Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: cFVj+Pg4+gyr94mPtYr+5xEDMI7L30aT/R2gPp6+VRg=
Subject key identifier: C1:6E:4E:BD:89:55:BB:27:E3:62:27:78:CB:D3:99:80:C4:F9:B6:A1
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 019A4EF4B83D460107FE5DF431EE3AE748FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0C84
Signing time: Tue 04 Nov 2025 13:00:51 +0000
Manifest this update: Tue 04 Nov 2025 13:00:51 +0000
Manifest next update: Wed 05 Nov 2025 13:00:51 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: mnHDhkmJkbfxQPLqyJsYu6bNs7aJSCV1qspZV2gHu0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b8:3d:46:01:07:fe:5d:f4:31:ee:3a:e7:48:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Nov 4 13:00:51 2025 GMT
Not After : Nov 5 13:00:51 2025 GMT
Subject: CN=c16e4ebd8955bb27e3622778cbd39980c4f9b6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:cb:3a:ee:3c:6b:e6:2a:68:6e:b2:ab:3e:
b4:ab:ac:fc:1b:d3:72:ed:5e:48:37:7b:74:98:57:
74:dc:f5:4e:17:2b:4a:b3:02:da:69:87:7a:2f:78:
72:f2:04:32:df:7e:e3:95:5e:96:ca:cd:29:e4:6f:
f8:e3:71:2d:81:0b:63:4f:a0:40:34:d9:c3:bc:bc:
dd:70:35:1c:56:2c:9c:b7:87:e0:1f:5e:e3:89:50:
6c:aa:fb:41:f8:2d:f8:41:e1:e3:24:c2:16:15:bc:
fc:75:7e:d8:7a:eb:c4:72:9f:9b:1f:d2:1a:e9:b1:
c0:86:ac:f8:36:7f:7f:cf:86:11:d7:dd:18:b7:bc:
a1:55:08:e2:a3:d7:9b:2f:5a:d1:91:98:2e:43:e0:
2c:d6:a8:17:3e:ec:de:b9:0b:88:55:23:5c:69:1b:
27:8c:a9:94:14:f0:44:63:97:e5:6f:8c:30:63:01:
69:ff:2c:49:e4:96:ab:ac:af:04:16:df:08:8d:59:
95:25:ed:e5:62:43:41:67:70:48:4d:ff:31:e0:3f:
45:e8:7a:cb:e9:57:96:27:33:d8:3a:fc:98:0e:4d:
d0:aa:d2:0c:03:63:53:fa:2a:ae:1f:bf:16:91:8f:
44:08:72:d0:d6:bb:5f:b4:b4:b7:38:d3:d7:4e:b4:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6E:4E:BD:89:55:BB:27:E3:62:27:78:CB:D3:99:80:C4:F9:B6:A1
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:64:ef:3d:0d:3d:4e:d7:45:2c:9c:a3:02:da:91:4e:7a:00:
0e:1f:29:fc:5d:c7:9a:81:2f:a0:61:b9:f2:de:62:cb:06:9c:
4a:32:3e:dd:de:59:7a:96:78:74:9b:44:e9:aa:50:a4:31:e2:
24:ff:20:85:32:78:b4:9c:91:39:1a:c4:52:28:ee:9d:7b:b2:
45:3d:7c:fe:eb:46:ba:fb:eb:eb:be:0e:6e:f9:dc:3e:35:4a:
86:25:15:db:df:d8:8f:6d:22:b3:48:fd:c2:9f:0e:e7:9f:37:
27:a9:a5:26:d3:3a:81:f7:b9:f0:7d:4d:63:22:cd:7e:58:c4:
8c:d4:f1:8b:9d:b6:aa:68:78:8e:5e:18:e9:a7:e2:68:f1:dc:
bc:19:b1:d4:87:71:0f:7c:93:ff:d1:5d:d8:f8:0c:1e:73:9a:
29:c5:86:5f:c4:db:52:ee:6b:9d:f4:c4:d5:dd:65:a2:b4:fa:
88:4e:47:a8:94:6c:be:d3:02:44:1c:78:c6:51:55:4c:ed:8c:
4f:c7:68:97:32:eb:a6:e6:9f:66:bc:92:44:8f:c2:61:4a:08:
a3:b8:6f:c3:49:fa:50:15:46:67:d9:89:f8:12:e7:2f:63:61:
0c:80:05:f8:73:92:c8:30:82:0e:94:8f:53:c5:71:68:8c:c6:
f2:d2:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:37 2025 by rpki-client