Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json)
Hash identifier: 9+MoxAY32X7VvlEH5Je6Md19OxfzohgW6YvwB5xY9nM=
Subject key identifier: 6E:EC:54:58:A2:7C:6D:85:30:D0:69:55:3E:43:B8:7D:4D:5A:80:BC
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 019A71B933ADD56512AE39860FBAF9323628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
Manifest number: 091D
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: CEx3i9baCrMYZb1mvpl8XdsbSOFPCIhcqSlIhOpZBdw=)
2: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:33:ad:d5:65:12:ae:39:86:0f:ba:f9:32:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=6eec5458a27c6d8530d069553e43b87d4d5a80bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:5f:3f:73:e5:2b:f8:23:fe:d3:40:d1:3c:
ba:96:5e:86:cc:19:99:ee:9d:71:59:6b:79:0a:6c:
94:a1:72:59:08:0b:41:f1:0a:aa:c0:ec:24:0f:31:
9b:b7:f2:e2:63:0e:f2:ef:c1:14:76:92:ab:69:a7:
c5:da:49:e9:1f:42:35:aa:4d:05:d0:e2:5c:55:57:
78:3c:ed:7b:54:5f:9c:18:d2:b3:c6:af:1b:a3:96:
a7:da:b4:b8:9a:bb:27:85:06:13:71:df:61:39:69:
21:f1:4b:70:c9:2b:be:fe:9b:3b:2c:64:82:14:aa:
b8:c1:ff:4b:8b:5e:68:20:a9:65:7f:ac:f7:5e:3e:
13:9f:18:d7:1c:97:d7:46:57:ed:49:13:1c:57:21:
83:9f:f6:3d:28:fc:60:ad:5e:af:06:3a:f6:ba:6a:
08:d9:82:f8:4c:e2:a9:92:a3:6b:63:c2:8f:ef:3a:
0a:8c:ef:a7:e3:4c:d7:b2:28:cd:f6:56:30:47:2d:
fb:93:a9:07:94:d3:e3:2f:cd:be:94:cc:40:e4:9d:
2d:57:58:54:9d:da:2b:14:ac:8e:e7:9a:72:a9:42:
92:ef:8d:21:c9:b2:3d:09:c4:dc:6a:d0:ef:01:f4:
f7:ea:84:3e:51:c6:1c:ce:9b:1c:5b:b1:fb:f6:a6:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:54:58:A2:7C:6D:85:30:D0:69:55:3E:43:B8:7D:4D:5A:80:BC
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7d:00:66:99:59:86:bb:5d:dd:a2:31:b9:e4:1c:5e:ec:ce:
a8:6d:db:87:c4:db:11:6c:2e:4a:72:26:1e:4f:d1:db:22:6c:
25:bc:c9:b5:5c:8a:83:96:56:74:9b:e2:13:f0:b4:6b:7a:a7:
4e:a7:67:d5:63:aa:79:41:1e:11:34:ac:22:ed:38:ff:bc:05:
ed:0f:7a:62:c2:c2:9a:43:58:29:a8:32:3c:58:db:45:0c:88:
ed:81:d7:88:07:05:f3:c9:75:e1:2b:40:00:84:cf:96:1f:32:
18:52:44:ec:9e:bd:61:2c:f9:7c:f8:cc:4e:bf:22:53:21:6b:
e0:fa:55:8c:25:2c:93:0a:11:5d:50:be:95:c7:54:22:d9:9a:
38:79:1a:e5:37:d3:f4:b6:0f:83:85:fd:0b:90:06:af:d4:46:
db:df:37:2c:51:53:07:a0:4f:2c:aa:ad:46:35:9c:fc:10:14:
4f:85:f9:d4:84:6a:7d:27:70:08:92:6f:68:70:b2:5d:dd:4c:
14:ab:7a:3b:09:ab:1f:75:f8:28:da:09:48:76:25:b0:74:8a:
40:fc:23:e6:c9:17:12:9b:bd:9f:5a:86:5a:04:00:44:66:2d:
71:6c:f9:f6:b0:d0:c5:21:e4:85:6f:d3:33:3d:5e:a7:aa:2f:
89:3e:d9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:43 2025 by rpki-client