Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier: v6sT3CmUYDiPZz9Kw3a+LLDbdb0qJcI44hV50+NQ4fw=
Subject key identifier: 4A:E0:FA:DD:A6:91:1B:6F:72:56:5E:50:B0:30:A4:21:CD:34:9F:FA
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 019A00357E6F7688DB8005AC480B43B5E5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 06:01:36 +0000
Manifest this update: Mon 20 Oct 2025 06:01:36 +0000
Manifest next update: Tue 21 Oct 2025 06:01:36 +0000
Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: Ygat8sni8dYIycT/Bhzg0Qu1Ge0bEwdGxvZle0qUR3A=)
7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:7e:6f:76:88:db:80:05:ac:48:0b:43:b5:e5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Oct 20 06:01:36 2025 GMT
Not After : Oct 21 06:01:36 2025 GMT
Subject: CN=4ae0fadda6911b6f72565e50b030a421cd349ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:e1:d9:ce:65:b8:51:3f:46:f5:08:05:2d:
b0:25:5b:0c:3b:85:19:38:26:7e:3c:24:05:c0:4c:
e9:5a:ef:70:94:2b:41:32:f7:e9:2e:bc:37:b9:d5:
6b:7d:e2:71:e8:d7:0f:d0:aa:d7:2e:76:84:38:b9:
af:99:f6:d5:80:b0:5c:a0:d6:92:2f:db:68:27:a6:
14:e4:5e:04:8b:1a:e2:d7:db:ff:27:1c:a5:0a:e0:
9b:3f:44:11:40:3e:43:62:51:62:b1:10:ab:f0:42:
73:37:c4:ab:6c:50:1e:24:f0:24:be:ed:66:66:51:
da:b8:ac:c3:ef:45:22:42:f6:c4:7e:24:9e:43:db:
22:55:b0:f7:18:f0:85:97:85:7c:af:0f:c2:dc:a2:
5e:e7:7c:8a:74:3c:d2:b5:2a:f8:e8:b6:70:26:ad:
73:b2:5a:46:22:6d:4b:2e:12:83:29:da:86:84:32:
78:2b:42:13:02:42:ff:45:40:ca:dc:c3:f8:ec:e3:
1a:68:11:e3:a0:ac:58:04:19:cd:c3:82:2e:5d:9a:
85:b4:d6:7f:1b:e6:6a:03:17:68:ac:74:fe:24:87:
cc:a4:db:0e:48:d6:14:51:90:31:36:1d:e0:9a:83:
eb:f5:0c:ae:36:c9:5c:ee:df:b7:2a:3e:30:88:71:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:FA:DD:A6:91:1B:6F:72:56:5E:50:B0:30:A4:21:CD:34:9F:FA
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7c:41:03:97:31:bc:6c:41:b7:65:f7:23:29:6b:8f:05:bc:
5d:0d:a9:93:de:43:75:0e:af:14:f4:a2:38:86:73:3f:2c:a8:
8f:e8:a1:71:2b:26:e5:f5:f9:b9:97:a1:4a:63:15:61:d3:13:
be:2b:01:6b:bb:25:a2:4d:00:b4:75:5f:1c:74:d9:92:d0:af:
5b:46:28:83:da:f8:39:a4:2c:6e:54:69:fc:5a:c1:e5:a1:1b:
3b:d1:f2:9b:94:e6:09:b7:41:b3:83:bb:04:74:3c:56:c9:66:
f7:33:ba:81:ba:39:0b:ad:32:e9:8b:ef:1a:1a:cd:e0:5c:df:
db:04:ef:7c:50:a2:11:76:68:dd:ab:f0:85:64:3b:aa:a8:62:
cc:3c:20:b0:12:7d:5c:95:8b:59:05:2a:58:5a:08:20:ba:66:
56:73:ca:f4:09:04:d0:ce:2e:ce:7c:cb:66:14:76:69:42:e6:
b3:19:21:18:f4:1d:1d:5f:15:af:44:3b:46:63:8d:4d:cd:c0:
03:15:01:f0:4f:bf:30:ee:86:b1:3c:19:8a:e2:45:83:37:9c:
41:b1:5c:14:f2:6c:78:1d:c1:3b:b9:f2:f2:93:5c:90:25:c6:
7b:99:46:64:e4:66:c7:c5:23:f5:e5:68:41:f5:77:01:ea:95:
0a:9c:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:57 2025 by rpki-client