Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: +aOmVjMaoKLUNiYaJSzukB84emU4Ln0HKkXKEUa6c8M=
Subject key identifier: DA:CF:F5:8A:98:C4:49:0B:D6:42:35:1E:01:0E:6C:91:0F:56:74:20
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 0199FE46EABA9473CD00F39629BFBD9F4C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 11D6
Signing time: Sun 19 Oct 2025 21:01:24 +0000
Manifest this update: Sun 19 Oct 2025 21:01:24 +0000
Manifest next update: Mon 20 Oct 2025 21:01:24 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: fwJi2BUIu40ClH++M9RktVE/MYxX4UcWEUMOteRom0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:ea:ba:94:73:cd:00:f3:96:29:bf:bd:9f:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Oct 19 21:01:24 2025 GMT
Not After : Oct 20 21:01:24 2025 GMT
Subject: CN=dacff58a98c4490bd642351e010e6c910f567420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:a9:3f:69:7a:6c:21:15:22:bf:51:1f:c4:
84:ca:20:85:08:66:8f:a7:d1:71:e5:95:16:7f:16:
28:57:6f:8b:34:45:a8:e7:0a:71:df:d5:f4:e0:71:
4d:f2:de:c0:c2:87:69:bc:14:ac:08:ae:78:a6:8d:
1a:9d:5a:b9:e7:8e:70:33:89:41:22:ff:02:36:a2:
49:eb:15:3a:bb:ca:df:d9:e9:3c:96:eb:dc:03:13:
0b:b1:0f:eb:fc:85:14:84:e4:81:05:1d:a1:68:b3:
88:bf:02:6c:76:13:fe:54:d8:e3:d9:e0:ea:64:64:
2d:a0:2c:22:7a:05:73:c8:ec:09:40:cd:bb:ed:ee:
15:ea:60:8e:c9:4b:9d:9d:0b:d7:ea:2f:78:9e:a7:
b9:80:e2:ec:87:33:01:6f:3b:40:d5:f5:cf:24:ca:
a3:41:de:f2:3c:49:5b:93:a6:c3:20:30:57:6a:5d:
0d:e1:c9:90:0d:40:21:ef:0f:ca:81:75:2d:f8:3e:
03:1b:3b:a1:3e:e7:5d:c5:d3:5f:30:fa:63:8c:2a:
16:fd:28:e3:e9:35:91:42:2d:cb:e8:49:02:06:c7:
c3:65:19:e4:a2:2c:16:64:f3:c9:e5:4d:a8:d1:4b:
1a:a7:42:ca:29:f7:a4:ff:50:73:09:8c:f6:58:5d:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:F5:8A:98:C4:49:0B:D6:42:35:1E:01:0E:6C:91:0F:56:74:20
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:62:9f:ff:64:3b:31:a3:18:8c:18:fd:7c:8f:2a:c7:86:29:
e6:f7:6f:53:d1:fd:65:98:8d:d8:a6:02:4e:0d:2a:0a:bd:c2:
b9:91:8e:80:4b:44:38:7c:e5:85:80:0f:a4:da:d2:3e:23:f3:
b7:b1:88:31:ea:85:ee:3d:64:40:e6:67:8d:42:02:85:b1:68:
3b:98:fd:59:be:c7:c9:59:70:16:13:8c:1e:c0:5b:ee:cf:a1:
25:c6:3f:65:9d:af:f9:e8:90:8d:29:5b:84:db:00:0a:3e:79:
54:2e:e2:dc:20:ea:09:98:5e:9b:36:71:8c:ce:1d:d2:8b:16:
ee:f4:c4:35:1b:44:90:5e:cf:2a:46:d9:7f:68:d6:dd:5d:e8:
91:23:e4:29:3b:75:c3:5e:f3:ca:d6:5e:aa:64:53:3f:5c:c8:
e5:12:84:f6:c3:71:e9:d3:25:bb:2e:00:15:0e:3d:c3:8c:3f:
98:f7:f0:11:03:78:ca:c4:08:fa:6d:a1:f6:44:c3:11:9c:4e:
07:dd:62:99:e4:17:72:b6:9b:dd:07:53:a3:40:06:d8:bb:aa:
cf:d5:70:ed:19:b9:af:ca:04:63:1d:d7:99:a8:bb:32:9c:de:
ce:db:57:f5:3e:ce:e1:d6:a6:5d:fb:94:df:0e:ee:af:06:55:
22:19:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:36 2025 by rpki-client