Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: sH6gS8tVFJR84G4u9G0HkDSma+md71UpeoIq2iZWnp0=
Subject key identifier: C0:FC:55:FA:8D:4A:90:BA:71:8F:1A:4B:A6:08:02:DF:E9:B7:24:A4
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019A4DAB213F838A199679B24D9FAF3A54A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 07:00:52 +0000
Manifest this update: Tue 04 Nov 2025 07:00:52 +0000
Manifest next update: Wed 05 Nov 2025 07:00:52 +0000
Files and hashes: 1: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: EEa9TxsUZ1ZqyC3QrvwERND0nJx2UTiildgasyFuNYc=)
2: R2RDzykQAbza4085lewohvYZtmU.roa (hash: adeMuE5omufxyAqTiuGENNm2Zw8WMI+lsuIVfr4zgng=)
3: sTYYfE-ujsVTDXjz9Y8hd0TFvlE.roa (hash: ljd/bgs17GlLF7Ke34S9FfTJmNrgp26W4UM6Jrr4R8E=)
4: tc8DHwrpANZJAqmRBXBxCV3xfDQ.roa (hash: /HSEzwNzFaDBQVpi9xjFJo81xvhbu0eZ3IdAmabMsvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:21:3f:83:8a:19:96:79:b2:4d:9f:af:3a:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Nov 4 07:00:52 2025 GMT
Not After : Nov 5 07:00:52 2025 GMT
Subject: CN=c0fc55fa8d4a90ba718f1a4ba60802dfe9b724a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:ba:5f:a6:e6:43:e2:cc:ca:af:df:c0:f0:
88:b0:0d:ab:ce:6a:e8:28:f7:c7:2f:49:95:d8:54:
1c:37:41:8c:f7:bf:9c:d7:a1:47:28:e1:5e:20:a5:
7a:95:23:f7:26:01:69:e5:2d:3e:16:ef:f6:a1:68:
28:27:fb:6f:66:d0:11:13:71:5b:f7:b7:8e:dc:50:
f6:b2:c0:28:1c:d6:fb:a1:50:2b:00:1e:82:87:cc:
9b:c3:e5:c0:59:13:66:10:55:69:3e:68:fc:83:f0:
77:3b:a2:81:e5:82:15:75:1a:83:76:f7:63:34:9a:
b3:af:5d:03:26:73:d0:64:e2:21:23:31:17:fb:b8:
b1:73:5d:53:32:03:1b:4b:26:60:47:cb:d2:19:e1:
b8:23:73:34:60:ef:71:ed:5b:f1:b2:67:08:8a:dc:
ec:31:58:9d:d5:25:39:1b:32:98:93:6a:1b:5e:d2:
35:2f:54:1c:1b:67:b2:20:0b:0e:f7:f2:10:51:e9:
be:92:bd:58:d7:b6:40:17:74:8f:f9:01:b0:02:6b:
98:e1:84:10:cb:e1:13:19:0d:38:53:12:7e:77:ff:
28:f6:33:3c:d5:2e:3c:a3:36:ab:1d:8a:f9:6c:fe:
6a:6d:aa:69:5b:4d:51:e7:62:c6:62:77:d5:62:74:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:55:FA:8D:4A:90:BA:71:8F:1A:4B:A6:08:02:DF:E9:B7:24:A4
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:25:27:46:6b:7e:7b:eb:e5:21:da:41:4a:06:d2:20:46:b1:
f8:a7:f8:c8:f7:8b:e0:5c:85:b1:fd:09:c3:4b:e8:0d:6d:33:
20:56:3f:42:bb:9a:64:bf:50:12:2f:7b:d4:6c:5e:b7:ac:b0:
c6:6c:c7:59:6e:1e:ba:b2:0e:b8:22:4a:bc:23:21:cf:b6:83:
e3:7d:cf:d0:cd:01:f3:12:d1:5d:75:7f:bb:2f:36:b8:fe:c3:
fd:2d:aa:9b:be:c9:02:e0:b4:93:c4:b9:5f:00:e4:4a:a9:21:
c6:90:cb:ca:c7:f0:7b:c1:7b:40:03:41:eb:9c:c8:2a:c2:b0:
14:03:e5:a6:c5:de:41:cb:da:b3:ba:5a:6f:6f:96:5c:5b:34:
c7:6e:a8:0f:95:ca:95:92:40:5b:14:46:51:f6:35:72:d6:20:
fe:3b:22:2c:5e:be:ad:a1:04:23:c9:42:f2:a0:5e:1c:fa:8d:
1c:1d:ac:68:e3:e5:0e:9b:04:ee:f9:26:f6:a9:3e:4c:72:60:
79:72:5c:57:8a:82:c0:96:8c:44:fe:da:5a:8d:f8:3e:d0:42:
54:cf:97:6f:ce:80:58:86:62:04:8f:ee:4a:02:c2:78:9d:0f:
9d:e6:b0:91:a1:2a:a4:d8:21:5f:a0:98:1d:6f:23:8e:e1:ff:
a7:17:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:31 2025 by rpki-client