Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: DXGgJ20y/vSpswq3/7ii3DtKI9Hz68MQqTQwYdoF6Ls=
Subject key identifier: 9F:85:BA:1C:01:FC:E6:0C:82:9C:B3:F4:E1:02:22:8B:34:D7:84:BF
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 0199FCC6847E12876B48659F58C4491CD390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: mwaCDF6xJALYooWKsi9CqwWjTe5LOgh9Oq/47d8SFRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:84:7e:12:87:6b:48:65:9f:58:c4:49:1c:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=9f85ba1c01fce60c829cb3f4e102228b34d784bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:76:15:60:00:ca:02:8b:52:b2:3a:fa:91:
fb:70:df:ea:c3:54:ff:5a:b7:c5:54:a7:a7:3b:a4:
1c:cd:29:e1:5d:21:5d:e9:96:97:60:6f:e9:5b:be:
4f:f5:cb:5d:92:13:9d:84:38:f1:a2:3e:62:be:60:
0c:cd:08:67:5f:1a:63:a2:82:b2:c6:b4:1e:01:7f:
eb:10:76:29:36:ba:74:01:b1:e9:78:73:90:95:bd:
a4:e4:78:e5:3d:29:ae:0a:e1:d3:08:d8:80:7c:b9:
42:82:8c:6c:c9:a3:2e:c9:fc:bf:b5:62:d5:5c:ef:
3d:81:be:77:42:62:34:2e:9a:ea:e4:6d:54:37:49:
13:da:c2:41:f2:41:ca:a4:64:56:a1:05:f1:52:ae:
d2:2e:b8:5e:b1:38:41:a4:57:e2:fc:0b:1e:ae:21:
d7:a4:fb:67:32:72:99:c8:ef:9f:a2:3f:7b:e8:47:
21:05:ef:9f:15:5b:93:9c:17:bb:7d:ec:1f:e9:d1:
c6:98:56:77:0f:7b:9f:b3:8c:86:97:9f:32:5b:ca:
32:0a:81:d5:3e:9a:6d:ff:e4:3f:e0:2a:ed:e7:b6:
66:9f:d4:2e:5f:7e:31:01:6a:2c:e9:d9:d2:b4:ab:
ef:c8:44:81:5d:4a:f2:66:fe:72:94:a3:9d:3b:c2:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:BA:1C:01:FC:E6:0C:82:9C:B3:F4:E1:02:22:8B:34:D7:84:BF
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b1:29:25:1d:cf:b0:b5:93:78:a4:a6:9f:51:cb:ed:9f:3b:
8e:f6:a9:ed:5c:4f:dc:0f:27:49:7b:76:7f:f6:6b:e5:44:d7:
9d:16:6d:b6:09:a7:d5:b8:88:4a:61:36:b3:67:ee:f0:fd:9d:
7a:0d:09:93:bd:02:b5:df:2a:e4:fc:36:2f:54:f1:c3:e8:0a:
ed:1a:c5:9e:c3:d5:db:39:02:e6:e2:b5:eb:a3:6b:92:1b:7b:
5d:d8:06:7c:0b:4d:9b:4c:db:98:eb:d9:18:6e:ba:07:9f:17:
f9:6e:c2:11:2e:fc:1e:3b:23:dd:37:95:35:94:b4:12:14:50:
5a:d4:65:68:3e:f3:54:b3:10:f0:b4:af:4c:77:29:45:d7:88:
8c:34:69:47:4e:b7:4a:a8:48:73:ed:d6:0f:db:30:0a:85:87:
07:d0:54:72:7f:e6:42:b1:55:d3:3a:cb:bc:f0:4b:a3:5d:76:
e4:36:c5:b0:21:5f:c9:13:09:df:af:a5:5e:a5:ff:06:54:71:
62:6c:a5:c0:82:3b:29:28:44:fe:ba:a0:c4:ac:6c:7b:71:f0:
62:6e:4c:7f:bb:e2:67:30:48:ca:c3:15:0b:e4:7f:79:04:c4:
6c:92:fa:fa:b3:10:b2:95:86:92:e2:82:20:4e:28:17:3e:28:
36:28:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:23 2025 by rpki-client