
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json)
Hash identifier: zVldULDFKXuPp18ktEXNoToytlRF5qcSApDnHZwqAG8=
Subject key identifier: 31:E1:46:0E:7D:12:A1:DE:81:B3:DF:42:B3:BC:44:5B:DA:46:79:C7
Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Certificate serial: 0198819E0AF8ACF71FDA3C798D793662577A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
Manifest number: 78
Signing time: Wed 06 Aug 2025 23:01:14 +0000
Manifest this update: Wed 06 Aug 2025 23:01:14 +0000
Manifest next update: Thu 07 Aug 2025 23:01:14 +0000
Files and hashes: 1: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: fH3UK8uOZ2R3l1NoUgjYVrsD6cjggCjz+NErQSXuMN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:0a:f8:ac:f7:1f:da:3c:79:8d:79:36:62:57:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f
Validity
Not Before: Aug 6 23:01:14 2025 GMT
Not After : Aug 7 23:01:14 2025 GMT
Subject: CN=31e1460e7d12a1de81b3df42b3bc445bda4679c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:39:76:3e:ad:4d:e3:b1:57:5c:c4:49:31:3f:
20:3b:d1:05:a1:fa:4d:12:7f:1d:90:a5:28:c2:9d:
6b:15:8b:7c:4a:88:9b:58:d0:80:c4:87:37:7c:b9:
29:6e:d6:e2:8c:42:78:bd:2e:3a:ac:fa:58:4f:1d:
6a:75:d0:1b:45:d1:78:08:89:dd:d4:1a:71:9c:41:
c2:77:b8:da:44:2c:91:ee:c1:e1:c9:05:cc:4e:03:
be:7b:21:ec:62:60:b9:ca:86:ae:64:30:fa:80:2a:
41:41:bc:86:d8:a0:b0:9a:07:40:df:16:ed:e1:3f:
57:c1:90:d8:65:42:e7:d0:0d:4f:d5:71:83:be:99:
21:9f:47:93:c2:56:19:6c:1c:d3:8a:26:de:18:6d:
43:58:c7:d5:17:81:c3:0d:53:70:54:16:9b:1f:a4:
1b:33:0d:2e:74:eb:99:10:54:65:7f:9a:84:0a:45:
fa:28:44:fb:47:52:4d:3a:7f:51:ba:bb:0e:04:19:
8d:dd:2e:c3:ec:40:2d:c0:f9:5c:7b:7b:73:66:4f:
14:78:32:ff:e9:98:7f:bc:25:46:3d:d2:0f:19:48:
09:f9:30:59:ff:a4:be:b3:5e:a1:aa:72:12:28:32:
26:8f:5a:c1:e1:80:c7:d3:0c:f7:4b:04:88:b1:e9:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E1:46:0E:7D:12:A1:DE:81:B3:DF:42:B3:BC:44:5B:DA:46:79:C7
X509v3 Authority Key Identifier:
keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:47:a2:57:f9:72:b6:23:99:6a:25:a9:84:2b:0b:c3:6f:fe:
c3:22:ee:5d:03:10:cc:e7:7b:41:f4:9d:08:81:91:c5:2b:8e:
d4:34:52:a3:ef:b1:26:ce:5c:92:9d:7a:9e:ca:4e:cf:ae:14:
60:16:8a:2e:4f:b3:5b:d9:62:6b:94:f0:d2:55:28:b2:31:5e:
17:28:89:2b:c1:7a:0a:cf:3d:03:d6:a6:e7:df:f9:24:e3:65:
9d:f2:70:7b:4a:b0:b0:50:01:85:f3:f2:1e:b8:e6:1c:06:bf:
0a:c1:f0:59:15:d9:29:ff:ea:5b:b9:94:25:c4:b1:b8:68:eb:
f4:9a:89:bf:6e:57:15:75:f6:44:07:32:c1:cf:29:c2:a5:82:
78:4e:da:f9:d1:19:df:8f:16:33:45:8e:76:82:34:7d:c1:46:
c4:fb:70:9e:48:4c:00:6d:33:99:41:f7:1d:e0:ec:c6:26:7f:
1e:c6:e1:30:9d:ae:50:9d:e9:c5:cd:1d:bb:d4:57:10:0c:39:
dc:33:b7:5c:53:c3:af:9e:ec:87:c8:79:de:79:c2:58:49:91:
21:bc:b3:a8:9b:e8:0c:e8:3b:21:33:0f:1e:b7:fc:0b:c9:0b:
b2:0a:6c:30:93:f6:46:a1:16:c1:e6:71:92:ba:73:f6:42:56:
5d:87:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:52 2025 by rpki-client