Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
File: LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json)
Hash identifier: CHersfvKt2LU87ikGxCf/qTNqaPHWt3ee3yVoVMSTwY=
Subject key identifier: 77:2E:58:BB:E0:48:D9:DC:FD:22:04:BF:C8:DD:26:9A:18:05:A6:0C
Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
Certificate issuer: /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Certificate serial: 019A72258D31DCCCD0AE6CE72F2B92D24890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: zBdmtQj3zLz6rRgSx6jvX9ugqpUx8k52IlmcqCIOGcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8d:31:dc:cc:d0:ae:6c:e7:2f:2b:92:d2:48:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=772e58bbe048d9dcfd2204bfc8dd269a1805a60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:ed:a7:69:10:ef:cc:8d:0a:8f:49:c4:1c:
3d:f8:f4:8a:00:a3:21:41:e9:ec:20:48:48:c2:73:
42:75:49:3d:6e:06:ef:da:e5:ec:65:f2:ab:92:b6:
29:d1:90:43:93:e3:43:8a:66:87:0e:89:bf:3c:79:
7b:ba:01:2a:06:7c:2d:11:b3:40:50:8c:14:cf:fe:
1c:f3:3e:9b:35:c8:13:f6:47:98:1f:98:ff:84:3d:
49:85:53:20:37:c0:31:3a:67:2d:17:4e:27:15:d1:
31:66:b5:4c:4a:7f:12:4e:b8:70:98:c1:e3:c8:15:
9f:00:bb:d3:e9:81:37:df:bc:97:26:36:8f:47:0f:
fe:2b:15:53:f1:f2:99:c9:56:3b:11:eb:5b:4d:eb:
31:e4:30:f6:fb:0b:57:44:ca:06:27:6c:56:a4:22:
e6:d8:65:f1:87:a2:90:0b:47:e9:d8:ca:c2:03:14:
13:e2:29:29:23:c8:a8:83:e5:74:4a:6b:cb:11:81:
45:4c:e5:46:f3:12:61:b9:50:0c:24:7f:f0:2e:6c:
7b:f9:16:50:af:cc:7f:28:c5:5f:0a:77:91:b1:e1:
d6:ba:9d:58:87:c9:20:0b:45:ec:98:25:93:1a:25:
55:b8:94:43:85:ed:4d:83:ad:51:9b:b2:39:91:87:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2E:58:BB:E0:48:D9:DC:FD:22:04:BF:C8:DD:26:9A:18:05:A6:0C
X509v3 Authority Key Identifier:
keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6b:cd:ae:04:25:de:6f:ef:dc:a1:96:a7:24:7c:e0:2e:3e:
a5:56:f8:bb:af:f3:72:22:da:af:01:4f:d9:d3:d4:90:c6:80:
60:bb:61:1a:81:33:52:b3:4c:6f:8f:a6:3f:f0:03:94:63:46:
41:25:60:b2:75:fc:8e:a1:2b:b7:ea:87:0b:53:d4:3b:c8:3d:
9d:da:80:1d:a6:de:fc:b1:0a:76:f4:f6:1c:84:13:3a:3d:d2:
cd:26:41:2d:a2:07:48:2a:2e:bd:ac:d3:13:34:98:7a:67:6c:
fc:2d:62:1f:70:53:2e:1c:d1:89:ef:2a:d2:8c:96:00:81:3c:
48:23:f3:ed:58:18:f3:a5:e2:c2:b1:1e:1b:a8:d5:f2:c3:39:
89:ae:07:86:ec:a4:9d:51:54:25:ea:8f:7e:04:7f:77:ee:39:
70:a0:75:00:68:2d:07:c9:0c:28:5e:c0:32:a8:bb:d4:23:2b:
e4:9c:e5:d0:45:fd:c7:09:bd:89:e7:a5:24:d1:21:7f:e7:e2:
5c:05:81:0b:d4:31:01:f8:12:04:94:47:2c:6d:3a:fe:cb:20:
66:dc:7b:b9:86:9a:43:90:8f:ea:7d:cd:5a:f1:b0:db:c9:14:
44:8a:f8:ed:bb:da:33:4c:e8:66:98:1f:47:47:26:67:ae:e0:
5e:4f:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:27 2025 by rpki-client