Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File: LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier: KIQCB6SqNRruI+QLcJztaeNUN4NkDqImlfq4JBlcdwg=
Subject key identifier: 5F:F4:7F:E8:0F:12:33:41:7C:E7:36:53:DC:96:8D:59:54:F4:7C:8C
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial: 019A526396274082DA6B09B0D08A4088D6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number: 0315
Signing time: Wed 05 Nov 2025 05:00:49 +0000
Manifest this update: Wed 05 Nov 2025 05:00:49 +0000
Manifest next update: Thu 06 Nov 2025 05:00:49 +0000
Files and hashes: 1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: FiO7Ro6aHOaaZjB+yJnkYj0NL+oUmFI8+fVnAYcXeis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:96:27:40:82:da:6b:09:b0:d0:8a:40:88:d6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Validity
Not Before: Nov 5 05:00:49 2025 GMT
Not After : Nov 6 05:00:49 2025 GMT
Subject: CN=5ff47fe80f1233417ce73653dc968d5954f47c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:56:18:96:ef:a7:f2:7c:43:19:e0:05:ad:
d2:fe:d7:4b:f2:b8:60:53:2e:77:c5:93:fd:f1:0a:
13:75:2c:82:b5:7a:cf:ee:5f:2e:75:61:32:c3:79:
f8:16:68:9a:e4:15:c6:75:43:ae:1c:b5:4a:f9:80:
d0:96:30:2b:84:5d:2a:b9:32:fb:8a:98:2b:dd:63:
b6:16:ec:66:e5:0e:02:75:47:c1:cd:48:8c:ea:eb:
ca:0f:6a:c2:a7:99:3c:70:04:07:25:3e:81:1d:9e:
82:87:dd:1d:32:74:0f:da:39:c1:80:3f:20:fa:4c:
6e:78:90:90:83:cb:4d:1e:10:f3:90:34:d7:aa:c4:
01:dd:69:bb:c1:0d:f3:d7:ce:64:7b:ce:03:c2:dc:
63:99:95:d2:d2:6e:5a:d0:43:f8:93:ab:3d:68:e7:
bf:92:d2:14:0d:b6:c6:a5:07:40:27:8a:46:cd:2d:
6b:a5:6c:34:18:78:32:91:5c:80:2f:47:44:50:ae:
99:9e:a1:9e:57:2b:51:29:ab:61:04:24:f4:dd:6e:
66:ba:73:ee:11:88:2c:e2:3c:9f:a8:53:49:0b:85:
8d:28:57:f2:8f:b5:54:b2:df:f2:35:99:d5:c4:c0:
95:38:7f:d1:18:24:82:d1:d7:1b:ae:5e:7e:ac:42:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F4:7F:E8:0F:12:33:41:7C:E7:36:53:DC:96:8D:59:54:F4:7C:8C
X509v3 Authority Key Identifier:
keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:7c:64:43:32:3a:61:67:f9:89:51:c4:f9:ea:71:56:bd:ea:
24:b7:1b:fc:7a:bf:a7:5d:53:bb:4a:39:64:6b:44:23:c6:b4:
04:02:f6:e0:77:bc:f9:fd:a2:40:52:74:54:ed:be:ce:48:ce:
f6:b0:5e:89:a7:e8:30:d7:da:df:96:ee:21:3a:9c:88:c0:e9:
af:7e:0f:2f:74:c4:33:e1:43:46:fb:52:25:b4:3d:fe:89:7a:
4e:11:0a:de:f0:a9:bc:83:96:31:86:63:f8:8e:2c:ca:30:18:
f0:e4:be:f8:c6:57:24:ff:ad:22:1f:c0:91:56:5e:47:10:9b:
ed:4c:d6:72:f8:9d:0e:f7:ad:b8:b5:96:a8:21:55:64:ba:6b:
8f:ba:e9:ef:e0:14:ed:9b:ba:f1:ca:f2:90:41:ac:d4:49:2b:
f1:22:a5:63:e0:bd:04:cb:bf:32:2e:8a:7d:61:d1:50:04:79:
81:29:96:c1:23:bc:1f:2e:8a:8a:2d:db:c6:a2:8a:b6:d2:f7:
d8:3c:5b:eb:0b:99:43:a6:a1:4e:13:39:10:21:bf:79:32:51:
96:79:1a:20:ba:4b:1e:a9:a9:da:32:01:29:b5:bd:9a:0e:a3:
16:5e:56:22:17:dd:a0:6d:10:35:ca:5d:38:36:a5:9c:56:cb:
8d:3b:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:57 2025 by rpki-client