Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: 70KFxdMePm4MnPD0eMtjOevO7cqG5ApgqM+0fcimkuE=
Subject key identifier: BE:C5:BD:B8:00:84:42:AE:45:25:CC:3F:82:43:27:7A:3A:6C:B3:C7
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019774F8135A8A82348551C011BCDCF9A1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0B98
Signing time: Sun 15 Jun 2025 19:01:44 +0000
Manifest this update: Sun 15 Jun 2025 19:01:44 +0000
Manifest next update: Mon 16 Jun 2025 19:01:44 +0000
Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=)
2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: RC7Myk4H4K8AF0x5dTW2WkZPwVus3Yx71+kLCqYcOzI=)
3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f8:13:5a:8a:82:34:85:51:c0:11:bc:dc:f9:a1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Jun 15 19:01:44 2025 GMT
Not After : Jun 16 19:01:44 2025 GMT
Subject: CN=bec5bdb8008442ae4525cc3f8243277a3a6cb3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:7a:2f:38:66:3a:21:fa:12:1f:20:13:79:
68:9d:97:9a:8e:58:82:1d:7a:ea:7e:b4:e2:13:96:
31:c4:72:b9:3c:a5:40:52:10:92:69:bd:76:b6:c2:
29:5d:a6:f7:34:51:f8:9f:8d:a7:59:9e:80:86:63:
3c:f4:da:31:f1:b5:60:61:85:1c:1d:c1:01:5e:5d:
ba:8d:55:c8:6f:13:c1:8e:bd:42:e6:42:15:c4:de:
1c:72:9b:0b:08:14:51:ac:73:fe:43:a4:58:f2:58:
3c:4e:79:83:21:33:5a:e7:01:4e:b7:bc:06:ca:2b:
3b:c8:8c:ba:01:b2:4c:ef:ea:96:b2:de:59:80:ac:
a6:14:2d:df:10:92:81:9c:5f:b2:7c:e7:49:d2:85:
b2:1a:6d:6e:87:58:bd:82:e1:a8:85:15:b0:65:61:
55:7f:ab:9d:0b:4d:07:19:fa:cb:6f:df:18:28:60:
dc:40:11:f9:37:f8:16:79:9b:80:c1:7d:34:0d:b3:
51:f7:95:65:ac:5c:3c:ee:0e:74:3f:cb:28:fd:da:
eb:86:14:50:ac:4d:5e:30:e4:58:6f:b5:8c:8c:41:
af:69:84:d8:e8:a1:2b:1e:e6:99:b9:c4:ad:7f:9e:
3a:37:fb:7d:4f:92:22:71:44:2e:71:d4:e3:b5:64:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:BD:B8:00:84:42:AE:45:25:CC:3F:82:43:27:7A:3A:6C:B3:C7
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5c:f3:0b:bd:f8:f4:2c:a9:11:86:c4:fa:1d:b0:84:4c:93:
c5:55:ed:96:30:d9:35:9e:09:2b:a6:99:63:ac:1e:6e:dc:f7:
59:c8:71:f0:7c:eb:bb:f3:fe:8d:50:f0:55:9a:6a:7e:2f:48:
ac:ec:14:c9:14:30:0f:65:cc:7b:32:a2:f8:8f:d0:8b:95:45:
38:d4:40:99:03:04:2d:9b:2d:2c:32:1c:d2:5b:50:e4:40:40:
5b:ec:15:b7:3b:1f:6a:d7:99:b5:e8:68:0e:21:4e:ae:e6:0d:
d6:91:27:6f:52:f2:9e:ec:82:2f:c7:86:05:a1:35:26:08:4a:
ca:56:f3:87:eb:ff:61:ec:2f:8e:56:c1:9e:70:76:f6:3a:94:
73:fa:1a:3b:f1:25:4e:94:7e:c6:11:84:4e:4b:2f:a3:e2:ba:
ec:98:19:53:1b:3e:4e:56:d2:39:8c:87:53:8e:bd:f6:c1:2f:
f5:83:c7:9f:5b:85:d2:7a:00:17:a4:e3:18:35:82:c6:74:1a:
00:63:f5:20:e1:55:b7:5d:4e:d0:57:f2:98:ae:32:87:1c:e9:
22:e7:9b:dd:41:ab:f9:77:ba:9f:73:a2:6b:1c:ec:98:f0:f0:
74:6c:31:62:45:e9:52:d1:eb:07:ca:3b:48:93:f2:5d:dc:20:
2f:a1:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:28 2025 by rpki-client