Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: Nt2CP7MNtU1D6V2Q6LvutprLgd0mnGtg4NIOLB64kY4=
Subject key identifier: 4D:9D:07:B2:3F:3E:12:C0:F7:A5:B3:45:6A:05:E0:4B:C3:46:C3:D9
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 01991C8A5DED341CEF11031D2FD80E1BE0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: CC
Signing time: Sat 06 Sep 2025 01:00:53 +0000
Manifest this update: Sat 06 Sep 2025 01:00:53 +0000
Manifest next update: Sun 07 Sep 2025 01:00:53 +0000
Files and hashes: 1: 2RLPKPvDSs3i2HR8_eugi8jwWnc.roa (hash: wcYNpPvYweifi8qy+TpJpPxYZ1uEH1ELvZbmF4K8Vuw=)
2: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: gTwJ0SGBNrymPFVTad6YCz5aYhFptAxT+kNrbEv/khM=)
3: urOt64IcWjkGwHZxkqOCPUOEjR4.roa (hash: Rkv7UWJXHLiOXNWaX5iz/7GalanqXJANSGjIZFx+Xgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:8a:5d:ed:34:1c:ef:11:03:1d:2f:d8:0e:1b:e0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Sep 6 01:00:53 2025 GMT
Not After : Sep 7 01:00:53 2025 GMT
Subject: CN=4d9d07b23f3e12c0f7a5b3456a05e04bc346c3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:12:c7:4b:f0:65:d2:e0:d5:ea:7a:e9:c3:
9a:a7:72:15:12:65:ef:46:72:d5:85:d9:ab:a6:b7:
c6:63:80:da:2e:22:2b:0c:7f:62:e8:06:96:c9:9b:
50:8a:ab:6a:e4:28:c4:ce:a0:28:59:38:e5:7a:28:
7b:da:28:95:93:59:55:68:93:bd:02:a1:a6:2b:0b:
49:4f:17:38:cc:2b:59:07:c1:e4:ae:87:fe:9e:1b:
f3:6c:24:09:e1:7b:1c:79:e4:46:39:11:ee:d9:cb:
2a:58:48:89:35:3f:18:db:b3:58:a2:95:23:15:bd:
b7:c5:fd:3c:ee:b0:44:78:23:49:35:af:c0:53:45:
a3:7d:1a:a4:00:6b:09:82:c0:37:3d:2c:d4:17:34:
1b:c2:5b:6f:db:df:a6:46:55:66:a3:85:8a:d1:92:
2a:7b:57:94:be:7f:2e:83:a5:11:12:5a:1f:2f:cb:
d4:f2:8e:92:ec:e0:57:93:88:66:84:73:ce:58:ce:
97:d0:5c:62:e2:64:b1:ca:26:80:c9:f3:32:c9:05:
c9:a0:99:a5:22:e2:89:aa:0a:ff:86:4c:5d:d0:c1:
34:28:8d:62:a1:fa:70:49:3a:7d:c7:77:a2:c5:5a:
97:8c:77:75:24:7b:23:35:d6:f0:e0:4f:8c:33:b7:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:07:B2:3F:3E:12:C0:F7:A5:B3:45:6A:05:E0:4B:C3:46:C3:D9
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0b:e6:d7:e2:20:e5:1a:a1:72:5f:80:36:35:b0:ff:2e:1f:
56:26:78:e9:3b:8a:90:7a:54:0a:35:04:03:44:6b:be:52:a3:
64:ec:7b:09:85:be:1d:c5:c8:e6:7c:67:d6:7a:db:cf:a0:b7:
f0:cd:14:0c:17:e5:ee:9c:1e:70:e9:b3:3f:90:b9:60:18:66:
5f:39:f0:2f:15:10:27:74:12:3c:8d:56:90:44:56:f1:92:a9:
8b:fa:19:67:a5:8b:0d:a3:a2:3c:41:fe:cd:ed:9f:b7:83:47:
ca:c3:d8:7d:48:7c:23:77:3c:a6:74:51:e8:c9:86:5c:27:1b:
36:66:b7:11:10:6d:91:8f:e3:1a:14:55:4e:94:3a:f6:4c:f0:
d2:0d:f3:89:14:ad:8b:01:38:f3:6e:23:97:a6:a2:48:2b:72:
a4:e6:03:cf:23:41:0d:33:6d:7a:a4:4e:97:1f:21:45:95:a9:
df:a0:5f:f9:b1:5f:c7:03:22:c1:ff:34:52:95:59:24:e8:23:
a2:85:0c:d3:59:52:54:42:d1:bc:52:c0:57:95:9b:94:e3:75:
f2:19:a5:f5:1b:5b:fa:7b:64:ca:a5:9c:f6:a9:9b:60:f3:b4:
0d:c4:3f:a7:76:a4:3e:6f:ac:b8:0b:41:82:36:42:d2:40:40:
7e:df:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:37:30 2025 by rpki-client