Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: hDK32Qhtklt5BTdaNQilLhjB8B6TMv3W+E8UOVbFtig=
Subject key identifier: C9:6E:04:DB:2D:A6:A0:FD:8D:27:BA:3C:4B:07:A1:45:C1:CB:10:C1
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019A4F61DBFCF6EBAED4BD2DA00BC0E930E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 1200
Signing time: Tue 04 Nov 2025 15:00:04 +0000
Manifest this update: Tue 04 Nov 2025 15:00:04 +0000
Manifest next update: Wed 05 Nov 2025 15:00:04 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: VCFyhs7G5n74MyM7MFT7Hiy/PGAmGwle9aGZW4Nn200=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:db:fc:f6:eb:ae:d4:bd:2d:a0:0b:c0:e9:30:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Nov 4 15:00:04 2025 GMT
Not After : Nov 5 15:00:04 2025 GMT
Subject: CN=c96e04db2da6a0fd8d27ba3c4b07a145c1cb10c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:1d:3b:51:41:96:af:87:73:33:ce:71:5f:
2d:27:3b:c9:10:aa:08:62:aa:ab:89:a1:1e:f5:37:
44:da:6a:35:9e:26:d7:06:77:30:b8:02:99:2d:f5:
8c:6e:e4:b6:4d:da:65:72:50:7d:76:95:cc:1d:d6:
8b:9b:9a:83:27:54:81:4d:0b:30:82:4a:98:24:d5:
80:20:cd:a5:94:3c:df:1e:9d:df:fc:31:4c:28:4d:
55:62:d5:bf:48:10:f0:37:e1:de:a0:b1:a1:90:66:
88:bd:f3:61:aa:34:6e:49:81:13:0d:72:95:d2:23:
23:2a:6a:1b:e5:b5:da:48:78:40:80:20:02:db:37:
f8:40:1d:44:b2:8f:89:ec:76:c5:72:02:1d:e3:71:
80:53:6f:72:bb:8a:bb:4b:a1:87:28:f3:08:6f:08:
c2:7b:7c:91:7f:a1:8c:2e:74:51:a0:bb:d6:48:c9:
11:4e:3a:1a:47:53:ea:7c:0b:04:45:8c:ce:41:39:
59:be:61:f6:5d:7f:f1:9b:f5:85:3d:e9:94:6f:d6:
c6:08:f4:04:49:98:65:89:84:83:35:90:cd:11:1f:
82:f4:52:22:1c:99:19:84:04:90:23:36:73:e0:dd:
e8:65:89:3b:0f:f4:48:69:89:17:1e:9b:33:ae:c2:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:04:DB:2D:A6:A0:FD:8D:27:BA:3C:4B:07:A1:45:C1:CB:10:C1
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:79:5d:11:5e:fb:c6:5c:ad:77:82:c7:05:75:97:10:9a:5b:
98:1e:2d:45:c1:95:7c:4e:5f:81:79:07:85:5f:c4:08:4c:aa:
68:9d:6f:47:62:fc:13:bf:72:de:9c:88:f1:c6:1f:a8:f5:f0:
b7:d8:9c:85:63:b4:57:d7:38:bf:63:ed:94:2b:ee:5f:fd:5b:
49:b7:58:0e:03:16:4a:6e:fe:3c:2b:94:e2:08:b0:24:0d:b9:
5c:05:11:bc:ad:80:a5:c1:90:e5:bc:36:03:95:2d:82:ae:08:
05:6f:ef:3b:16:d3:af:1a:12:e0:5b:77:52:19:ea:62:f3:ab:
64:3f:4d:77:3c:59:2b:1c:15:76:8c:66:1e:9f:88:56:4d:c2:
89:6b:9e:79:c8:08:dc:c8:2c:9d:21:70:11:e7:f6:24:81:23:
9d:d7:f4:21:da:80:51:6e:59:38:7e:69:e2:c1:ea:b7:75:f5:
57:c8:99:da:41:3d:aa:c3:e7:42:49:eb:de:aa:16:a0:72:c6:
77:d7:95:a8:b5:bf:aa:fa:47:21:d3:93:f0:5d:76:2e:6d:ab:
79:aa:aa:eb:0d:f7:f6:af:be:2f:81:d2:13:fd:a1:41:62:63:
42:4b:99:fb:fa:c7:6f:76:9e:09:fa:ed:f2:2a:bc:77:d4:b1:
87:95:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:27 2025 by rpki-client