Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: fDc6gZYOuC2uIPXsgbYXIK0C0OH4h7oyzbb2huERk+4=
Subject key identifier: F3:65:FA:81:2C:40:3E:79:A4:30:53:29:0E:BE:60:EB:21:67:2F:E2
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 019A0636E9207B3CEB774555DE0EA380E651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 0145
Signing time: Tue 21 Oct 2025 10:00:53 +0000
Manifest this update: Tue 21 Oct 2025 10:00:53 +0000
Manifest next update: Wed 22 Oct 2025 10:00:53 +0000
Files and hashes: 1: 2RLPKPvDSs3i2HR8_eugi8jwWnc.roa (hash: wcYNpPvYweifi8qy+TpJpPxYZ1uEH1ELvZbmF4K8Vuw=)
2: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: RB3bNsSWPvJg3qVNQlgArkZyrcRPj9ojSm51GP172k4=)
3: urOt64IcWjkGwHZxkqOCPUOEjR4.roa (hash: Rkv7UWJXHLiOXNWaX5iz/7GalanqXJANSGjIZFx+Xgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:36:e9:20:7b:3c:eb:77:45:55:de:0e:a3:80:e6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Oct 21 10:00:53 2025 GMT
Not After : Oct 22 10:00:53 2025 GMT
Subject: CN=f365fa812c403e79a43053290ebe60eb21672fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:aa:48:5e:88:b7:5e:01:64:7f:73:1e:54:
11:57:38:59:6d:c7:1c:a1:a4:30:a1:76:9c:45:06:
c9:c9:56:0a:71:d6:85:d5:b1:3d:43:64:ca:1c:ff:
4e:7a:2e:f7:61:8b:58:bc:79:a7:9a:1f:97:81:f6:
a1:f0:42:43:62:1d:ae:c6:b8:ed:00:33:c5:90:ea:
fc:f9:a2:70:dc:77:09:23:84:6f:ba:78:c5:3d:8a:
ce:59:75:7a:be:a9:c3:ca:bc:aa:ed:3d:8b:a7:e3:
d9:f7:fe:dc:53:18:b8:82:b0:9f:20:ab:ec:01:bc:
55:83:69:44:36:b4:1b:c8:38:fe:81:a9:0d:91:15:
c7:e4:88:32:4c:4f:2d:22:29:b4:9d:69:81:41:60:
57:1d:29:eb:14:75:14:57:e3:bc:f3:e7:05:86:93:
45:d7:04:d4:80:2b:f6:1a:77:d7:e3:0c:c2:b7:04:
0e:4b:b5:8d:9b:33:33:62:c2:94:4d:07:b5:57:ea:
6b:1a:52:b4:0a:06:6e:fd:1b:2f:b8:33:a0:60:5e:
6e:16:57:74:88:de:69:3f:57:0a:9d:bd:ca:60:55:
a9:55:57:38:54:1e:2f:75:c4:21:9d:53:44:16:8e:
05:1c:e2:54:29:f1:4e:88:5d:40:8b:11:0c:31:98:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:65:FA:81:2C:40:3E:79:A4:30:53:29:0E:BE:60:EB:21:67:2F:E2
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:57:ca:d6:25:7d:a3:0a:b1:c8:6b:58:3a:f6:93:7a:df:
01:db:21:dc:67:a9:8d:a3:dd:66:db:89:2c:35:0d:fc:b2:c7:
c0:43:cd:4d:09:9c:40:64:ce:22:78:75:49:c8:c9:d2:b2:3e:
7b:ba:7e:40:8b:34:dc:ec:1e:52:78:41:09:d2:ea:51:74:7c:
0a:6b:0a:c3:81:aa:9d:33:b3:b0:4a:f3:f8:8f:29:45:fe:b2:
a6:0f:c5:38:93:e3:3f:6c:65:7e:db:50:49:00:7b:f0:f2:8f:
c4:3b:7e:9e:b5:f2:09:44:c2:90:7e:2a:16:98:9d:a7:27:49:
61:b3:89:2e:78:9e:a6:78:7b:65:91:4f:91:d0:9e:08:b4:af:
88:0f:b5:00:06:d0:6b:46:c5:96:1c:ea:0c:65:44:1e:fa:ce:
14:b7:e4:79:cf:16:e0:6e:0f:30:fe:32:7c:39:9d:19:de:db:
66:4e:70:d5:0c:36:89:64:43:ef:2a:8e:c9:a3:25:22:5c:28:
ca:b6:45:c3:1e:ce:ca:13:59:fc:63:17:ad:91:97:84:54:26:
42:5f:9e:86:1a:e1:24:00:cb:7f:a3:8e:60:34:cb:51:21:65:
3e:6a:02:32:d6:41:c0:a2:41:07:fd:c5:7f:9a:b7:28:4f:67:
75:e5:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 17:17:32 2025 by rpki-client