Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: fvtL3dPU1OC38fvwnz5g076IO+rJzIpWnRN6yPlqzgw=
Subject key identifier: 02:F1:EE:5A:70:AF:CE:67:59:0D:42:91:EB:01:37:E1:B0:FA:03:5B
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019A05927049525C979C65ED21ACB0CBD406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 05EE
Signing time: Tue 21 Oct 2025 07:01:14 +0000
Manifest this update: Tue 21 Oct 2025 07:01:14 +0000
Manifest next update: Wed 22 Oct 2025 07:01:14 +0000
Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: DG6wNyQd5HGe1gZ6QN2DWcfcM0LgELgldpQ67KsYsoI=)
2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:70:49:52:5c:97:9c:65:ed:21:ac:b0:cb:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Oct 21 07:01:14 2025 GMT
Not After : Oct 22 07:01:14 2025 GMT
Subject: CN=02f1ee5a70afce67590d4291eb0137e1b0fa035b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fc:e5:0e:e4:84:4c:f7:18:8c:83:28:74:ea:
e4:93:c1:c1:f4:43:94:d9:36:98:2b:65:4f:ea:c8:
f4:81:db:e6:56:e2:ad:4c:32:1d:91:dc:5d:e4:e7:
56:2e:1d:6a:41:b7:93:8e:f1:61:4b:30:3d:11:99:
0c:01:ff:e0:31:5f:76:c1:39:a5:74:cb:1f:10:2e:
03:ca:0d:f8:4d:6a:75:a7:c5:3e:93:e0:55:b8:97:
4c:37:fc:8a:63:4d:df:0b:87:1f:ed:7e:ef:e4:34:
f7:e6:21:be:bf:a6:6e:33:d0:e4:e6:62:31:c6:3e:
2c:ef:89:18:11:c7:9c:09:21:71:5a:84:27:79:13:
20:e2:33:14:e6:a9:ce:f7:5b:47:dc:37:cc:11:5a:
7c:06:75:91:2e:72:ba:5b:dd:a6:d5:72:4d:5c:2f:
32:1a:86:06:da:8e:6c:af:8d:50:93:3e:b3:bc:20:
6f:67:85:d7:fa:99:bf:67:25:73:f5:3d:0e:2b:f3:
60:04:cc:e0:fb:e5:7d:0a:38:41:8f:f2:45:b7:7a:
ae:2b:58:51:92:cb:34:86:b0:00:11:0e:fb:02:c7:
a3:50:d7:b8:4b:3e:ea:bf:e1:9b:5b:cb:35:67:d9:
21:a2:c3:ce:1f:2b:4b:0a:8a:a8:6e:9a:ab:f0:23:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:EE:5A:70:AF:CE:67:59:0D:42:91:EB:01:37:E1:B0:FA:03:5B
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f4:fb:c1:48:99:94:97:35:13:53:9e:4e:ca:d6:3e:b8:1f:
63:c6:fc:bd:58:8a:df:6a:e2:7d:9d:36:4a:18:35:53:ba:b3:
39:e4:c4:24:60:cb:35:1b:22:8b:d2:e0:d3:50:9a:3c:96:b4:
1b:46:f0:8f:c8:c8:9b:ab:60:26:8b:97:df:a7:10:17:a6:44:
f2:55:ee:f5:a3:94:a0:21:43:de:0a:bf:b2:27:4e:53:f5:85:
38:c4:05:72:22:5b:59:99:00:51:58:81:5e:a9:52:19:17:aa:
1c:b8:30:d9:80:9a:ee:4d:ec:63:29:9c:12:21:20:21:70:5b:
09:b4:dd:74:40:18:bd:40:36:9d:8c:2e:6b:ac:0c:43:62:e0:
7d:f7:b0:6d:c0:97:c2:b5:0b:c5:bc:a0:cb:e7:ff:bb:45:60:
48:de:81:93:9c:cc:b1:09:2e:2c:9b:48:2c:7a:f1:80:db:21:
10:07:d1:b4:88:7a:26:85:64:24:44:6c:5c:5e:6e:cd:10:7a:
9b:49:c5:58:5d:ef:c0:75:df:b1:9d:fb:77:09:f2:58:39:60:
48:aa:0b:e1:89:47:e0:35:4f:23:96:81:1a:d3:77:6d:71:4c:
5b:16:7f:1d:60:17:94:5e:48:fd:e9:76:fd:92:00:c7:b9:bb:
19:18:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:00:09 2025 by rpki-client