Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json)
Hash identifier: bT0lTGvffd0d1lGU61Sg1ENvswTYtmWzsVmqWbSK+gw=
Subject key identifier: F1:8A:73:0A:84:A4:14:01:35:AE:A6:48:94:BD:41:A4:EF:E4:E6:91
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 019A0290D9A1CDD5897EADFE190F7156D581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
Manifest number: 11D5
Signing time: Mon 20 Oct 2025 17:00:38 +0000
Manifest this update: Mon 20 Oct 2025 17:00:38 +0000
Manifest next update: Tue 21 Oct 2025 17:00:38 +0000
Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: tnrB5QSA0LN35CuG7fRyxDBmwEZCOwl4jTs78HpewzI=)
2: ZLmfDyi4aWqpFE0PZT7YouoFqII.roa (hash: nbnap/bdTVrLKLJNTBuHrEznwfwZ3oyER6dX2ESBqQ4=)
3: oLrn4a9qOdl-vVdDDDEfOdcaw0M.roa (hash: C5BMAgY6fq8D0n/15WajsEVkkZ7GAkrzRmDZ7QTRZfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:d9:a1:cd:d5:89:7e:ad:fe:19:0f:71:56:d5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Oct 20 17:00:38 2025 GMT
Not After : Oct 21 17:00:38 2025 GMT
Subject: CN=f18a730a84a4140135aea64894bd41a4efe4e691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:ef:19:95:03:56:d6:7e:30:9a:17:1e:b2:
41:60:04:6f:8c:7c:88:88:f0:4d:39:1b:a7:39:5a:
12:48:80:44:c2:7f:a2:50:5a:f8:1a:b8:a6:01:0e:
ad:66:c5:04:95:87:ed:c8:ac:57:74:17:00:fa:f9:
a9:10:78:e1:eb:9f:fe:89:c8:b5:25:e6:51:37:24:
7e:46:66:10:2c:e7:bd:81:d3:f4:0c:28:ad:14:2c:
86:50:7a:47:0e:07:02:7b:c2:4a:0b:e0:40:b2:0c:
82:49:41:26:5e:4e:09:d5:89:92:03:bd:2a:0d:d5:
d4:70:c5:61:1c:d9:39:b6:ea:ac:9f:59:56:a2:96:
ac:05:4b:2f:ea:3d:da:5d:03:cb:bc:6c:51:01:38:
ed:72:b8:1a:9f:30:c8:b8:d6:ef:29:b3:16:f5:bf:
c0:00:da:44:7d:ae:d3:dc:ca:df:e7:1b:5c:43:f8:
15:81:2d:8e:e5:8f:eb:09:6e:a4:fe:97:1c:a6:6a:
2b:55:62:6b:b4:f8:5f:da:ac:b6:b4:c3:8e:a0:89:
93:7f:47:f4:bf:65:6f:10:23:fd:68:e7:89:05:2c:
71:98:12:28:ed:62:b3:cf:2e:3d:5f:18:30:a5:cf:
9b:48:54:80:57:71:b6:1e:a0:ef:34:01:c1:28:a5:
5e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:73:0A:84:A4:14:01:35:AE:A6:48:94:BD:41:A4:EF:E4:E6:91
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:01:bb:a9:98:4f:e5:24:21:0a:26:06:aa:86:06:47:b3:8f:
ca:6f:f4:07:7e:1f:bb:68:a1:19:a0:76:c2:06:ae:47:45:b5:
68:3d:e2:22:22:d3:10:9a:b8:43:0d:dc:bf:ed:3d:74:a9:74:
b3:60:e8:9b:d6:b1:b4:fa:d0:77:47:51:79:fe:fd:d9:f5:3b:
21:df:83:de:d0:ef:ac:30:9b:72:c3:7d:dc:63:0b:de:6b:dc:
39:d1:8d:24:74:01:d3:fc:64:bf:3d:d8:54:61:0e:3a:0b:17:
61:4e:56:28:c9:44:41:f3:a5:da:c2:ca:a6:f2:13:f6:06:99:
ce:cc:4e:8e:95:70:77:52:60:70:39:54:92:11:ed:22:ab:42:
12:5f:80:87:2c:8b:f5:ac:70:ac:4b:d7:3d:b2:1d:e4:11:04:
2a:75:83:82:65:6b:a0:21:36:2a:3f:c2:3b:4d:18:39:af:8c:
86:c4:8b:87:5e:b1:ed:17:67:38:33:b8:06:ee:3f:b1:54:bd:
4d:d3:4b:57:12:8f:e8:41:fe:4b:0e:86:40:fb:83:d4:7b:90:
b8:f0:97:71:ce:6d:a2:73:db:55:02:c4:01:dc:d2:7b:d0:07:
fc:b8:f5:09:25:50:2a:63:d9:f8:f8:cb:0f:15:be:aa:ad:8f:
dd:fa:c0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:07 2025 by rpki-client