Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: bL5D2GQq/JpHW3Ni5KtTYi03aMcjDgI98ivFwuGYqBc=
Subject key identifier: E9:57:F3:FD:49:AE:AC:E6:11:C7:78:FB:33:70:2F:74:A8:B2:67:57
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 019A518735EF763CA52B8050D9D419F802BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 025E
Signing time: Wed 05 Nov 2025 01:00:06 +0000
Manifest this update: Wed 05 Nov 2025 01:00:06 +0000
Manifest next update: Thu 06 Nov 2025 01:00:06 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: Ug4IpNaQ6R8vQ2JyeGA63BT+yla4FaWvBHKMpX7nqjM=)
2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:35:ef:76:3c:a5:2b:80:50:d9:d4:19:f8:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Nov 5 01:00:06 2025 GMT
Not After : Nov 6 01:00:06 2025 GMT
Subject: CN=e957f3fd49aeace611c778fb33702f74a8b26757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:1c:b7:aa:3a:30:0a:6a:7c:2f:3d:0e:1f:
1e:05:84:6e:ba:f0:22:7e:7e:42:88:2c:68:62:0d:
5c:4b:8c:f4:e0:9b:4a:61:97:01:c5:6e:10:17:89:
dc:f5:69:1a:2e:83:51:97:57:97:b9:96:0b:06:c8:
49:4f:e8:4f:3c:b9:0e:11:cc:5b:a7:60:be:35:c3:
00:73:f1:93:32:aa:e1:65:11:a0:c1:58:d0:69:82:
ed:46:80:02:ed:62:5e:14:8b:7b:69:46:79:66:07:
fc:22:bc:b4:f3:fc:23:04:62:58:98:8b:60:b6:51:
3d:5a:b7:9d:53:77:d4:28:75:bb:7f:ed:68:df:ff:
d5:37:14:85:20:87:c9:b7:37:31:17:52:bf:b1:0c:
c0:85:a5:71:b1:bf:4b:e2:5d:f7:c6:14:3e:d4:32:
f5:3b:af:20:af:79:7b:b4:f6:35:26:84:14:01:c5:
d6:4a:f2:bd:92:38:f2:21:8d:ef:33:b3:a7:70:f1:
1c:fa:30:ba:26:be:58:3f:4d:89:13:f3:41:dc:49:
5f:ee:ab:f2:ff:eb:cc:2f:24:57:50:6f:3c:7a:51:
6c:7d:ec:cc:12:31:45:f4:a5:69:d6:90:08:52:15:
e2:b9:3e:3e:55:74:35:ac:e8:a4:09:dd:c5:af:03:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:F3:FD:49:AE:AC:E6:11:C7:78:FB:33:70:2F:74:A8:B2:67:57
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3a:11:27:99:2e:3b:7e:d0:73:50:8f:da:9f:0c:64:d8:5d:
48:5e:1e:a7:c2:83:df:86:5a:41:0a:fd:de:23:a7:4d:4b:7f:
98:3d:d9:37:ac:f5:80:a7:d7:30:07:93:25:0e:13:f4:e6:4f:
a1:d3:15:08:68:ce:55:81:71:cd:cd:4f:b8:3a:25:0b:a9:15:
40:1d:55:0c:92:31:55:e9:66:56:bd:df:d3:57:f7:2c:fb:01:
29:3d:56:87:ce:85:52:93:3b:d7:5f:cb:37:b3:dc:d0:c1:b8:
62:7a:cf:70:13:03:d0:88:e3:f5:79:6f:93:c5:00:47:56:03:
ba:51:4c:38:ec:08:a9:04:8e:e3:46:f8:65:6f:07:7d:46:71:
05:33:4b:7f:e5:73:2b:7c:f9:a1:94:46:d1:8d:64:9c:f5:90:
7e:e5:f6:be:d6:92:1c:d8:3c:ca:11:83:23:54:87:57:5a:15:
1e:6a:cf:12:68:25:28:dc:5a:52:6f:fc:06:87:db:52:44:a5:
55:ed:ad:0c:e1:72:a1:51:9d:f0:8e:4e:30:28:27:91:a9:d1:
b5:67:67:8f:b9:4a:ef:d9:9d:69:c1:8e:14:94:01:72:ed:52:
52:3e:10:71:97:10:4d:22:60:a9:31:0a:b4:f0:14:e8:c6:76:
36:88:65:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:51 2025 by rpki-client