Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: 1p/0Bo8xVUwOFoLBT1pDsvRK+ypWE7HZCflHSPrcpmA=
Subject key identifier: DA:D9:5A:AE:7A:4E:FD:C4:23:93:F5:55:0D:12:2F:D7:F7:23:E8:CA
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 019A4E86A4B7D8E8B78510533DDA3629383B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 11:00:37 +0000
Manifest this update: Tue 04 Nov 2025 11:00:37 +0000
Manifest next update: Wed 05 Nov 2025 11:00:37 +0000
Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: +I9O/IuadPybl6K/uicavkqaV27Qh0CAzH5CcxhtPgs=)
2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a4:b7:d8:e8:b7:85:10:53:3d:da:36:29:38:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Nov 4 11:00:37 2025 GMT
Not After : Nov 5 11:00:37 2025 GMT
Subject: CN=dad95aae7a4efdc42393f5550d122fd7f723e8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:cf:cd:44:b3:08:38:68:27:2d:83:2c:11:
df:9f:85:83:b8:53:26:c8:dc:9d:d8:20:88:3f:a6:
39:41:60:b0:50:6c:21:2d:b6:8f:53:8d:3c:07:6f:
2f:2d:16:d6:23:8a:7c:97:c7:1e:47:c7:8b:cc:a6:
68:0f:ab:7c:32:7b:ec:f9:0e:04:94:2f:0e:45:89:
0e:5e:e5:19:68:90:be:2c:41:41:33:da:a6:94:d3:
36:34:bf:f2:80:91:84:b9:98:80:b5:2c:6d:c7:6b:
c6:fb:2a:59:ff:c1:93:d0:27:a0:2a:df:52:87:3e:
0b:84:dd:89:14:3a:c0:59:2b:b2:67:34:c5:e6:86:
df:f0:6f:b0:b2:ad:48:11:73:f1:6e:c8:d4:69:93:
51:57:5e:36:d5:cf:ef:b6:51:a0:19:4d:a5:0e:1b:
6a:4d:75:ab:df:04:93:dc:e2:92:e5:9c:d9:7b:87:
97:17:72:47:42:62:c9:77:76:b7:cf:10:ba:c1:04:
b1:78:20:37:e3:90:02:df:0d:a1:7a:69:65:bd:69:
54:a4:c2:4e:b6:83:37:12:a4:4b:93:91:ad:c8:42:
b2:73:47:e5:fc:30:9a:7a:d6:3a:c0:ea:fd:d7:13:
35:07:29:68:6e:c0:34:5a:2f:82:9c:b6:cd:4d:e9:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D9:5A:AE:7A:4E:FD:C4:23:93:F5:55:0D:12:2F:D7:F7:23:E8:CA
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:62:48:3a:8c:84:88:f0:a7:46:46:20:e0:44:12:78:71:f2:
9b:7b:9f:1a:1b:57:3a:c5:fe:be:95:39:3f:9e:92:ad:77:44:
08:1d:7e:db:07:9c:31:91:c9:81:59:29:28:75:0f:c0:cd:7e:
b7:13:82:26:d5:03:22:5c:7f:41:96:a9:e5:9a:80:27:05:41:
0a:2e:22:9d:2c:89:5e:99:1b:3b:9f:60:da:ab:25:bd:f8:d8:
5c:2c:7a:0a:de:23:d5:f5:f3:60:00:e4:55:2c:ca:de:93:6a:
a1:a4:f1:9f:7b:f2:81:72:41:39:18:05:d4:1c:43:35:7c:95:
3a:e5:75:d2:32:6a:cc:d9:36:9f:c3:fa:43:c4:d9:13:4e:b1:
6b:fc:25:1c:58:23:c5:82:89:a7:4a:e5:f7:b3:b1:a3:34:45:
b9:cc:d6:f3:97:c7:ba:29:ce:85:fa:b7:4b:17:27:bb:b1:a7:
30:51:a3:84:84:44:39:b1:55:bd:17:e2:cd:55:e8:fc:31:a1:
81:a8:a4:58:30:7d:db:b5:51:e0:f8:50:c5:fd:f4:bd:83:f5:
bc:30:39:ee:89:15:d2:c0:be:f3:b9:9c:68:30:ed:76:32:34:
56:1a:55:06:c7:de:78:ed:9e:6b:7e:ca:99:dc:b9:d3:f5:89:
5e:89:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:38 2025 by rpki-client