Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File: LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier: g3ILYc770QNVk3b0gvfuhx8BHBIedIvflc/owUXFGZI=
Subject key identifier: F3:A3:DC:85:DE:F2:36:01:41:3D:8B:AE:53:A6:42:3D:58:3A:48:DF
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer: /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial: 0199FC8FAC91FE2E0DD9ABC9DDFC9D5F3EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number: 068D
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: Q9ySjFbD/bxvb9X3NTYWNhfP/N5aWNpoFVvdTYiU3XE=)
2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ac:91:fe:2e:0d:d9:ab:c9:dd:fc:9d:5f:3e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=f3a3dc85def23601413d8bae53a6423d583a48df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:ea:76:19:d2:c3:24:fa:09:35:95:50:d6:
79:95:f8:ac:a2:42:40:51:3f:0f:d5:e0:bf:0c:74:
14:c8:2a:be:2b:2c:87:6f:86:20:f8:ce:6e:cc:c5:
c1:44:72:f6:b3:76:b4:39:ec:78:36:80:02:f7:8d:
3f:63:28:08:94:9e:1c:97:ab:58:89:37:26:3e:81:
37:70:7c:1e:f3:1d:43:29:4a:ec:b6:27:77:72:4d:
a4:fc:d1:e4:99:d0:a3:b5:de:6b:a7:7a:8c:dc:6f:
45:11:93:4d:10:7b:f3:16:b3:89:d6:31:02:23:91:
98:42:f3:34:d6:6e:87:f9:1c:42:a1:47:a8:50:ef:
cc:49:67:2b:81:64:cf:be:fd:d3:7e:ab:93:11:9c:
ec:7d:1a:60:98:a5:99:67:26:6b:97:ff:22:90:72:
47:b0:f2:d7:79:39:d1:77:bc:6e:64:3b:16:18:55:
b8:97:d5:2c:61:e4:23:d2:c9:ea:4a:3d:64:d1:7c:
b8:72:89:6c:d0:df:67:e4:20:9f:3b:cd:6a:2e:00:
7c:d1:97:b2:cf:89:ab:5f:26:58:6f:46:0e:76:1b:
94:41:af:12:f3:64:90:f1:dd:0b:50:fe:32:58:76:
02:26:db:a7:e0:20:d9:2a:b9:c8:f9:80:95:a6:bd:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A3:DC:85:DE:F2:36:01:41:3D:8B:AE:53:A6:42:3D:58:3A:48:DF
X509v3 Authority Key Identifier:
keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:ea:03:69:25:ff:a8:84:34:ef:66:1e:7c:7e:a5:d0:e5:
55:e5:8e:1f:78:e6:2b:1c:c2:51:76:28:6a:f8:2e:57:e0:4f:
3f:ef:fd:71:d1:d5:d2:41:4d:5e:7b:09:14:5d:26:fa:5d:d5:
e9:ca:9d:0c:46:ea:f6:b5:2d:3e:8e:4d:ab:93:97:89:c7:45:
96:f2:7f:9b:86:47:37:cd:20:e3:79:74:3e:4a:c7:28:81:e4:
e6:b1:7b:e5:73:bf:c9:17:25:6d:27:42:55:cb:74:77:7a:f0:
5c:ed:67:d4:29:34:39:48:9d:62:35:d0:a3:9b:44:b4:58:37:
ac:5f:3b:ad:a9:ed:13:11:14:9e:09:53:2e:b8:19:dc:fd:6f:
7a:33:e0:45:55:00:01:df:53:ce:4d:d3:8e:55:b1:03:0a:2a:
35:57:ad:65:36:cc:92:79:d0:1d:af:02:60:7b:8a:f1:87:b5:
29:82:28:7e:31:07:1d:23:86:24:ac:f4:a5:2e:87:34:0f:6b:
94:e9:1f:b8:35:e5:21:ee:f4:4b:06:db:fe:17:62:36:31:20:
94:eb:61:df:1f:7c:25:37:bb:d8:d6:27:94:8d:d3:4b:d9:71:
d3:23:71:ba:43:04:78:54:1d:08:52:9d:38:3e:3a:05:e9:0f:
77:97:b8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6yR/i4N2avJ3fydXz63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDA3ZWI3NjRlMDgzODU1YTI1ODEzMDhmMzQxZDViYTdk
OGIyNDcwHhcNMjUxMDE5MTMwMTM4WhcNMjUxMDIwMTMwMTM4WjAzMTEwLwYDVQQD
EyhmM2EzZGM4NWRlZjIzNjAxNDEzZDhiYWU1M2E2NDIzZDU4M2E0OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1fqdhnSwyT6CTWVUNZ5lfisokJA
UT8P1eC/DHQUyCq+KyyHb4Yg+M5uzMXBRHL2s3a0Oex4NoAC940/YygIlJ4cl6tY
iTcmPoE3cHwe8x1DKUrstid3ck2k/NHkmdCjtd5rp3qM3G9FEZNNEHvzFrOJ1jEC
I5GYQvM01m6H+RxCoUeoUO/MSWcrgWTPvv3TfquTEZzsfRpgmKWZZyZrl/8ikHJH
sPLXeTnRd7xuZDsWGFW4l9UsYeQj0snqSj1k0Xy4cols0N9n5CCfO81qLgB80Zey
z4mrXyZYb0YOdhuUQa8S82SQ8d0LUP4yWHYCJtun4CDZKrnI+YCVpr1zvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOj3IXe8jYBQT2LrlOmQj1YOkjfMB8GA1UdIwQY
MBaAFC5Afrdk4IOFWiWBMI80HVun2LJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zM2JlYzUtNmFkNS00ZTgwLWJmNTgt
NTJjYTJhOWQ1MTRiLzEvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zM2JlYzUtNmFkNS00ZTgwLWJmNTgtNTJjYTJhOWQ1MTRi
LzEvTGtCLXQyVGdnNFZhSllFd2p6UWRXNmZZc2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKh7qA2kl
/6iENO9mHnx+pdDlVeWOH3jmKxzCUXYoavguV+BPP+/9cdHV0kFNXnsJFF0m+l3V
6cqdDEbq9rUtPo5Nq5OXicdFlvJ/m4ZHN80g43l0PkrHKIHk5rF75XO/yRclbSdC
Vct0d3rwXO1n1Ck0OUidYjXQo5tEtFg3rF87rantExEUnglTLrgZ3P1vejPgRVUA
Ad9Tzk3TjlWxAwoqNVetZTbMknnQHa8CYHuK8Ye1KYIofjEHHSOGJKz0pS6HNA9r
lOkfuDXlIe70Swbb/hdiNjEglOth3x98JTe72NYnlI3TS9lx0yNxukMEeFQdCFKd
OD46BekPd5e4Yg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:49 2025 by rpki-client