Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
File: LXjkrg653KxiXZEGzohcW0mAddc.mft (raw, json)
Hash identifier: Y5QtaDvZ31ac8As9BiK2lZSirB4fXOIC7vqz0FiKv20=
Subject key identifier: 4A:2B:1F:97:E7:08:76:12:9B:A4:66:C4:A2:8C:6B:76:74:68:BA:B8
Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Certificate serial: 019A52D279394E4655252BF3939C8C3A43D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
Manifest number: 70
Signing time: Wed 05 Nov 2025 07:01:56 +0000
Manifest this update: Wed 05 Nov 2025 07:01:56 +0000
Manifest next update: Thu 06 Nov 2025 07:01:56 +0000
Files and hashes: 1: 2sWQgR33TzocGlZC9LAJFvio6pQ.roa (hash: ghm3pG3ll1j938a4CO1Ecgfgj8Ej4t0d/k3Ds22y8nU=)
2: LXjkrg653KxiXZEGzohcW0mAddc.crl (hash: YJvxzcq4EgQemBje+gpSzSoiYxsfug9xXovPyAzvsBw=)
3: Qvb-9UEybVjJwMJX_TQhzbTyC6A.roa (hash: FQCHFVQrQ1NEC98r6LFXm4gOoSIAgwMQTWazYGx2XGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:79:39:4e:46:55:25:2b:f3:93:9c:8c:3a:43:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Validity
Not Before: Nov 5 07:01:56 2025 GMT
Not After : Nov 6 07:01:56 2025 GMT
Subject: CN=4a2b1f97e70876129ba466c4a28c6b767468bab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:0a:36:38:7d:1e:2b:58:76:41:6d:15:d2:
a4:65:83:ed:ba:57:57:17:26:53:5c:f9:52:62:76:
fb:90:09:3b:2b:cb:98:cb:9a:0f:f7:21:79:e4:46:
c8:f6:0a:c5:0a:2e:a0:9d:e1:22:63:f4:9a:c8:96:
97:45:b8:3d:01:0d:e5:d6:95:81:2d:a6:40:33:17:
d4:ae:b6:5f:b9:b5:2b:2e:30:5d:dd:72:77:22:99:
f0:7f:ea:0e:0a:f1:9d:00:a6:13:e2:58:b6:3e:60:
33:04:e3:6c:7b:34:25:7c:20:e2:1a:42:c5:09:20:
2a:d6:0d:f1:95:6b:3c:df:38:f8:52:6b:21:d5:1c:
fd:98:a7:f1:46:cd:49:b6:11:23:25:30:c5:c3:b3:
88:b1:92:de:f0:27:39:14:cf:e7:7e:7a:18:f6:a4:
ae:a9:27:1c:0c:e8:67:fe:50:8e:34:cc:8a:61:1b:
0c:00:be:74:d5:24:f7:51:2b:1a:47:c4:1d:04:93:
bf:f4:ce:c3:d5:62:ac:2c:d0:81:6a:3e:1a:ef:72:
16:4a:80:68:74:85:95:b1:a5:4e:84:24:bc:6d:3d:
ac:07:c1:30:ae:25:77:53:45:fa:9f:6f:19:46:8b:
10:18:08:38:54:3f:20:5b:9b:9c:95:5e:54:83:cc:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:1F:97:E7:08:76:12:9B:A4:66:C4:A2:8C:6B:76:74:68:BA:B8
X509v3 Authority Key Identifier:
keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a2:29:6a:2d:f7:a8:21:43:04:4e:0a:ec:f2:5a:73:43:73:
23:b3:7b:04:12:6e:d2:bd:47:ed:ef:79:17:f4:a6:c2:fe:81:
73:bd:f4:1d:f2:92:2c:5b:94:65:f1:16:49:19:c1:a9:e6:6e:
32:6a:c4:d7:d0:dd:7f:8f:01:95:a7:48:3a:c5:05:d7:d7:1f:
84:69:11:e8:6e:f3:61:9d:2e:0c:7c:87:63:11:a6:5d:ce:e5:
df:e9:40:a7:ab:1c:80:d3:4a:4f:18:40:4e:69:bd:f2:3c:14:
40:5f:f5:5e:10:e0:2a:da:ff:d5:4d:26:aa:9b:23:0a:54:f0:
0f:5f:18:f5:ca:9a:59:eb:63:c4:a5:36:ef:dc:99:ec:ac:ec:
f5:2b:e0:a0:98:f1:c8:44:5d:e4:22:c4:99:fb:22:2a:27:a4:
3a:4d:e0:52:55:5e:82:4d:ef:5d:bf:77:0a:85:92:12:55:2b:
02:4a:42:0d:92:36:d2:8e:88:77:e7:04:56:e8:2e:b3:34:ac:
83:cd:d9:fc:09:9b:38:cc:f8:2e:be:62:28:77:3a:7c:c0:aa:
d9:de:c4:dc:a7:ac:f3:42:6d:d2:4c:36:75:fc:c4:db:27:ad:
2d:b4:6e:ee:2b:a8:29:52:41:5e:b3:90:5d:42:39:7e:9a:37:
46:fb:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:17 2025 by rpki-client