1:2c:b5:18:0b:36:f7:b0:bb:
e8:f4:c7:ae:6a:c6:31:bd:81:6c:2a:b5:bc:98:cc:
ae:6a:b5:0a:9a:1a:e1:84:ab:93:63:3c:e5:1e:e6:
96:23:15:9c:ef:e7:dd:e6:11:a5:9e:8f:27:cc:5d:
3e:93:82:4f:34:7d:fb:66:be:3d:90:a9:c1:fa:83:
14:b1:82:98:fd:af:a5:a6:a3:9e:88:82:ed:9b:2d:
06:aa:c5:5d:af:a4:25:07:f2:c7:39:3a:90:15:63:
a2:ea:05:a2:b4:6a:4e:a7:de:d1:ff:da:46:63:cc:
77:89:2a:b7:5a:50:3c:47:c7:60:89:c7:88:ec:ff:
bd:09:a7:83:b0:1c:9d:a3:03:6f:39:c0:5c:2d:39:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:17:37:B1:ED:BA:43:B8:56:C6:B1:5E:6C:99:5E:E0:58:8B:B2
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3a:14:b2:93:66:28:8b:bf:e6:d6:69:95:c3:81:7a:c3:b9:
b4:a1:ad:17:ac:dc:a3:3f:d0:18:35:cc:31:62:89:6e:3b:fc:
d1:a1:b8:56:84:f7:e1:36:9e:e8:7e:2e:7c:7d:e0:77:15:98:
f3:67:8f:1b:a5:25:54:96:f4:d8:b7:0f:70:09:b1:55:66:77:
56:ff:5c:63:16:ff:5f:be:fc:11:07:ea:53:71:16:7b:d3:bb:
6b:a0:ae:f1:68:cc:0f:33:ab:8c:ae:a4:aa:29:c0:7c:3c:f1:
87:80:7f:05:25:aa:fc:8e:15:3c:68:6b:c7:40:47:6d:0b:34:
09:2c:1c:10:ed:2b:a9:a6:f6:d8:af:c9:f0:9d:7f:f3:76:2f:
ac:0a:e6:e3:0f:33:71:ab:4c:ad:9c:3a:e6:93:e2:06:5e:b8:
43:83:34:56:fc:55:96:14:4c:e2:9c:20:4e:f6:49:c6:92:ce:
94:cc:18:10:a8:c4:8e:04:1e:ca:57:05:f1:f7:0d:52:dd:e9:
bf:99:5d:48:e8:e8:ad:03:ee:7e:1b:94:bf:16:cd:63:db:2b:
54:1a:52:67:4e:f8:4c:31:6e:72:40:20:89:07:61:ad:d7:28:
62:0c:13:22:ed:24:9a:bc:5e:bb:37:8e:df:45:8f:6d:11:d3:
23:75:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:13:48 2025 by rpki-client