Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: wqNm3OX840rhcROo9unDb6eyaPhg+4Kr1Ku0DbVDSzc=
Subject key identifier: DF:DD:F1:3D:B6:94:65:2C:42:42:55:42:99:86:90:7C:06:31:6A:9D
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 019A5375C222B205A775174825B424612E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 16A5
Signing time: Wed 05 Nov 2025 10:00:17 +0000
Manifest this update: Wed 05 Nov 2025 10:00:17 +0000
Manifest next update: Thu 06 Nov 2025 10:00:17 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: B1PjmFrdbJrV+AloUicLkc9CyJqGEsWS2l2e+VqtAdM=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:c2:22:b2:05:a7:75:17:48:25:b4:24:61:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Nov 5 10:00:17 2025 GMT
Not After : Nov 6 10:00:17 2025 GMT
Subject: CN=dfddf13db694652c424255429986907c06316a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:ce:b1:39:0c:b8:8b:cb:b1:9f:18:30:65:
c2:4b:d4:d2:b9:2f:f9:91:58:fd:7d:02:dd:8e:74:
9a:90:75:68:19:5a:99:59:e8:dd:fe:4c:44:d0:40:
16:aa:11:a1:39:d6:eb:34:f4:fa:15:1b:c0:63:55:
12:2c:74:6a:0a:85:d4:ef:7e:05:13:61:c2:4f:43:
76:e5:db:f4:46:bf:ea:f7:25:6b:35:49:10:37:27:
ec:cc:c3:f3:25:58:fb:6e:2c:98:37:86:52:3e:7c:
b5:b3:da:0b:e5:31:c1:72:5c:91:2d:4b:55:c3:ba:
45:1c:ae:45:1e:db:16:7e:0d:47:c6:08:5f:d9:0b:
05:f6:cb:fa:bb:82:dd:85:92:40:f0:f4:12:0d:66:
77:5e:aa:91:38:1a:58:14:15:53:49:b7:a4:fc:aa:
64:4d:86:8f:0d:e2:fb:95:d7:0d:d2:70:8d:ff:9d:
a3:fb:75:80:a8:ab:0f:8d:e2:52:11:42:c8:7c:33:
e9:12:6f:16:8b:68:1d:40:e5:7c:a8:e4:11:20:bd:
e5:db:86:89:93:51:6f:b8:d6:1a:15:5a:bd:ae:57:
4a:05:b5:3c:dc:b0:4e:f6:a1:96:62:5e:b0:50:09:
55:49:2c:ff:c4:de:d9:af:5d:fc:0d:a0:f4:7f:8a:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:F1:3D:B6:94:65:2C:42:42:55:42:99:86:90:7C:06:31:6A:9D
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c6:d5:29:12:f6:5f:80:be:b7:70:73:02:29:c5:3a:56:cb:
9d:34:38:41:6e:ec:84:06:41:3a:5d:34:58:f1:d5:af:9f:7c:
dc:6f:68:1e:a4:b9:e8:ff:55:86:cf:cd:d9:17:81:d4:ea:79:
4b:1c:0c:d1:b7:0c:08:11:11:68:46:c3:80:88:93:e0:83:88:
8d:e0:4e:6a:77:d8:4b:f7:45:4b:b9:38:c8:70:0e:70:99:06:
8a:fe:e4:1c:56:35:92:38:9f:68:18:fa:7a:cf:b9:b9:33:2d:
55:17:4c:5f:c2:77:5f:9d:81:78:08:a5:5b:da:a9:3b:f9:58:
6e:13:1e:4c:93:e5:2e:a0:e3:fd:a4:1f:39:de:1a:00:0e:24:
86:48:ac:0f:fd:72:6b:2a:23:de:53:b0:0f:98:65:fa:55:39:
e0:c9:fc:3d:3d:9a:47:78:f9:03:2c:05:e8:9c:5a:1a:fb:65:
95:0a:b8:a0:0a:28:50:61:2e:42:b7:0b:de:93:c0:46:9d:d7:
a4:3b:72:5f:e9:e4:28:3d:3b:77:53:84:3f:13:99:92:89:c6:
ba:7c:19:0a:67:c9:2e:b4:51:6a:63:83:94:f6:e7:09:ee:29:
5f:ef:32:c2:59:10:8c:b8:6e:b4:87:35:f7:bc:e3:0c:f9:d7:
ba:b6:2d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:19 2025 by rpki-client