Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: K1EOoNlU7QNAv7knevvLkaCbfxD58CZj86k7QFRmdnk=
Subject key identifier: 8E:67:A2:BF:2D:91:B9:4D:26:4F:8B:21:22:97:4C:96:00:05:10:07
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019A4EF4DE00BCC4833FD34BF952CAEEA707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: 3B32F63hbmWTqlBRcrQ4HOsbxgbaE8jnQ/pFnpyBM4M=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:de:00:bc:c4:83:3f:d3:4b:f9:52:ca:ee:a7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=8e67a2bf2d91b94d264f8b2122974c9600051007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:ee:67:27:bf:9e:02:00:8b:08:55:60:ff:
1a:7c:18:75:6a:83:ed:09:e5:02:10:bb:4b:71:2a:
71:ea:be:a5:71:8a:23:c0:5c:2f:c7:bf:e9:ee:4d:
29:df:e9:93:1f:68:4c:7e:cf:72:ab:50:b3:0f:70:
62:b3:dc:9f:83:a6:2d:d7:7d:28:f2:82:5d:d0:1b:
16:78:34:05:bb:60:9b:52:ca:7f:f3:f6:a6:b6:e2:
a0:3f:96:5b:f4:95:81:4f:ad:d9:7f:d3:52:93:85:
2d:fb:79:4c:30:4e:d6:97:5d:83:d6:0a:05:ef:4f:
83:9f:f5:1f:a7:2a:5a:3e:24:2b:41:cd:de:6c:d2:
4d:8a:e8:f1:8d:5c:de:26:9e:c8:4a:25:13:ab:7a:
51:34:9e:c5:20:36:03:12:f3:07:eb:ff:f1:f9:65:
41:a6:15:d6:bb:01:76:13:4a:99:3c:bc:a2:62:cb:
5a:f5:d6:8e:7f:62:44:59:79:f3:24:3f:b7:99:53:
09:61:2e:e1:df:be:3e:bf:1e:25:46:2e:62:9f:4e:
c6:f5:d2:3a:a0:56:1e:05:f4:5e:92:6c:0c:4c:78:
8f:1b:2e:a8:33:af:ca:d4:97:6f:38:21:07:c1:47:
63:05:10:2b:fd:1e:d3:15:d8:e3:f4:92:d9:36:d7:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:67:A2:BF:2D:91:B9:4D:26:4F:8B:21:22:97:4C:96:00:05:10:07
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:51:41:5f:8e:19:e1:6c:82:ae:be:38:f3:da:5f:c3:0e:cc:
94:4d:1e:27:87:3d:eb:0c:6d:d3:ed:18:45:23:b5:e0:0b:3f:
1a:aa:3a:d4:b3:75:aa:5e:68:cc:06:f3:21:73:3d:05:b7:97:
48:54:e3:cf:1d:53:7d:a6:c9:d9:ef:5f:db:32:6d:ed:22:a2:
35:29:f1:be:25:e0:64:9d:49:05:fc:90:71:ec:65:ba:f0:1d:
5c:8d:fc:a5:bb:25:27:dc:5a:cf:2b:e7:af:15:43:86:eb:4c:
e4:f2:0d:7c:89:56:2a:40:8a:72:78:ee:b4:50:d7:fd:79:82:
7a:2e:2b:76:28:d9:20:a1:f3:6c:78:6d:5a:d9:a8:1b:49:3e:
40:d3:d8:ad:43:ed:54:af:33:11:3e:ba:3b:f9:32:8f:c4:92:
15:fc:e2:fd:61:d5:a5:5f:0e:24:53:71:8a:8c:55:a5:7b:67:
9c:24:1f:f4:4a:e9:db:61:7c:95:41:fe:d5:f5:22:5d:c6:43:
61:19:67:67:0f:86:93:03:81:14:2b:2d:ca:1d:a3:62:0b:40:
64:12:13:f2:dd:48:fa:c3:11:ad:ab:a1:88:f0:d6:22:de:63:
74:a2:9e:06:ef:ac:28:87:5d:a7:24:1c:48:21:5e:27:9a:62:
d2:af:03:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:36 2025 by rpki-client