Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
File: LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json)
Hash identifier: L68GVfhCHLTJbpQ3OXiQheDiudxnOx7alZ1i7x5a4GI=
Subject key identifier: 9B:D6:2C:3A:36:4C:D1:DD:4C:83:CD:55:9A:36:40:79:0E:64:99:50
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 01988A336289799840EC1A90F3B428E4AE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
Manifest number: 13C8
Signing time: Fri 08 Aug 2025 15:01:19 +0000
Manifest this update: Fri 08 Aug 2025 15:01:19 +0000
Manifest next update: Sat 09 Aug 2025 15:01:19 +0000
Files and hashes: 1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=)
2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: fHN5ADw05epoaT2zd9F/c0JZVSFsaPsqBxFk+znxgOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:62:89:79:98:40:ec:1a:90:f3:b4:28:e4:ae:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Aug 8 15:01:19 2025 GMT
Not After : Aug 9 15:01:19 2025 GMT
Subject: CN=9bd62c3a364cd1dd4c83cd559a3640790e649950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:a6:8f:c7:92:c1:11:b1:78:94:79:38:77:
79:44:81:91:3b:72:78:1f:02:ea:79:95:35:11:12:
bf:2a:90:b2:80:07:0c:06:3e:82:d6:61:3d:65:99:
dc:93:6f:93:31:bb:c3:44:93:d6:bd:ff:d4:85:e2:
b4:a9:5c:fe:dc:94:df:c2:bf:a1:a7:92:99:5d:f6:
9b:cd:b4:b8:cd:6b:f7:0e:79:8d:6d:14:83:04:92:
bc:54:99:12:28:b2:f0:69:fe:7c:8c:f5:c0:1f:26:
87:a5:9d:91:d0:df:13:6a:55:e5:71:15:50:92:8c:
09:e1:01:d5:ee:13:e1:87:7d:8d:72:7b:e2:f6:29:
e4:cb:43:32:6a:00:9b:b9:da:6a:21:01:c1:1e:ea:
f0:d9:72:97:32:52:82:ac:62:3b:c3:f2:ae:8e:79:
ab:de:ac:43:72:be:81:10:85:aa:2a:2d:4a:25:7f:
1f:91:39:dd:ab:61:13:a6:a0:b4:6c:67:e9:c4:5f:
8f:b0:a2:65:09:a4:8d:c4:74:c2:2b:90:c2:7f:ea:
ce:ad:e3:b5:ac:ad:94:11:05:a4:42:50:a5:71:68:
0e:55:0a:7b:48:6c:05:99:f2:30:4e:08:b4:52:61:
fc:b5:19:ad:cf:a5:4e:50:c8:ec:f6:f9:44:79:d7:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:2C:3A:36:4C:D1:DD:4C:83:CD:55:9A:36:40:79:0E:64:99:50
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:d0:43:ac:d6:2b:64:e9:f2:d3:27:a4:dd:f2:eb:a0:af:
1d:69:0f:a8:3f:73:c8:02:fd:8d:7c:c8:42:4d:c9:84:db:4f:
a8:0c:87:68:b0:77:06:c0:df:b9:75:5d:26:6b:4f:97:e3:9b:
1b:6e:70:c4:03:ea:24:e8:6a:4e:ac:63:0f:78:50:41:cf:3a:
d4:34:3c:28:24:56:2e:53:14:c0:5f:c0:a8:9a:d8:ca:11:54:
9d:e8:6f:91:1a:91:ce:42:56:51:8f:b9:ef:04:fa:93:ec:6b:
b2:57:fe:de:bd:ec:c2:f5:ba:8e:c3:95:eb:09:77:82:8f:09:
a5:d0:c7:42:a9:d6:93:61:b7:49:e6:26:19:98:b2:10:6c:e9:
28:d4:c9:93:74:0e:7f:f3:44:80:26:12:0c:e5:95:ec:21:a9:
0b:23:fc:32:35:0a:71:99:42:5f:55:1d:7d:68:1d:57:a2:81:
9b:4f:0b:72:0e:26:fa:20:e4:6d:f6:48:60:60:1a:0c:f9:6e:
59:eb:4c:9c:8c:dc:c2:30:b5:6e:0e:e4:88:6c:74:95:10:68:
d2:74:b3:50:9b:8a:e1:b7:98:a1:6c:3c:c1:0d:20:f5:cd:4c:
dd:42:6d:5a:89:4d:b5:56:f6:13:bf:f5:c7:f2:d4:35:7f:77:
53:bf:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:21 2025 by rpki-client