Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: j9ADwXrbRMdU92NLBrfyUzkMYEMB58o//iJcaZMdbZA=
Subject key identifier: 46:22:2C:19:C5:73:80:BE:4A:F0:14:2C:E8:B5:73:02:56:BE:F2:32
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 019A4EF4EBDAA25B77BC7104116476A25067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 12DE
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: dquk8N6RsNPZyB2I+6HjT3Pwcn+6wyUMi2GaS9kMFd0=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:eb:da:a2:5b:77:bc:71:04:11:64:76:a2:50:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=46222c19c57380be4af0142ce8b5730256bef232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:da:92:88:1a:26:a8:cf:9d:4f:e6:d4:21:
19:e2:a1:09:b7:7a:61:5c:2e:50:1f:7e:a6:89:8b:
81:6b:40:3c:e9:29:ac:f5:65:b6:c5:11:f2:aa:83:
1b:55:6c:3e:98:f1:f1:52:d2:42:70:28:f3:0c:f9:
f3:d8:c6:6f:be:cf:f9:02:db:cc:b6:eb:71:8d:bf:
f2:d3:8e:14:4e:0b:70:5a:89:db:10:3a:7e:d7:cf:
7e:45:1d:3b:a9:32:2d:38:86:1d:0d:4c:f3:bf:56:
72:64:85:22:d9:e0:15:d2:9b:d8:92:c7:e8:83:c4:
a8:a9:27:7c:7f:d8:d3:ec:15:10:9a:29:20:bc:a8:
95:8c:99:00:8d:bf:04:0c:4e:15:67:d8:7d:35:8e:
87:f4:b7:05:bf:8c:9c:ac:cc:8b:9d:0d:05:f1:03:
df:6e:3a:7b:e7:f9:80:6e:b0:04:62:cc:aa:6e:87:
db:cc:2d:ca:3b:18:8b:50:ab:0c:60:1c:2f:8e:cd:
20:31:3f:bc:d7:7c:1a:57:01:8a:60:4c:e8:3f:15:
30:4c:fa:9e:4d:4a:77:dc:4d:18:b0:c4:3a:da:a5:
0b:17:78:36:53:fb:17:53:10:d6:cb:d2:a4:1f:2d:
36:6b:d0:42:69:c7:28:09:c6:29:63:a0:e9:4d:16:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:2C:19:C5:73:80:BE:4A:F0:14:2C:E8:B5:73:02:56:BE:F2:32
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:65:77:67:ea:61:54:91:bb:a3:69:90:12:87:86:d7:f4:
4b:33:45:39:20:01:99:2d:5d:e6:c6:6b:2a:ab:ad:97:e2:48:
a5:a7:b4:d4:03:f9:43:a0:ec:36:b7:35:ee:40:dc:a5:9a:33:
a7:75:27:a0:d5:d4:f6:79:a2:97:b8:14:08:7c:74:39:0d:6b:
5c:f1:3f:07:73:79:4a:6d:cb:e5:f3:e5:b5:b4:bb:2c:5e:74:
d9:cb:10:d3:b0:ba:69:07:78:7f:9d:17:ca:62:ae:ed:9b:78:
1d:94:2c:39:bc:a1:d9:6c:67:29:ea:fc:ce:c7:15:c3:a0:29:
c6:95:16:f7:6c:48:dc:db:4c:bd:be:08:6a:d0:43:d3:2f:19:
4d:22:46:af:11:c3:0b:2a:da:81:54:63:4a:b8:f7:9a:c7:a0:
a5:d6:12:5f:1e:ff:2c:92:42:c0:0a:de:dd:86:d1:20:cb:6d:
70:b8:44:0f:85:79:48:10:55:16:c0:49:52:b8:dd:87:e8:02:
e4:54:d1:42:02:70:59:17:ed:5f:a2:bc:ad:03:7e:f9:ac:47:
8e:38:75:b2:cd:56:39:d7:b8:b3:b8:01:16:3e:27:c3:26:21:
e9:63:1b:dd:cb:a7:15:10:8d:71:19:cd:43:a5:b1:69:28:b3:
b3:10:1a:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Ovaolt3vHEEEWR2olBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl
MDk5MGEwHhcNMjUxMTA0MTMwMTA1WhcNMjUxMTA1MTMwMTA1WjAzMTEwLwYDVQQD
Eyg0NjIyMmMxOWM1NzM4MGJlNGFmMDE0MmNlOGI1NzMwMjU2YmVmMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhLakogaJqjPnU/m1CEZ4qEJt3ph
XC5QH36miYuBa0A86Sms9WW2xRHyqoMbVWw+mPHxUtJCcCjzDPnz2MZvvs/5AtvM
tutxjb/y044UTgtwWonbEDp+189+RR07qTItOIYdDUzzv1ZyZIUi2eAV0pvYksfo
g8SoqSd8f9jT7BUQmikgvKiVjJkAjb8EDE4VZ9h9NY6H9LcFv4ycrMyLnQ0F8QPf
bjp75/mAbrAEYsyqbofbzC3KOxiLUKsMYBwvjs0gMT+813waVwGKYEzoPxUwTPqe
TUp33E0YsMQ62qULF3g2U/sXUxDWy9KkHy02a9BCaccoCcYpY6DpTRbhdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYiLBnFc4C+SvAULOi1cwJWvvIyMB8GA1UdIwQY
MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct
YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm
LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVlld2fq
YVSRu6NpkBKHhtf0SzNFOSABmS1d5sZrKqutl+JIpae01AP5Q6DsNrc17kDcpZoz
p3UnoNXU9nmil7gUCHx0OQ1rXPE/B3N5Sm3L5fPltbS7LF502csQ07C6aQd4f50X
ymKu7Zt4HZQsObyh2WxnKer8zscVw6ApxpUW92xI3NtMvb4IatBD0y8ZTSJGrxHD
CyragVRjSrj3msegpdYSXx7/LJJCwAre3YbRIMttcLhED4V5SBBVFsBJUrjdh+gC
5FTRQgJwWRftX6K8rQN++axHjjh1ss1WOde4s7gBFj4nwyYh6WMb3cunFRCNcRnN
Q6WxaSizsxAadw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:48 2025 by rpki-client