Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: gidB75HNn7gPu3dIq9q+BlSJkD2emZDEO8JHUlTa2UU=
Subject key identifier: 2D:04:72:1E:2E:68:37:9C:BA:A8:9F:85:8C:DB:EA:40:B6:0D:44:A5
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 01992821131087993BF79B523479945A2A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1686
Signing time: Mon 08 Sep 2025 07:01:20 +0000
Manifest this update: Mon 08 Sep 2025 07:01:20 +0000
Manifest next update: Tue 09 Sep 2025 07:01:20 +0000
Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: t0y7C/tR0NGMDcj78xcEc1W+W4XcweD1aYOXXrjwEMQ=)
2: R2RDzykQAbza4085lewohvYZtmU.roa (hash: adeMuE5omufxyAqTiuGENNm2Zw8WMI+lsuIVfr4zgng=)
3: sTYYfE-ujsVTDXjz9Y8hd0TFvlE.roa (hash: ljd/bgs17GlLF7Ke34S9FfTJmNrgp26W4UM6Jrr4R8E=)
4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:21:13:10:87:99:3b:f7:9b:52:34:79:94:5a:2a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Sep 8 07:01:20 2025 GMT
Not After : Sep 9 07:01:20 2025 GMT
Subject: CN=2d04721e2e68379cbaa89f858cdbea40b60d44a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:56:1e:c7:1c:d8:9c:5d:3a:65:ef:65:5c:
1d:46:ff:3d:08:21:07:06:01:37:52:a2:58:02:ab:
c3:c6:6a:b9:bf:b0:63:b3:c1:f3:6c:62:d9:6e:61:
59:1c:ae:b3:9b:45:84:fc:82:a5:ea:20:0a:14:ff:
45:58:3e:90:1b:3f:e2:0d:82:16:d1:7b:55:79:53:
6e:b0:f1:d6:d1:60:5c:29:8b:e9:4b:9e:78:b2:7a:
89:51:f3:39:d3:17:4a:8a:57:b6:86:67:f8:21:52:
3c:2f:08:d0:f0:bc:ae:7e:75:7b:56:db:67:b1:66:
f8:f4:3f:97:51:77:ba:5b:ba:f2:0a:de:b2:92:50:
fa:0e:87:b3:45:c1:ed:0c:38:1f:5e:96:5b:43:c3:
13:53:b0:98:0e:e9:9f:21:1b:fe:23:fa:6c:e7:17:
58:0e:c7:59:11:6c:aa:ca:cf:c8:f3:38:74:1b:b1:
be:68:3b:80:ae:fa:1f:bb:94:71:49:b8:a7:24:d1:
2c:11:6d:44:ea:69:a3:96:54:53:2b:14:8e:f5:4a:
7d:56:e6:6b:bb:a5:47:8e:6e:2b:39:a3:2b:5a:80:
e3:c9:6b:cb:49:67:26:4f:09:04:b8:85:6f:ef:ff:
ad:1f:8c:69:c5:c4:60:63:b3:e4:aa:03:9c:e6:a8:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:72:1E:2E:68:37:9C:BA:A8:9F:85:8C:DB:EA:40:B6:0D:44:A5
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9a:e6:89:85:87:50:e9:b4:c4:93:49:51:be:3a:f6:a1:64:
a7:48:55:13:c0:09:3d:d5:e2:61:95:6a:f1:32:cf:16:da:99:
c5:b1:52:6f:87:26:97:98:85:a2:f3:01:99:33:d6:8b:ff:a6:
11:06:52:5f:a0:95:54:ec:ee:2a:65:60:5d:12:e8:5f:fb:82:
79:7d:78:dd:ca:e7:be:a1:c9:83:f0:d6:b2:4f:0a:9d:c1:9a:
7e:06:65:9a:5c:bc:6c:54:c2:b5:78:e0:4f:00:24:47:86:83:
ac:69:24:ff:76:06:94:95:dc:83:96:5b:dd:e2:eb:ca:a1:3f:
5d:f7:98:ff:ce:e7:e4:6b:fa:9e:2e:41:65:7a:d7:d0:d7:fd:
b1:e4:cb:d6:2d:9f:3d:57:59:47:ab:80:0f:b3:5d:7b:64:98:
fd:23:3a:6a:c8:f1:ec:1e:50:f9:1a:a2:c5:95:0b:56:f1:ff:
fc:25:2c:72:17:9c:96:29:5d:46:a3:4b:28:54:d8:9b:bd:db:
ac:1a:55:32:36:43:41:98:b5:6d:54:4a:bc:86:89:78:5b:44:
0f:99:d6:9d:c4:84:93:9c:c6:8f:59:b6:71:45:de:4b:b3:f2:
63:93:79:ba:f8:4a:40:1c:1f:ff:fb:8c:01:15:9a:63:e4:76:
32:14:3b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:04:23 2025 by rpki-client