Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: kUllR+5ZhU96Yag5nuu6oe7dQ8WDCloAso7+FpY65HU=
Subject key identifier: F1:64:78:3E:CE:B2:25:A9:52:05:5B:6C:A4:F7:0A:12:6E:E0:F9:40
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 019A53E41707D761D5486ED839A8F54333EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: 020B
Signing time: Wed 05 Nov 2025 12:00:48 +0000
Manifest this update: Wed 05 Nov 2025 12:00:48 +0000
Manifest next update: Thu 06 Nov 2025 12:00:48 +0000
Files and hashes: 1: 1KnXeZeK2jaZLc215sUulykWcXQ.roa (hash: MfFGqElV/jvH/sstkJrBdiD+qKnk4Q33yEmCF2id+a0=)
2: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: 3OwYkyFY3qRL58wGeh+XHGcw0vxtK+um3+KUNY0bnz8=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
6: mgJ3Sc6KxuSRQNVYzl0KbaYNlDY.roa (hash: +UkcMaXx37s6HLo3vytB7ItB+h6lkh9Nk4bNEQS1Dtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:17:07:d7:61:d5:48:6e:d8:39:a8:f5:43:33:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Nov 5 12:00:48 2025 GMT
Not After : Nov 6 12:00:48 2025 GMT
Subject: CN=f164783eceb225a952055b6ca4f70a126ee0f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:a4:a5:82:70:15:12:8f:8e:88:53:11:c3:
a4:f5:34:96:33:eb:14:4a:a4:25:35:fe:e8:02:52:
dc:7c:19:9a:8c:55:53:13:1e:43:3e:a2:18:65:aa:
84:26:52:e3:25:3d:50:e7:58:f1:ae:5e:11:0f:75:
5f:29:59:a9:71:5a:b6:3a:47:f5:70:51:a7:35:c6:
eb:33:c7:d4:e4:ae:79:99:2f:26:69:ed:fd:67:cb:
16:5e:f3:42:85:ab:48:10:0e:51:b8:10:73:c1:67:
dd:e0:74:00:d7:2e:4d:22:c7:ee:2d:a8:04:e9:ca:
b9:38:f8:03:ec:c7:d6:c4:47:95:c0:6d:57:2f:37:
8c:70:50:2e:26:ce:e3:2a:d7:d7:86:7e:ff:cd:74:
59:6c:88:99:04:aa:3b:47:a5:c3:04:4a:83:5e:34:
32:16:61:3b:76:e9:a8:1e:a3:6c:9a:c8:74:97:b5:
62:b9:75:bf:fe:b4:79:42:47:27:20:fa:57:bf:ec:
72:07:7c:cd:14:ee:f6:55:92:4d:5d:51:b3:4f:a3:
59:5b:3d:7f:51:f5:16:ac:2a:2e:70:be:1b:38:27:
8a:a9:57:da:c4:98:25:46:ab:c2:9c:56:3d:b4:6d:
e3:40:f7:67:83:63:2e:52:2e:4c:cd:f0:fb:fa:18:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:78:3E:CE:B2:25:A9:52:05:5B:6C:A4:F7:0A:12:6E:E0:F9:40
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:23:b5:c2:c4:a5:5a:64:8b:9f:c8:ff:9f:72:b4:fc:17:84:
94:54:2b:d9:d1:74:e1:88:18:14:f5:f2:7f:c3:1a:2d:3f:5c:
44:63:f7:39:d8:2c:c9:ca:b6:2f:c7:27:a6:ac:eb:47:41:8d:
ec:c9:77:db:40:ae:56:56:ca:69:05:68:9f:be:9e:3f:87:a0:
58:78:7e:f2:67:db:58:c1:81:09:83:ad:0d:a3:ad:ee:b0:37:
c3:e8:10:d8:c1:93:c9:55:bd:3f:91:f5:21:11:07:05:a1:75:
6e:37:4b:3a:2c:b9:0c:21:9a:48:ae:6a:27:7b:a1:25:ec:b5:
1f:a8:18:a9:0e:eb:7b:5c:09:14:3e:45:5a:03:6f:f4:4c:54:
fb:0c:89:97:5c:2b:9d:6f:e8:80:7b:51:32:b0:98:74:81:f5:
c8:ff:bc:0a:ca:b7:55:fb:71:86:1b:fd:18:63:5b:18:a6:41:
72:dc:1d:3e:e6:8e:21:dd:c8:f2:6f:32:67:3b:27:8c:a9:e4:
15:8f:c0:63:cd:c4:4a:5e:7a:dd:02:dc:02:16:fd:79:ce:73:
40:16:28:12:4c:65:64:b5:6f:28:7b:0f:a7:a6:0c:36:b4:48:
17:be:00:bd:81:de:dc:d2:ed:a0:32:82:19:f9:e0:a7:87:5a:
24:6d:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:09 2025 by rpki-client