Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier: 3miragTNu9eyjF67FpYl17u9hrxL4YySjbPnDqRCUOQ=
Subject key identifier: 33:76:7E:33:DE:A8:72:1E:BC:86:D6:CE:EF:6F:2F:48:84:CD:EA:1C
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial: 0199FC58F826A23FCB550A9D987E4E0E279E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number: 0CFE
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: bPeePkp63KuQIYFJIUs94Z9sADp6EwbWNr9ZmMG3Phw=)
2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f8:26:a2:3f:cb:55:0a:9d:98:7e:4e:0e:27:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=33767e33dea8721ebc86d6ceef6f2f4884cdea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:c6:37:21:a9:27:30:b8:48:2f:ab:a4:bf:
d6:9e:5e:ae:69:a4:6e:22:dd:85:46:5f:6d:48:67:
08:99:e5:80:5d:ff:49:26:37:42:91:d3:15:e8:ec:
b8:a4:a5:2c:dc:82:0d:55:f8:2a:e2:7e:f0:44:8a:
57:da:3f:24:4d:4f:cc:ba:d5:4f:b8:5a:4c:a8:52:
36:76:06:e5:f1:55:3e:36:02:ea:c5:87:c0:81:b2:
38:7a:99:c2:2f:f7:64:a3:59:4f:3a:60:ce:04:2b:
1e:2f:84:83:24:fe:01:91:98:f9:e4:32:f2:64:a4:
98:65:a7:5a:80:be:7b:32:be:c4:82:d2:33:7c:66:
50:1a:ac:23:60:0d:18:42:2d:98:32:10:49:37:19:
af:87:4e:54:3d:93:a3:f7:73:99:96:6d:fb:c0:dd:
5c:bf:d5:20:98:dc:60:ef:81:f6:1b:06:fd:c3:f3:
90:b8:98:e8:20:37:9e:60:fb:df:cc:d4:cb:50:48:
70:26:4f:34:72:f8:ab:ee:46:b1:08:61:6d:08:7a:
4c:84:3f:e2:bd:1e:20:d0:aa:c7:57:97:85:73:20:
cd:b8:38:15:15:99:ab:c9:3a:0c:81:e4:28:d4:f0:
a7:41:77:1f:25:e8:a7:f1:aa:9d:c3:f0:40:e1:a3:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:7E:33:DE:A8:72:1E:BC:86:D6:CE:EF:6F:2F:48:84:CD:EA:1C
X509v3 Authority Key Identifier:
keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:fe:30:51:fa:34:11:95:b8:59:bd:b1:bf:c5:b9:fc:26:
6c:e3:62:49:21:af:37:87:3c:6e:33:b0:3e:a0:60:ea:3f:e7:
01:02:e7:45:2c:39:d7:71:27:ce:e2:15:1b:b7:05:99:d7:8b:
c6:cb:56:84:81:13:dd:e1:95:f9:c2:d8:de:95:70:e8:c0:a2:
75:73:c9:4e:31:9a:ee:c4:50:80:91:7c:e1:6e:5e:3e:73:3c:
2c:01:2b:8b:2f:5c:ce:25:07:d2:cd:80:c9:bc:0b:20:e3:64:
39:e7:81:e6:d7:fc:b7:b9:48:70:a7:36:aa:34:bc:85:56:8c:
7c:01:ff:72:17:7e:a4:de:22:c7:29:a7:a8:1a:ad:9e:ad:fc:
d8:3d:03:f5:28:d9:cf:8b:3a:f7:af:5b:3f:fe:1b:e2:b8:76:
9f:d5:d6:6f:64:04:1a:bb:60:eb:57:9f:76:ee:25:6d:36:93:
da:bd:17:13:cd:23:ba:e5:c5:50:e0:13:7c:4e:0c:b9:0f:57:
89:ab:cc:6d:9d:4c:4a:d1:b2:b9:1c:f8:66:33:29:c9:63:ed:
aa:51:66:e9:3c:c4:08:d0:87:1e:c2:e7:83:4e:2e:83:fb:28:
cb:65:59:dc:80:2d:2e:fa:1a:b6:9e:be:46:54:6f:2d:ce:14:
7b:72:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:09 2025 by rpki-client