Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: 3xxJ+gaSCzZot+f0xevMmywKvE+xDSnhkrxHM+AIGC8=
Subject key identifier: 98:23:E7:E3:53:7D:4E:E0:1A:6A:D5:F2:59:F5:26:A1:ED:0B:B5:59
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 019A4DE1A10C03EEE8866BC2CDC36D616473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 037F
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: 9z8BpishWdhQ/5kf4HLJFA7+KEoPR9Z3PrKTZns8oIc=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a1:0c:03:ee:e8:86:6b:c2:cd:c3:6d:61:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=9823e7e3537d4ee01a6ad5f259f526a1ed0bb559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:4b:c6:f5:d8:7e:41:a9:cc:d7:19:f6:c7:
af:d6:b0:10:43:ab:34:47:24:f8:fd:12:aa:e9:64:
0f:3d:35:d4:fc:d2:07:e7:ea:54:fd:b6:13:de:f8:
66:87:bf:d0:28:7e:cf:4d:3a:71:4c:37:c1:b1:b1:
1c:90:9d:ba:d3:bf:eb:89:46:a0:10:e5:df:34:55:
26:8a:4b:c4:29:36:a9:4d:10:63:c7:da:47:b3:96:
5e:4e:69:42:ef:af:55:c6:0d:8a:ed:2b:30:a7:8f:
a5:24:35:9d:1d:ea:26:b5:72:f0:bb:90:71:77:48:
70:df:b8:0d:07:c2:c5:bb:de:96:64:6a:d7:ab:40:
05:34:99:31:57:9f:48:45:24:0a:72:e9:9c:3b:3f:
19:10:1c:56:71:cb:05:70:01:b0:2c:64:78:2c:6c:
19:a4:f3:a6:2f:3f:b2:45:b6:a9:cd:57:36:50:32:
cf:21:8b:ab:b5:a8:ef:b7:16:6b:3f:2b:53:e6:0f:
0d:37:bb:8a:b9:b3:3f:e2:3e:a0:0c:cc:fe:d9:9f:
b2:69:99:a9:3f:f0:7e:68:aa:c6:97:52:7d:4e:6c:
f2:a0:a9:dc:68:dd:bc:f2:cb:91:df:5a:e5:5e:ca:
b2:11:12:4a:dd:d0:19:aa:69:aa:2d:40:40:8e:ce:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:E7:E3:53:7D:4E:E0:1A:6A:D5:F2:59:F5:26:A1:ED:0B:B5:59
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dc:75:34:27:2f:a5:cf:f1:11:75:58:51:18:86:ea:f2:86:
62:33:9e:5d:b3:1b:04:a8:25:3c:da:79:55:ac:88:21:24:2e:
aa:ff:55:d7:f8:62:4e:34:55:e6:f5:b1:17:68:b1:9e:68:39:
92:75:b2:7d:66:ea:65:35:25:3d:3b:83:37:15:10:2d:1a:49:
b1:b5:d0:85:de:95:fe:81:7d:2a:7d:58:fb:54:c9:32:fb:c2:
99:58:ec:c5:ce:f1:46:e3:3e:a0:24:e9:d3:11:bb:7e:63:fa:
a3:c4:3f:62:e3:6d:28:48:c3:a1:1b:88:68:46:85:89:78:3a:
c8:d3:b5:07:c9:29:48:26:78:a0:b2:a0:cc:8d:26:e0:c5:bf:
de:84:9c:95:2a:50:fc:89:e2:8d:d7:a5:99:8c:79:da:cb:8d:
a4:ec:ea:95:8b:a1:a1:63:19:9a:a0:31:5a:c8:01:5b:8f:68:
47:ef:d7:fa:ca:58:e0:c5:b0:2f:4d:7b:ab:47:dc:a5:67:67:
d2:3d:f0:71:0f:ad:37:d3:e6:b1:f6:a4:fc:97:04:5f:40:7b:
48:1c:a5:53:7e:ee:a5:f1:81:76:24:16:45:da:4c:89:8d:64:
69:af:46:ff:50:87:cb:95:20:ed:41:63:49:04:4a:63:31:66:
f3:a7:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:35 2025 by rpki-client