Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File: LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier: NrJHLlilUmfbSwEd8NOJqXhBRBAJP6Z3wDOEUs+UUpI=
Subject key identifier: 43:29:CC:AD:13:E5:F4:C7:0D:F6:F5:A8:4C:8C:14:A2:AF:CB:9D:DF
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 019A503E3E8432435DA0650F63DD23C79D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number: 13BA
Signing time: Tue 04 Nov 2025 19:00:47 +0000
Manifest this update: Tue 04 Nov 2025 19:00:47 +0000
Manifest next update: Wed 05 Nov 2025 19:00:47 +0000
Files and hashes: 1: ANPtCnGv8gHA7x3faWzBPJFvOXI.roa (hash: 47gT+uwBF8roCKnncbKY5zhpD+DW3HsUlU+dHgq1yW0=)
2: G9SmysWbMuSxx-EDG3Cs-f8IXqY.roa (hash: asZN9tI3ws8BcQXeW3lamrTpn0W8Ef30eRexdJjOvPw=)
3: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: rRfDYDmqLVEY9M2Hrk+A82ayUa5ZSjHirZc4EYHBYTE=)
4: tVeA1QW6o2_4cAAoeOMN60OC09M.roa (hash: K+ciN3DFQxqGOLGpRd4/ZhXkYH4OU+8ws5sujZeJtPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:3e:84:32:43:5d:a0:65:0f:63:dd:23:c7:9d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Nov 4 19:00:47 2025 GMT
Not After : Nov 5 19:00:47 2025 GMT
Subject: CN=4329ccad13e5f4c70df6f5a84c8c14a2afcb9ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:72:52:1c:ac:8c:37:fb:87:d0:3a:ed:f0:
49:bc:7c:c7:d3:c6:6e:8b:9c:fb:1a:67:58:83:73:
12:8f:51:b2:56:f3:03:2e:c4:76:5b:1d:11:ab:d3:
6c:f6:91:92:13:3a:24:74:d8:ef:ab:95:5f:6c:9d:
83:0c:27:f1:b0:e8:6b:ec:5d:28:87:75:a8:7c:58:
44:91:09:c7:1a:7a:57:78:c9:d6:f1:c4:19:60:01:
38:f6:bc:35:f0:7a:d4:d9:65:06:92:7a:fd:49:45:
51:77:da:61:55:c5:8d:7c:c8:ef:9b:06:9a:02:94:
b2:9b:7e:0d:9e:9a:24:7d:ec:cd:15:4a:64:eb:55:
ca:e2:92:b8:a3:95:27:05:e4:ec:1c:03:43:7e:1b:
03:8f:47:85:68:b1:75:9b:95:48:1e:28:8c:14:14:
43:e2:bf:c5:35:8d:e3:45:55:b5:b6:21:b9:a2:69:
d6:d1:08:dd:9d:7b:a3:bd:df:0f:0f:3e:43:bf:6d:
04:13:0b:7c:25:5a:75:10:f8:8f:b5:c9:54:a7:0c:
c2:92:0b:da:f0:d3:d6:fb:eb:40:3b:9b:dd:fa:09:
ae:79:29:80:07:c9:6a:02:b9:bb:d1:45:dc:79:35:
e6:5d:7e:f6:f3:c3:e9:7e:1d:36:32:9e:2e:7e:7b:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:29:CC:AD:13:E5:F4:C7:0D:F6:F5:A8:4C:8C:14:A2:AF:CB:9D:DF
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5f:48:92:81:0f:e4:a5:0a:7c:49:06:f8:43:42:b6:81:26:
1a:be:26:2d:49:ae:e8:5b:00:90:73:46:75:7e:24:b1:3f:a6:
ce:ce:88:3d:03:0e:29:c4:15:7c:cf:fa:f7:e4:6e:60:77:34:
ef:fd:ef:44:38:90:d8:b7:e9:5c:33:73:97:1b:8c:bd:1b:cb:
ad:1c:09:3e:56:f8:14:40:f4:20:9d:be:70:ee:52:fa:73:d3:
01:64:a7:6e:57:36:55:21:9d:f2:21:3b:9e:e2:7c:3d:73:58:
a6:6c:f5:07:cf:c9:09:13:ae:dd:ef:14:ce:8d:2c:ab:c3:ea:
d6:0b:53:4e:b8:18:ed:45:c2:63:54:af:3a:2a:69:88:98:2f:
76:26:54:d1:c1:a3:06:45:b6:34:cf:90:f3:a1:17:a5:9e:d5:
cc:0a:2f:ad:4b:28:96:92:da:78:22:61:db:5d:a3:79:d1:31:
8b:4f:2a:2c:44:cb:9c:ad:53:9e:94:5b:0b:23:24:3f:30:f7:
12:09:93:27:53:ef:9b:df:00:63:9f:9b:16:42:9d:e4:5b:c3:
7d:9d:fb:04:c6:c3:33:12:55:80:d7:f6:07:16:c5:ef:63:e7:
99:71:cf:86:65:ee:1e:f3:8f:b2:89:41:d4:39:a1:1d:b3:5b:
35:29:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:02 2025 by rpki-client