Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: AOF0nYHE6GgLYwxgWI/coaSvNvUrlB1c1EJJ/CIqciM=
Subject key identifier: AC:EC:86:24:3C:76:72:64:C5:A6:DC:DA:50:A1:4C:10:DC:E2:8D:20
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019A01B4F84ADBD21A609A0E6631051731B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 16ED
Signing time: Mon 20 Oct 2025 13:00:28 +0000
Manifest this update: Mon 20 Oct 2025 13:00:28 +0000
Manifest next update: Tue 21 Oct 2025 13:00:28 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: d1RYL68bIm5Ef7HsWx5rK6hwdgOfrK6jaDnidABelDQ=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:f8:4a:db:d2:1a:60:9a:0e:66:31:05:17:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Oct 20 13:00:28 2025 GMT
Not After : Oct 21 13:00:28 2025 GMT
Subject: CN=acec86243c767264c5a6dcda50a14c10dce28d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:a9:32:db:5d:5c:58:50:e5:d4:e6:75:46:
f8:9b:4d:28:b6:87:f6:6e:11:2a:dd:b4:a4:a6:d8:
87:a9:d0:b9:e9:4e:bd:4a:b0:07:93:d4:15:37:43:
83:f2:6e:ad:53:d7:f6:e8:d9:d9:5b:57:58:0a:76:
e5:8b:ea:d9:e0:73:ae:d9:0f:5b:c3:5f:81:e2:9c:
93:9e:42:d0:c5:96:ba:ae:61:35:c4:f8:af:49:4c:
d1:c9:05:b3:29:7f:9a:de:c9:d2:d1:35:e9:37:3c:
3a:26:a2:d7:6a:f2:00:fb:00:b1:38:a9:5f:9e:d1:
45:48:ab:5a:48:36:49:1e:b5:97:df:e0:4b:e9:63:
b2:dc:66:af:52:69:5b:5a:95:77:90:48:ba:e8:ff:
f6:12:5e:69:dd:cc:ff:ef:a1:5f:23:42:8d:bd:0d:
69:a6:16:32:69:89:e5:1d:05:e6:4d:80:f3:39:63:
ab:aa:20:f8:fd:51:16:b2:72:e5:37:b9:38:37:fc:
40:31:3e:04:03:9a:90:c4:99:99:bb:c5:37:d6:9d:
75:7b:9f:9f:2a:26:58:17:0d:4b:d9:ec:51:13:0e:
6c:3d:ce:ab:50:37:19:a1:38:68:63:3f:45:96:9d:
15:0c:2a:90:84:2e:50:6a:1f:b6:a9:d1:98:d1:2a:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:86:24:3C:76:72:64:C5:A6:DC:DA:50:A1:4C:10:DC:E2:8D:20
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:2d:06:c0:75:75:90:a9:a2:4e:35:52:5d:81:2d:46:58:
bb:aa:ce:5d:f7:d1:e0:10:a1:48:52:ba:eb:32:f0:0c:fe:75:
84:55:da:c7:22:6a:8e:fd:9b:d8:04:22:3f:7e:65:70:96:04:
31:e2:95:26:4b:f4:94:ac:a6:c9:f0:1c:24:f5:f5:35:e0:39:
c1:24:d2:42:bc:a5:01:07:4c:2a:c9:ec:de:bc:b3:7a:13:4c:
93:e5:9e:8b:d8:2b:4f:ba:d7:27:c0:05:1c:c9:d1:98:53:33:
88:f9:9f:5b:8a:09:1a:23:42:d7:84:6d:fb:e2:e7:dd:d8:0e:
6c:e0:c9:ca:e3:2f:51:c0:34:d1:45:ce:3a:11:1b:24:83:b1:
0b:f0:81:07:ee:7e:93:22:17:c6:b5:8b:d7:d3:25:67:f2:d9:
9d:09:32:03:a6:e5:89:bd:7f:87:dd:29:ec:1a:a7:30:25:2f:
d3:fb:5c:05:52:b2:4b:36:a2:3c:ae:5b:82:a4:dd:53:2c:29:
d1:83:08:9e:9d:bb:44:c4:30:ef:18:48:e1:91:e8:98:99:92:
66:c4:44:b7:44:c8:25:ab:4d:45:86:d2:9a:55:b4:0e:38:76:
cd:2a:2c:ea:61:09:65:4b:03:ce:40:fe:cb:f4:36:47:68:ab:
46:87:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:30 2025 by rpki-client