Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: g9EGfEyLD7cm7GkvTSKp0yIfBWALPDB/ssY5vpOeXpM=
Subject key identifier: 0D:BD:51:33:93:7F:00:B0:FE:DF:96:FF:7B:F8:08:61:E6:EE:D2:7D
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 019A5262EAE8A92DA84C1BFBEAEFEE80849D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 0FCA
Signing time: Wed 05 Nov 2025 05:00:05 +0000
Manifest this update: Wed 05 Nov 2025 05:00:05 +0000
Manifest next update: Thu 06 Nov 2025 05:00:05 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: 8mQTQAmJ2slZlioTox0zWc0rMvBQxPO41xKKutTIL0E=)
2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:ea:e8:a9:2d:a8:4c:1b:fb:ea:ef:ee:80:84:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Nov 5 05:00:05 2025 GMT
Not After : Nov 6 05:00:05 2025 GMT
Subject: CN=0dbd5133937f00b0fedf96ff7bf80861e6eed27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:d5:ca:73:b7:89:3e:b1:00:4d:1f:30:05:
74:51:99:43:d2:6f:24:1a:fc:73:e0:6b:1b:73:17:
cf:3f:00:20:d5:a7:1b:53:9c:5b:26:83:26:f3:ad:
99:52:72:1d:dd:56:a7:9e:76:d0:57:e0:90:a9:78:
b3:17:c3:92:2e:8f:ee:5d:2c:06:77:e1:2e:9f:fe:
71:99:36:78:2a:4a:7e:7f:e5:4c:7a:e3:fd:4a:e3:
6c:40:c7:1b:73:9f:de:b9:17:c7:34:49:06:88:0d:
92:e6:7c:e5:d3:80:2d:b9:4a:f8:42:e7:c8:63:5d:
2a:df:39:84:e8:31:35:7b:ae:0f:89:28:c9:e6:eb:
a9:11:f4:2f:a4:df:86:38:06:3a:98:60:98:76:dc:
83:45:60:87:db:48:5f:0e:f2:97:53:ba:73:bb:21:
47:c0:6b:6d:18:4b:9e:a5:31:80:da:96:4e:0e:3c:
d3:63:c5:96:c5:08:43:61:2f:26:66:ca:19:0a:4f:
62:5c:3e:e2:2e:1e:23:57:05:6b:29:8f:4a:17:29:
85:84:70:67:1e:35:57:54:94:04:32:f4:b8:14:d0:
ae:8c:b7:22:87:0c:50:48:d2:f3:18:87:9e:45:78:
02:83:6a:3d:ac:82:05:f4:09:3c:1f:de:4f:0d:27:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:51:33:93:7F:00:B0:FE:DF:96:FF:7B:F8:08:61:E6:EE:D2:7D
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b2:f6:be:f4:1f:61:29:66:be:58:65:a8:c3:cd:e0:d2:ed:
e2:41:55:d5:9b:ad:86:e8:27:48:ac:76:91:11:c8:9f:b5:6e:
5f:32:51:33:81:f5:ec:54:d8:ec:61:c8:15:b6:0e:41:a4:9d:
39:ec:55:48:9d:49:e3:76:57:9a:2e:9c:ad:de:31:bc:bd:93:
4f:04:24:0a:8a:c8:68:b5:64:f7:fc:ba:0c:51:80:a2:2d:4e:
58:c8:e4:9c:5a:38:a2:dd:9a:8c:e0:45:a2:77:d8:82:9b:4e:
c1:5d:1d:ab:0c:d7:9f:10:7d:35:35:32:b1:15:07:de:35:a7:
87:38:6c:10:16:1a:3b:4f:79:94:85:26:68:53:00:70:bb:91:
bd:18:85:78:f5:2e:c0:8d:b4:fe:33:17:0c:0c:77:a2:42:a8:
7c:a0:5f:7b:32:b0:96:08:f1:ca:d8:05:7e:f7:cf:da:9a:de:
55:7c:2f:18:df:ec:ba:8a:b4:dc:87:83:fc:1d:3a:70:4b:6d:
c9:a2:8c:d2:bc:6b:e4:5f:5d:bf:c0:8c:3a:84:9d:85:7b:df:
c5:e8:c1:51:7a:18:97:d2:91:e4:19:c6:d1:89:fa:f2:3d:0a:
85:b2:90:ba:be:b8:3a:81:4a:fe:aa:8f:df:f6:2e:f5:56:c7:
6d:cf:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:18 2025 by rpki-client