Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: 5Eea5ZUI6HVxiZl8cXI440sbV4vzaIsjehxq94R+l2w=
Subject key identifier: 66:62:7E:B1:B9:9C:A0:5F:2C:C1:99:D9:1E:92:FA:3F:2E:B4:65:F2
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 019A006C148D9D202B5119B271E164610969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 07:01:14 +0000
Manifest this update: Mon 20 Oct 2025 07:01:14 +0000
Manifest next update: Tue 21 Oct 2025 07:01:14 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: K0Oe3zIhJr9caRkMmb4YlE3D34dEkr04jGjc5pUiK4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:14:8d:9d:20:2b:51:19:b2:71:e1:64:61:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Oct 20 07:01:14 2025 GMT
Not After : Oct 21 07:01:14 2025 GMT
Subject: CN=66627eb1b99ca05f2cc199d91e92fa3f2eb465f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:79:8f:3c:8f:f5:85:7c:e2:b1:28:01:e5:
30:62:08:85:23:6b:71:c4:8b:1a:88:42:da:0e:c5:
e9:43:77:76:2c:c1:84:6f:00:83:1d:b4:01:b4:23:
32:d8:a6:25:c5:f6:5c:3a:07:2a:44:4f:46:31:e6:
27:1e:eb:c5:19:df:b6:9a:ea:be:33:17:4d:b3:00:
a5:3b:29:2e:58:6a:cc:39:db:e2:a0:ee:8f:9b:bf:
f2:a4:90:a0:56:5a:c7:e9:87:3c:fa:21:43:48:94:
3b:3d:69:eb:7a:9d:40:c7:39:8e:60:87:bf:8a:bb:
58:c9:b6:92:f1:b6:44:85:c2:4e:5b:73:cc:ca:d4:
86:43:55:58:75:05:54:24:44:e4:70:9d:52:1f:8d:
93:31:1c:fb:44:1b:fc:66:46:52:0a:27:b1:d6:74:
57:1c:5f:48:cf:86:64:66:ba:60:61:1f:aa:0d:34:
63:a7:76:2b:29:23:cf:63:99:f5:f0:5c:fa:c3:e2:
fc:fd:d4:e0:43:90:a9:c3:3f:23:80:a0:01:d9:37:
24:19:8b:15:61:3b:a0:4d:66:d3:b9:f1:48:f1:f1:
b0:6e:d9:0d:5d:b0:dd:18:03:9a:7e:37:6d:dd:83:
27:7d:72:92:20:1c:92:fe:5e:2c:d0:0e:2a:88:4f:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:7E:B1:B9:9C:A0:5F:2C:C1:99:D9:1E:92:FA:3F:2E:B4:65:F2
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d6:cc:31:d5:2b:67:22:99:41:48:b1:54:56:61:9f:b4:94:
bf:eb:64:24:e7:2a:0b:be:ba:ae:f4:a6:23:87:57:26:bb:80:
b9:b7:5e:6c:50:95:0c:c4:ba:ac:34:91:41:cb:3f:27:2c:59:
84:6f:61:e5:c3:41:82:47:83:d6:52:d5:e6:16:97:50:57:12:
cd:b7:76:90:94:b0:ff:c6:fb:36:68:f3:79:27:e3:da:9b:db:
5f:3c:f1:75:c7:be:66:1e:14:3c:0f:ec:47:37:1e:21:ad:2e:
f0:d0:9b:a6:10:ad:da:d8:70:11:42:20:3a:f7:41:ce:89:e9:
42:66:34:13:ec:16:87:36:5e:a0:ff:4c:15:f2:36:fc:b6:60:
7f:19:22:b1:64:ca:6f:bf:e6:78:62:e7:57:c1:0a:9a:1a:68:
b6:5b:d7:fb:9c:39:c5:24:a0:02:0a:4b:98:07:8f:fb:67:e4:
9c:a8:74:ca:40:8b:b6:55:85:53:c6:55:ef:10:ed:82:63:d7:
40:a0:f6:c3:91:f3:2e:ca:2a:8d:c5:d9:fb:da:ef:e2:10:f0:
23:b2:55:fa:3a:12:a1:09:b3:22:ef:49:a1:29:84:bb:d7:b2:
9d:c0:57:6f:e5:2b:7c:54:ee:b5:73:db:f0:2d:25:48:cc:d6:
25:45:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:56 2025 by rpki-client