Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: Z1YRKX2Ir4/hKoWfCkJVFV+H6NdldOUsij3Yllr8geY=
Subject key identifier: AC:22:E6:9D:DB:D9:AA:CE:C2:C7:23:B0:AB:B4:5D:E2:A4:9F:93:34
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 019A02C75EA11F88B06F169940BD5D30A896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 18:00:11 +0000
Manifest this update: Mon 20 Oct 2025 18:00:11 +0000
Manifest next update: Tue 21 Oct 2025 18:00:11 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: yiSofeGRf+/Q0YO5I9+Zi8scVEzNmSf7xnCEmgWUk9U=)
2: P0vKfHac5CT_BT7yPQCsYl1WWII.roa (hash: uQxBOc9YfEAZgrQ9NS51XAtmXM0ro5FrycI/kcc3aOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:5e:a1:1f:88:b0:6f:16:99:40:bd:5d:30:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Oct 20 18:00:11 2025 GMT
Not After : Oct 21 18:00:11 2025 GMT
Subject: CN=ac22e69ddbd9aacec2c723b0abb45de2a49f9334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:46:39:3d:90:e0:6d:fe:83:07:ce:fc:64:67:
7a:00:bc:95:62:56:89:ec:50:4c:06:32:8c:43:87:
7e:17:f3:02:73:1a:2e:0a:cd:a5:44:77:4d:d4:b8:
78:06:c7:99:3b:37:6e:9d:19:4c:35:d4:0f:a1:3c:
fc:78:a2:81:33:31:d9:c1:99:9a:56:11:a6:ba:57:
78:c6:ba:35:d7:4f:2e:96:9e:f7:e9:9a:09:47:0b:
0a:03:65:f9:d0:6b:d7:68:7a:33:e1:32:f5:52:e1:
39:f1:36:7d:fa:da:a5:a0:a6:d6:99:44:8e:9b:56:
ee:a0:0e:89:15:2f:69:67:12:f6:1d:fc:85:54:74:
55:13:43:65:22:5b:56:77:15:d1:d7:5c:c4:f1:63:
61:a4:5e:a9:40:0a:f1:32:38:9a:85:06:7d:8c:20:
aa:b6:38:05:ce:ec:92:c3:1a:83:ed:0d:2c:21:d6:
31:26:e0:a3:ca:0c:b3:0a:72:00:76:4a:6a:ae:54:
44:0b:64:08:56:68:60:5b:c3:9b:ea:85:a0:ab:f5:
c0:a0:88:e3:18:93:14:39:77:49:08:4e:75:a2:2f:
98:92:f1:60:f4:f7:77:ef:3e:fb:30:4f:72:86:ef:
72:15:02:bb:d5:54:e6:20:b9:22:11:77:2a:cc:07:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:E6:9D:DB:D9:AA:CE:C2:C7:23:B0:AB:B4:5D:E2:A4:9F:93:34
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:be:da:ba:78:ca:07:d9:fc:bc:53:c5:13:10:0c:13:4b:64:
cb:ef:61:3a:d1:ca:f0:f9:c4:bd:26:97:a3:1a:75:e1:45:25:
f7:11:23:73:e3:1a:96:ec:2d:6e:22:1f:0f:cd:d1:c7:54:64:
92:fc:4b:a9:8d:f4:80:54:f1:f7:9a:3c:bb:82:bd:9b:16:6b:
c3:66:a2:71:4a:8b:15:0a:0a:d1:5d:5f:a9:4a:7e:11:39:54:
cb:64:02:30:55:8b:9f:b7:43:56:1a:33:2c:0d:49:b5:0d:d1:
5d:5f:09:a1:93:a3:e5:4e:03:44:67:fb:a4:6a:71:bf:a1:28:
07:a7:08:ce:76:7f:2b:4c:fb:26:68:3e:3f:4e:aa:57:64:d6:
d6:56:5b:d0:97:f5:c7:c9:0c:57:06:3c:1b:d2:8a:b4:cd:3a:
d6:d9:1c:e4:d8:b6:64:b5:ea:d2:44:67:64:41:ad:c2:e8:54:
81:69:df:1f:c2:c3:d0:9d:62:5b:47:ff:e4:99:ef:2d:b3:a0:
b1:09:1a:02:28:63:5b:5e:f7:73:dc:d9:d3:33:e8:bc:67:38:
8d:a5:08:2a:e3:5a:6f:50:cb:a2:6e:02:48:2a:e2:04:38:a4:
b8:1b:da:00:94:fb:d5:ea:b2:60:26:7d:41:99:2a:89:86:3d:
83:97:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:09:56 2025 by rpki-client