Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
File: LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft (raw, json)
Hash identifier: y3eVa5l0UmyDhK7pyJTGfEQOr+W33cWZhvdsVk59RKE=
Subject key identifier: D7:B6:8D:8C:88:C5:93:03:3B:6F:43:FE:2E:F5:23:1D:9E:DE:E4:C8
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 0199FFC739B0AB1FA8DC20DD2343D280271E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
Manifest number: 12BF
Signing time: Mon 20 Oct 2025 04:01:10 +0000
Manifest this update: Mon 20 Oct 2025 04:01:10 +0000
Manifest next update: Tue 21 Oct 2025 04:01:10 +0000
Files and hashes: 1: InAYg7kchm6hoE6SFVJqN5VO9jI.roa (hash: QxF7Lo3czD2q4Tr7NHUd/cpUnQ6rJyTxBt1Fv/I4tgU=)
2: LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl (hash: yaE5I67+zYS+fuvRRSeT9EUaWkuov/EqQAAp+mPS5w4=)
3: k4qXOW_NpDOIOHCLgRTHFZfFt5A.roa (hash: ch7ij5E9LUdhi3/tkx9pvbq8WxL6Rn0r2P+Vs1PthF0=)
4: lFwxYJ9NT0Uy9IOwwYFb_vwGrhw.roa (hash: z+R9el6Zb5OurCcNqlSTJDxPuVgrOIIhwKwpE5Vc65M=)
5: p4gLr8QizpVSiuP1_Kkcfly1rjA.roa (hash: Wzj0j9gfoenaBy8qXe/RI5cOEUtdX9DRCtW7mRo3wd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:39:b0:ab:1f:a8:dc:20:dd:23:43:d2:80:27:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Oct 20 04:01:10 2025 GMT
Not After : Oct 21 04:01:10 2025 GMT
Subject: CN=d7b68d8c88c593033b6f43fe2ef5231d9edee4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:67:4f:d0:fc:ac:7b:24:80:b0:9a:5b:8e:
a1:8a:e0:33:39:8a:be:da:38:af:5f:89:fe:cf:50:
57:53:83:56:98:97:d6:e0:2c:d6:05:d4:85:4f:8a:
0e:ed:3b:e8:d2:aa:21:cc:50:83:a8:48:44:5f:20:
af:48:c1:26:b6:45:93:8c:7b:e6:37:7e:2b:be:be:
79:77:88:c0:70:c9:19:d5:ad:92:2f:52:36:4d:dc:
1d:14:36:c4:1d:3c:6f:1d:b2:39:9f:4a:78:86:b3:
b1:2f:ee:8d:dc:cd:fb:29:e2:9e:2e:b8:f8:2b:4f:
a0:34:68:de:75:7b:45:bf:39:21:1c:98:0a:f4:fc:
eb:fd:19:74:6b:a6:0e:9e:3a:ab:32:02:c5:c0:eb:
2c:82:3d:2e:4c:ae:58:92:50:42:6a:4b:42:2c:79:
7a:55:c6:e9:c9:b8:f6:5e:65:1c:07:7e:f4:27:e1:
32:91:b1:b1:27:62:e5:54:9d:b1:53:43:2b:29:c9:
df:72:4d:25:8e:6c:20:70:44:b9:4e:da:e0:57:08:
34:73:ae:b7:93:d0:c5:db:2e:52:f7:4a:d9:07:54:
31:eb:af:b4:2a:9d:66:13:07:5f:20:05:91:7e:df:
54:59:e3:44:19:f2:e8:8f:da:36:1c:2e:4e:9b:e6:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:8D:8C:88:C5:93:03:3B:6F:43:FE:2E:F5:23:1D:9E:DE:E4:C8
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:bf:33:f7:d2:65:98:32:5b:69:80:96:44:16:e6:ba:db:92:
1b:92:56:63:5c:89:9e:5b:8b:69:37:f5:5c:ba:fa:b5:d9:4e:
aa:5a:97:41:8d:35:f4:a4:43:2e:4f:0f:50:bc:94:c0:40:55:
24:04:66:79:39:c1:35:0a:bf:d5:17:5a:ec:6b:d0:03:55:d5:
36:d2:8c:40:6d:1b:dd:f0:5c:38:b8:82:a0:5c:f4:89:14:9a:
57:ec:97:65:04:18:18:90:1f:7a:27:50:32:2d:a8:4c:cd:22:
a8:aa:38:99:15:c3:fe:f5:15:dd:a2:88:4e:3f:5d:d9:e6:d6:
9b:30:67:72:a8:d2:93:b6:f7:37:e5:b4:58:69:3c:92:e6:ab:
bc:b9:4f:ea:b7:6f:b2:26:2f:9e:eb:d7:e1:ea:af:cd:f0:09:
74:67:20:ac:ee:e4:20:aa:94:a2:54:6c:3a:dd:3f:ca:1f:ee:
c4:12:c4:06:46:45:c3:c2:2e:e2:ec:03:62:c1:d2:f7:65:13:
22:ac:96:aa:d9:71:4c:a3:77:b8:5d:11:68:1f:a8:2b:76:6e:
c0:d9:76:40:5d:8f:bc:6c:9e:bc:96:76:33:ff:a0:f4:51:f8:
d2:19:ea:83:70:53:c7:77:b3:af:92:16:e4:2e:ac:09:c6:8b:
f4:9a:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:31 2025 by rpki-client