Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: jePtsNQ+pCtpoN0zVBLgardBT2pZ97cGPbrQVVfGs08=
Subject key identifier: 37:0F:56:22:B6:E1:74:DF:EF:F0:BB:EE:73:45:86:70:A1:C1:19:E4
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 019A5308235DB14F2C06E16FBD95EB8061C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 08:00:33 +0000
Manifest this update: Wed 05 Nov 2025 08:00:33 +0000
Manifest next update: Thu 06 Nov 2025 08:00:33 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: qAoSv6KVj9s636JniZ1G38CJv7zjURNGcQAVPh8BMm0=)
2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:23:5d:b1:4f:2c:06:e1:6f:bd:95:eb:80:61:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Nov 5 08:00:33 2025 GMT
Not After : Nov 6 08:00:33 2025 GMT
Subject: CN=370f5622b6e174dfeff0bbee73458670a1c119e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:21:2e:ea:ae:67:23:09:7b:47:d8:2d:fc:
40:ae:c1:e0:c8:13:e4:77:ab:27:86:a7:63:63:06:
1a:d3:43:0a:52:d1:0b:f9:6a:20:f0:96:68:8e:11:
49:36:cc:bc:f7:be:97:f0:23:25:cf:52:45:41:f8:
43:0b:d6:41:fa:79:31:6a:6f:a2:7e:e4:ba:4c:dd:
56:87:1c:e9:92:a2:09:eb:d9:8b:06:7f:05:33:a0:
08:f0:07:e0:b7:7f:93:ae:79:ee:69:c0:0e:6e:28:
ff:0d:2f:74:f0:ed:ed:be:a5:8f:e8:15:3c:35:96:
3d:c4:11:11:ff:ac:6f:39:64:dc:99:87:6b:8d:ab:
9c:6d:fd:6e:5c:05:dd:21:0b:87:9d:b6:fe:b5:9c:
9c:ed:21:23:dc:fb:b4:76:3c:ee:06:dd:ed:59:1d:
3a:84:4f:29:14:bb:18:25:0a:cd:08:b4:0c:9e:b1:
2a:10:27:6c:8e:d0:5b:9e:44:09:b6:41:31:a1:de:
15:28:97:09:12:15:53:e0:00:61:f1:88:38:86:e7:
40:ce:cc:f1:a2:23:c2:a8:11:ac:cb:57:2b:35:d2:
b6:1f:e0:b4:fa:a4:3d:4f:73:9e:63:05:2b:89:60:
d7:0c:ca:a6:29:aa:2a:d1:53:79:02:41:72:2c:36:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:56:22:B6:E1:74:DF:EF:F0:BB:EE:73:45:86:70:A1:C1:19:E4
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3a:f0:49:96:e7:77:4d:66:bb:19:85:eb:69:af:12:15:b2:
28:c2:63:a6:1c:ea:eb:e6:fd:82:2e:84:62:42:e4:16:93:be:
c0:da:5e:7c:d7:ca:8f:73:d4:b8:a1:d3:1c:ef:68:e9:52:c8:
f1:93:da:60:91:da:14:9d:74:9b:79:4b:67:eb:94:3c:d7:f7:
a6:ba:b1:d3:19:00:d0:4c:bb:c9:8f:f3:ed:f2:69:0c:09:35:
ef:6c:0b:9b:3d:d7:b9:09:93:0f:1f:08:46:6c:ca:9c:cb:79:
04:15:96:6d:b4:d1:89:25:12:ee:4b:06:ce:43:00:cc:36:b3:
78:f5:e4:c6:7e:9b:4e:a6:2a:15:fc:e5:b1:68:7c:5f:15:0a:
81:91:31:8e:ed:1d:05:f6:9e:fc:b5:70:81:ec:34:fb:79:fd:
26:5d:cb:de:2a:66:e3:95:f5:41:fe:d4:cb:3d:b8:c5:95:f7:
fd:c8:f4:dc:0f:62:93:0a:03:a5:36:02:2b:7b:88:98:f2:f0:
65:fc:e0:fa:c1:b7:37:1c:e6:40:d9:e0:b4:6c:11:c3:d3:bd:
0c:5e:69:75:74:52:a0:ff:c4:08:a5:6e:f9:05:29:c3:67:cb:
41:fb:70:b2:4b:dc:c7:d2:73:0f:85:a6:97:c8:49:31:f6:85:
38:a4:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:03 2025 by rpki-client