Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: oipJFuflfMYddnBJ7XmxVemu6aPppu+I9+JQu6Kgo44=
Subject key identifier: 77:02:26:AB:77:E9:70:41:DF:43:CC:E1:48:CB:0B:F3:3C:71:B7:AC
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 01988E7DC37D451D6642F6634EEC1160049A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 0EE0
Signing time: Sat 09 Aug 2025 11:01:03 +0000
Manifest this update: Sat 09 Aug 2025 11:01:03 +0000
Manifest next update: Sun 10 Aug 2025 11:01:03 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: uGt08533o4o6O+VfnKaN5KOmyaAcIRL8aw5ftbgwCuM=)
2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:c3:7d:45:1d:66:42:f6:63:4e:ec:11:60:04:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Aug 9 11:01:03 2025 GMT
Not After : Aug 10 11:01:03 2025 GMT
Subject: CN=770226ab77e97041df43cce148cb0bf33c71b7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:ee:29:af:39:a9:81:5f:5f:4b:b7:9f:65:
a0:6d:43:27:11:1d:1e:4e:43:f5:f1:ec:58:f8:99:
c1:94:da:a1:af:2a:62:71:36:b2:52:8e:69:96:98:
0d:8b:b9:ee:4a:52:8f:a1:e2:7c:7d:6e:04:b0:71:
31:9e:46:7f:3a:70:4d:86:47:ab:49:f7:fa:0d:c7:
36:b6:d2:85:66:71:11:db:8d:f2:ed:1e:38:3d:1e:
79:82:99:8e:25:40:c5:db:6f:e8:b2:d8:5a:bc:e3:
c3:76:ae:cf:d3:17:d0:be:a7:09:be:ae:61:13:22:
dc:ff:33:ad:de:dc:1a:5c:a4:8b:65:09:1f:ed:58:
2f:0b:f0:1a:0f:4b:9d:df:d9:cc:3f:c1:c4:2a:e1:
d5:a0:31:ec:11:61:5f:62:d8:c9:8a:f8:e0:7c:44:
90:6d:dc:3b:4f:27:d7:66:03:96:34:fe:b4:a3:94:
22:97:e3:c7:96:83:9c:00:0e:d9:ca:7f:fe:df:09:
e7:e1:58:d1:96:fd:43:da:89:33:43:fe:e4:58:73:
5c:e5:d9:bd:13:fd:0a:90:f1:15:44:c9:87:3d:4a:
e9:d4:8c:35:bd:4d:38:fb:0d:25:c3:88:97:aa:d5:
c8:d2:53:87:f4:fb:69:87:bf:b5:01:e6:34:98:94:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:02:26:AB:77:E9:70:41:DF:43:CC:E1:48:CB:0B:F3:3C:71:B7:AC
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:74:77:6e:31:0c:aa:6f:70:2b:fc:f0:4c:71:29:44:12:cd:
3a:7d:06:2d:7d:37:72:ea:49:8c:38:f3:dc:38:32:40:fe:09:
44:3f:6a:b4:9b:44:f5:c4:ea:d9:82:7f:ce:9e:1f:7a:1b:c4:
d1:0a:e3:e8:07:b9:41:a1:43:1c:17:4f:77:34:fa:1e:9d:32:
cf:fa:ba:b8:d9:47:0e:87:cd:4a:a0:3e:04:90:f5:d4:88:91:
3f:be:14:2c:b7:c3:64:72:1e:65:5f:77:a0:b0:bb:26:a1:ab:
42:a5:f2:43:8f:85:73:d8:1e:8d:80:6e:16:ec:af:03:2b:e1:
30:a8:3d:61:a5:7e:7d:d2:f6:35:5b:4b:8a:c9:5d:0a:2e:36:
cf:8f:3e:e1:d1:fe:bd:16:8b:4e:02:b6:99:6e:92:9f:72:89:
b2:35:5c:e8:fc:bd:a0:92:85:e8:23:63:c1:8c:fc:2a:71:e3:
a7:6b:be:93:da:27:3f:b1:39:cc:f9:f6:d4:69:c8:dc:78:e6:
3e:38:35:75:84:aa:6e:58:b3:3c:8b:5b:c8:96:8f:da:0a:52:
78:8f:f0:40:a0:74:65:37:0c:bd:a9:a5:e3:d5:d1:69:94:09:
d3:fa:01:81:23:de:45:ca:41:a6:cf:a6:9d:05:fe:c8:d6:37:
1a:6e:a6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOfcN9RR1mQvZjTuwRYASaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1
Y2QwZTQwHhcNMjUwODA5MTEwMTAzWhcNMjUwODEwMTEwMTAzWjAzMTEwLwYDVQQD
Eyg3NzAyMjZhYjc3ZTk3MDQxZGY0M2NjZTE0OGNiMGJmMzNjNzFiN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WHuKa85qYFfX0u3n2WgbUMnER0e
TkP18exY+JnBlNqhrypicTayUo5plpgNi7nuSlKPoeJ8fW4EsHExnkZ/OnBNhker
Sff6Dcc2ttKFZnER243y7R44PR55gpmOJUDF22/osthavOPDdq7P0xfQvqcJvq5h
EyLc/zOt3twaXKSLZQkf7VgvC/AaD0ud39nMP8HEKuHVoDHsEWFfYtjJivjgfESQ
bdw7TyfXZgOWNP60o5Qil+PHloOcAA7Zyn/+3wnn4VjRlv1D2okzQ/7kWHNc5dm9
E/0KkPEVRMmHPUrp1Iw1vU04+w0lw4iXqtXI0lOH9Ptph7+1AeY0mJTHrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcCJqt36XBB30PM4UjLC/M8cbesMB8GA1UdIwQY
MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt
MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5
LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHR3bjEM
qm9wK/zwTHEpRBLNOn0GLX03cupJjDjz3DgyQP4JRD9qtJtE9cTq2YJ/zp4fehvE
0Qrj6Ae5QaFDHBdPdzT6Hp0yz/q6uNlHDofNSqA+BJD11IiRP74ULLfDZHIeZV93
oLC7JqGrQqXyQ4+Fc9gejYBuFuyvAyvhMKg9YaV+fdL2NVtLisldCi42z48+4dH+
vRaLTgK2mW6Sn3KJsjVc6Py9oJKF6CNjwYz8KnHjp2u+k9onP7E5zPn21GnI3Hjm
Pjg1dYSqblizPItbyJaP2gpSeI/wQKB0ZTcMvaml49XRaZQJ0/oBgSPeRcpBps+m
nQX+yNY3Gm6mLA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:12 2025 by rpki-client