Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: T66yeXM4LjvoiKfKKYM/dbC2Lqem+y6xpU1Ch9ESOhw=
Subject key identifier: 11:DE:0F:94:1D:5F:5B:F5:A5:86:0C:87:E6:C4:1F:2F:A3:FA:F9:74
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019A50E3D6654685B44107BDBA7A23AD0F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0D13
Signing time: Tue 04 Nov 2025 22:01:40 +0000
Manifest this update: Tue 04 Nov 2025 22:01:40 +0000
Manifest next update: Wed 05 Nov 2025 22:01:40 +0000
Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=)
2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: g0c2zHRUik9YEkYuM8TDdGZJFEPF7COd15RdBGCWAw0=)
3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:d6:65:46:85:b4:41:07:bd:ba:7a:23:ad:0f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Nov 4 22:01:40 2025 GMT
Not After : Nov 5 22:01:40 2025 GMT
Subject: CN=11de0f941d5f5bf5a5860c87e6c41f2fa3faf974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:5b:8a:4f:7d:24:19:e9:c8:8e:04:3b:32:
2e:6c:9a:09:f7:6e:68:2f:4f:e3:67:5d:e4:1e:9d:
19:1f:14:f6:f9:53:68:86:be:d1:a8:34:96:58:82:
49:c0:46:63:67:38:32:d4:04:f3:c8:6f:9c:05:81:
cc:72:55:f1:f1:18:77:d1:f6:bc:6c:8b:5a:58:cb:
ee:3c:62:53:50:0f:ed:be:e4:de:ac:dd:b7:3a:bf:
55:a8:45:eb:37:6c:42:d5:be:2c:4d:06:e8:72:6d:
7b:ba:ec:8b:0d:bd:0f:3e:14:32:0f:a8:e7:83:b8:
c9:05:42:b2:be:c8:fa:eb:74:9e:67:75:9e:91:2f:
63:b0:95:34:e7:b6:45:87:c1:03:88:68:83:84:72:
06:07:aa:72:9b:65:61:15:0d:47:e2:72:e2:96:01:
64:aa:ef:26:49:f6:fc:2e:08:87:cf:de:35:21:55:
9d:15:7d:b7:5b:b6:12:a9:a8:ba:59:f3:19:fb:55:
8c:39:ea:bd:ae:4a:d5:b1:56:d9:c1:8f:54:4c:2c:
bd:4b:3d:59:af:6a:bb:9a:e0:97:27:45:3b:70:d4:
ec:61:8d:9c:99:1a:a2:80:8b:f4:bd:f2:79:5b:a6:
e4:d5:1c:71:97:8e:d1:54:9d:ff:34:06:f1:da:9a:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:0F:94:1D:5F:5B:F5:A5:86:0C:87:E6:C4:1F:2F:A3:FA:F9:74
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:20:d6:fc:1c:83:4e:f8:53:ae:f8:f1:f5:11:8f:91:30:f7:
ce:c5:7a:c3:36:29:51:35:37:f9:9f:54:ad:e0:76:2d:4e:b4:
5b:a4:5a:3b:6e:c2:84:91:4e:47:0b:f2:7e:35:16:a6:50:c2:
7b:19:86:ef:d5:dd:0d:3e:9a:8f:9c:92:a1:a0:8e:b9:5d:2d:
9f:0b:37:48:f7:d3:c9:b3:86:e8:b8:0e:ba:31:01:5c:40:28:
42:80:90:a4:9c:96:97:d2:c7:e7:e8:6d:41:99:8b:6d:4b:9c:
49:86:00:24:5a:01:b7:11:8c:48:08:ef:46:ba:42:4b:88:e0:
0f:21:bf:2d:b4:a9:a6:32:95:b6:89:93:fd:9f:8c:7b:82:f2:
83:64:71:75:27:eb:25:d6:30:e3:95:82:ee:b4:f0:57:44:cc:
aa:81:65:b3:20:fa:82:eb:fc:2d:4a:9d:e6:f5:9c:e1:a3:58:
63:f2:6d:32:9d:14:d2:35:54:91:dd:95:50:70:78:af:1c:58:
06:d2:00:ba:30:97:ff:0d:f2:f1:9e:9e:a0:b8:70:07:a3:0d:
14:bd:ef:c8:54:f8:e3:b6:e7:28:23:61:72:d5:cf:76:2f:e3:
70:26:56:7d:a1:8d:06:22:e3:36:53:c8:96:fa:e2:f7:97:1c:
17:58:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:26 2025 by rpki-client