Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier: GDAack/sMz/C4rRBq6+IIfzC42WuJAbnNKYF9Tc79Jw=
Subject key identifier: F2:0F:9E:90:E8:4D:C9:09:8A:D5:40:E5:2D:F8:E5:5B:82:04:98:61
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial: 0199FC8F2C9B02DDDB1558DFE54B9D3460D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number: 11E0
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: 6HQFKIaH-doszFtkd3GkDQ1Wxaw.roa (hash: 1OXXKiYa8WQkCMkAZRnTwQi7yeY/wqvng1D/8Z8Ivmg=)
2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: Ed2OOPotzHMGSaVG5dcpQ64n04Se9HopnYuLQvu7icc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:9b:02:dd:db:15:58:df:e5:4b:9d:34:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=f20f9e90e84dc9098ad540e52df8e55b82049861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:ac:d0:24:3f:9b:e8:3c:25:41:12:e5:83:
65:44:61:9a:35:f2:03:70:3b:7c:40:ad:a7:80:b8:
3c:36:c3:fd:80:e3:91:89:10:3e:f8:c5:54:b9:08:
be:25:ab:12:3c:7f:d0:2e:dc:fe:09:26:b7:12:a7:
5c:69:67:fd:97:fc:82:a2:6a:6c:09:f7:c2:36:e6:
ea:cd:ee:2c:b2:3b:96:a4:23:3e:0a:7c:e3:b3:63:
b3:7c:64:51:b6:76:56:a9:61:56:cc:75:e6:03:4e:
bd:fa:da:dd:7c:ac:1c:0f:a4:fc:72:a1:be:d6:f9:
43:9d:da:46:37:94:2c:51:e3:c4:30:d0:ad:06:7c:
e9:65:91:6c:28:97:8e:dd:4d:c1:22:3e:fd:80:70:
74:33:9b:90:c4:67:5d:f7:55:d6:16:63:92:2a:d8:
73:8b:90:be:fe:f2:01:2a:c4:df:ef:d3:17:9a:74:
d7:f6:71:6b:02:a7:51:8a:66:3f:3f:31:ec:bc:04:
23:de:fb:f4:de:6d:cc:63:68:c0:4a:17:07:6c:68:
76:08:ad:f5:6e:59:a9:84:5e:cb:bc:92:e6:69:6c:
ab:bf:83:c7:77:a7:78:41:7e:5b:4c:07:72:c5:23:
82:67:b0:24:ef:7a:b3:6f:5f:2c:27:be:53:56:02:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:9E:90:E8:4D:C9:09:8A:D5:40:E5:2D:F8:E5:5B:82:04:98:61
X509v3 Authority Key Identifier:
keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0f:32:59:99:43:be:f4:f1:e8:7a:4f:c1:09:17:33:7b:47:
96:3d:98:9f:7e:a6:10:dc:68:b0:87:8e:0d:b1:1d:e3:4f:fe:
2e:43:8f:32:cc:08:82:d8:99:2c:f2:1d:70:aa:87:53:11:3d:
e9:43:1f:2c:f6:5b:7c:04:a9:83:20:0d:5e:33:6e:60:33:5a:
6a:c4:1f:96:e3:b1:e7:16:19:1b:64:6d:b9:59:56:0a:90:d5:
ae:6b:d2:cd:37:99:7b:c4:75:45:c8:a0:a0:0a:08:b9:51:70:
ee:9a:e0:64:9b:cb:cd:1c:ef:b0:16:24:63:48:d6:9f:62:4c:
e9:2f:9a:a3:b8:30:0c:17:bf:cc:2e:8f:b0:5e:81:7d:3a:57:
94:ea:29:1d:9f:d5:f7:6a:9e:e4:31:84:50:06:a7:47:8e:95:
51:6c:3a:36:20:2a:cc:93:1c:64:04:b8:82:aa:79:b5:6a:d1:
6c:e4:cf:3c:dc:99:d8:08:3d:30:eb:cc:f1:00:9e:51:da:41:
9d:13:c3:ac:53:4a:2a:19:cb:96:a6:f2:d5:48:13:21:be:be:
8a:57:73:65:eb:70:07:95:46:36:4f:88:63:62:77:06:16:bd:
db:c5:f8:e2:90:e0:a4:36:e8:77:ad:d3:47:d1:88:bb:81:46:
6d:5a:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:21 2025 by rpki-client