Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: VPuqQJuyJDrGeFAOjEcFXnCjOfpJbGohsuSxIxBeqtw=
Subject key identifier: 3A:67:EC:F9:C4:B4:B3:38:7F:F5:82:DE:7F:37:74:AF:CE:1B:29:32
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019A725CD06D81331301D1D3CA91A1F876A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1731
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: PNorUeA/SZiY/BBIY6LHX9mENyOgQshb3LcoJqBzREA=)
2: R2RDzykQAbza4085lewohvYZtmU.roa (hash: adeMuE5omufxyAqTiuGENNm2Zw8WMI+lsuIVfr4zgng=)
3: sTYYfE-ujsVTDXjz9Y8hd0TFvlE.roa (hash: ljd/bgs17GlLF7Ke34S9FfTJmNrgp26W4UM6Jrr4R8E=)
4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d0:6d:81:33:13:01:d1:d3:ca:91:a1:f8:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=3a67ecf9c4b4b3387ff582de7f3774afce1b2932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:b0:f4:3c:29:1a:2a:94:c7:b9:25:53:c7:
c2:65:3a:20:0a:a2:1f:27:8c:da:74:a4:8e:d7:41:
be:57:20:7b:d2:45:d4:04:8f:e0:0b:1a:f2:5a:8b:
99:d2:2b:01:01:44:4d:98:4b:bf:00:38:01:3a:de:
93:41:26:52:90:01:05:4d:77:45:2c:a8:10:ee:63:
48:cf:91:69:79:d5:8a:4a:e8:cc:99:92:bd:b2:17:
6c:6f:98:eb:85:57:21:b3:0b:40:f7:33:77:ab:2f:
df:0d:3d:1d:3a:97:fd:0e:dd:6c:16:c0:f0:14:34:
91:78:b6:09:95:6b:e4:ee:5c:dc:0e:92:11:5a:b8:
ae:b5:71:ec:eb:7e:a3:b2:7f:a1:38:28:f2:2f:3a:
7a:f5:6f:f4:ed:14:20:02:53:84:b2:36:5e:a3:ff:
b9:af:8d:b3:7e:63:57:66:96:e0:ff:6d:5f:41:4f:
10:da:08:70:7b:35:30:eb:3f:6f:3e:18:7e:bc:e8:
83:57:ab:18:b7:1a:0d:09:d5:bc:a8:66:be:81:89:
0f:80:06:3f:4d:3b:f9:75:11:77:d5:da:34:9e:ec:
31:c5:39:ed:2f:0a:36:96:0d:87:e7:08:ba:11:c4:
f2:cd:3c:1d:3b:b4:e7:5f:ad:cd:2a:05:f0:1d:35:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:67:EC:F9:C4:B4:B3:38:7F:F5:82:DE:7F:37:74:AF:CE:1B:29:32
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:01:ea:a0:dd:6d:e6:44:f0:df:98:20:7a:7f:34:7e:f1:fa:
73:6d:36:04:e8:17:d0:7b:31:70:25:83:62:97:67:78:d0:f8:
eb:cb:6d:84:de:ce:dd:8e:64:93:b1:38:f8:13:de:af:56:42:
fd:53:6a:12:6b:ee:b8:45:97:c5:a8:7b:0d:a1:60:3c:69:3a:
fb:c9:06:d4:91:79:fa:4c:83:b0:4e:c9:05:a6:f6:cb:55:5d:
84:79:a2:7f:6e:df:83:a4:dd:6a:c9:08:2d:e2:a6:89:85:a0:
ab:87:f8:6c:b8:32:b2:3a:0f:10:0d:ad:42:23:0e:03:00:7d:
4d:a7:c2:1b:2a:c0:c1:d3:4c:92:18:d5:05:ce:90:62:e0:d4:
be:ac:3d:d5:c1:30:09:9a:c4:e8:39:bf:11:dd:10:15:9f:17:
38:0e:e5:1f:73:dd:da:13:5a:bf:55:66:f6:bc:40:10:48:73:
9e:53:f3:d9:fc:a3:e6:3b:69:a4:8c:60:4b:fb:e7:86:c3:a5:
f7:cc:8f:5b:be:f1:97:da:59:b5:7d:a5:9b:fa:91:00:d6:b6:
17:f1:ef:c0:ed:ba:c0:13:ee:0e:3e:68:c9:6e:d5:1a:cf:e0:
0f:dc:69:06:47:b8:5c:ae:99:17:cd:49:ee:21:1f:0f:94:b7:
8a:48:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:24 2025 by rpki-client