Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: kf94an17Yv4r+1cAo01BDI8Xlr0qVUr88boJ6al8OxI=
Subject key identifier: 23:19:FA:83:0F:7C:DB:83:C3:F0:5C:17:72:5E:69:8F:61:77:98:C7
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 019A51F5E1873548B22EEF6975643CAED893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: 020A
Signing time: Wed 05 Nov 2025 03:00:59 +0000
Manifest this update: Wed 05 Nov 2025 03:00:59 +0000
Manifest next update: Thu 06 Nov 2025 03:00:59 +0000
Files and hashes: 1: 1KnXeZeK2jaZLc215sUulykWcXQ.roa (hash: MfFGqElV/jvH/sstkJrBdiD+qKnk4Q33yEmCF2id+a0=)
2: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: go5cPZukvR+1ckqX0ILS6fyNypPTmXcyc9lZjAa3IOc=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
6: mgJ3Sc6KxuSRQNVYzl0KbaYNlDY.roa (hash: +UkcMaXx37s6HLo3vytB7ItB+h6lkh9Nk4bNEQS1Dtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:e1:87:35:48:b2:2e:ef:69:75:64:3c:ae:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Nov 5 03:00:59 2025 GMT
Not After : Nov 6 03:00:59 2025 GMT
Subject: CN=2319fa830f7cdb83c3f05c17725e698f617798c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:d2:95:2d:61:c9:2c:f4:55:b7:b3:08:d3:
3d:94:a6:31:7b:79:6b:b1:75:aa:55:9b:19:7e:74:
7b:2e:62:f7:c7:c9:e9:90:dc:e5:02:38:8c:f4:d1:
a4:18:b3:e8:fe:a4:24:71:e9:72:f1:ae:50:ff:0c:
23:51:35:04:2c:df:71:48:c1:8c:e4:6c:bb:40:7e:
5e:c8:f8:79:02:ab:55:73:8d:b8:de:cd:64:04:35:
b2:2a:81:ae:69:51:da:28:44:79:ad:fa:94:c6:1b:
a4:67:76:9f:dc:1d:e9:64:e2:11:2d:ea:c7:c7:36:
51:e9:a8:45:b6:65:31:57:a0:ce:79:cf:ee:3f:27:
24:f2:54:8b:a6:79:9e:77:ad:e0:6f:80:bc:cd:69:
57:22:f3:8a:bd:42:de:77:b3:53:89:ef:a4:a1:1d:
09:5c:3f:91:43:71:50:75:d6:e0:60:18:d2:5e:e1:
55:55:ff:c9:8e:9f:01:cb:4d:92:1a:36:8b:47:a7:
f5:12:ce:c4:33:63:24:eb:55:34:2d:7c:ca:9d:77:
3c:9b:ee:c2:2c:2e:7d:23:f7:6e:7b:d1:d4:20:94:
13:5d:2f:0d:8f:3e:b8:f9:07:c7:a8:23:3d:16:0a:
d1:34:d8:51:bf:12:0a:ee:d2:16:67:7b:fb:cf:cd:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:19:FA:83:0F:7C:DB:83:C3:F0:5C:17:72:5E:69:8F:61:77:98:C7
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:57:60:9c:2d:a4:9c:44:b8:50:8c:9a:38:9e:38:b2:a1:c9:
e3:51:67:d3:ab:b6:c4:da:d0:6b:cd:05:c7:a5:e6:d5:df:fd:
e3:86:c0:3b:5f:4b:65:62:82:4c:fb:88:75:b0:56:f0:9b:78:
f7:24:98:32:1d:55:08:90:93:77:5a:b6:06:36:d8:92:ee:6e:
54:00:b8:81:cf:42:4d:e4:a2:a0:d5:87:40:15:c6:fa:e6:f6:
84:2f:f0:f1:c9:31:b7:d1:8d:91:57:1b:5a:b1:7b:77:58:bf:
eb:1b:8a:f2:a2:b9:c7:07:74:59:98:f8:09:2a:c7:66:b1:b9:
5b:9e:33:42:a7:68:8b:30:6b:83:a7:2a:fc:d6:54:25:c7:b3:
ec:e0:c0:dd:bc:e0:3b:04:65:8f:5a:fe:be:d5:81:15:00:a3:
88:8f:ed:56:69:50:0c:ce:73:d6:6b:4f:df:2d:42:4a:17:9b:
4d:d3:b6:c5:03:1e:66:76:1a:a8:cf:57:33:dc:ec:d5:e0:33:
32:b5:08:44:d5:3c:3f:be:20:14:ab:2b:45:15:75:c2:c5:d0:
2f:0e:6c:1e:4c:29:32:e6:17:44:da:0f:0e:80:27:16:40:01:
81:76:7a:98:89:49:5b:1f:34:b7:12:d4:5c:cd:b1:79:e2:93:
10:11:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:49 2025 by rpki-client