Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: sQvamp/pfiud+8XhSCtJHF9YN/nVrBMxfNM7lK+pY88=
Subject key identifier: 48:31:F3:ED:31:13:2D:EE:16:1F:55:3D:99:C2:62:88:12:44:66:14
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 0199FC21922CDF5D9A2AA88AD4F8461E8C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 0459
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: B4E77Z17yxKDHlVut5odiA+cQYTEBClB8dLvFBV6WIk=)
2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:92:2c:df:5d:9a:2a:a8:8a:d4:f8:46:1e:8c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=4831f3ed31132dee161f553d99c2628812446614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:38:c3:98:78:21:e3:09:8a:2d:cb:78:cf:
b8:c7:c1:24:d9:25:26:dc:99:f3:39:4d:db:1f:4a:
fc:95:92:f1:56:b5:6a:5d:42:37:f7:03:12:72:cb:
a7:fe:43:6e:0c:a6:ac:01:28:a1:84:7f:92:5c:83:
b1:1c:6a:69:eb:7c:42:c8:67:6d:24:16:e9:c8:1a:
9a:00:d6:4d:06:34:0f:cc:55:19:9e:08:65:76:16:
11:bb:41:35:8d:0b:09:40:dc:49:9f:38:62:13:59:
60:cd:d2:c7:f9:ae:3d:c3:76:ba:8a:a7:8e:f5:71:
32:be:2a:94:da:26:50:58:a2:18:3a:57:cb:38:48:
46:83:08:f7:0b:d6:02:01:56:fe:45:f3:bd:a9:b0:
2a:16:32:3e:c6:ca:35:ac:b0:c0:03:fb:01:a8:e4:
ba:22:70:1c:ed:11:2e:1f:80:b3:58:ba:22:8e:4b:
e6:e8:08:c5:3e:d3:f1:f0:ea:a4:ba:2e:14:9c:df:
b9:68:12:1f:67:75:78:15:4f:33:a2:b2:10:97:a9:
07:23:48:e3:3b:5a:b9:cb:9e:08:f5:6a:94:ba:b0:
f2:0d:f9:f9:ab:3f:9d:c1:99:5c:b4:4e:0c:8e:f3:
76:f5:ba:f6:e0:df:da:84:e6:a0:97:a6:c9:d3:62:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:31:F3:ED:31:13:2D:EE:16:1F:55:3D:99:C2:62:88:12:44:66:14
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ac:3a:0e:9d:f2:0d:cb:d5:6a:87:9e:92:ea:28:d3:b0:a9:
5e:ea:a9:18:16:f9:ec:f4:42:85:3b:df:8a:b0:7e:e9:87:cf:
d4:72:80:da:ae:d5:82:02:49:36:20:e6:1d:c5:2d:34:73:cb:
eb:9d:e0:eb:e2:4e:90:ed:a4:1a:fa:a4:61:2d:47:e2:89:79:
4b:b1:07:5c:75:f2:a5:4f:ac:e6:8a:ea:1e:78:bd:0c:bd:78:
96:6b:1f:4b:81:8e:56:d6:c9:1c:03:a5:c0:48:e7:03:b4:64:
72:03:0c:e5:15:9d:24:14:35:2d:99:27:5a:68:e1:40:48:16:
c8:6b:b4:65:a5:ba:d4:45:d9:e0:cc:4c:5c:34:1b:b1:de:09:
b5:0a:e7:fc:3a:27:68:2e:4b:09:8b:f2:af:5b:2e:69:d3:fc:
78:85:7d:3f:0e:8a:e6:a9:37:e2:5f:c1:83:a9:b5:1a:91:62:
61:8a:c1:c4:db:fe:fc:d9:fa:86:c5:97:66:86:4e:38:40:06:
74:d8:f1:f6:10:ed:d5:0b:34:97:3d:0e:e1:ed:da:e9:51:3d:
77:00:8c:18:81:4d:24:0b:bf:45:44:bb:d0:a8:59:76:35:a3:
17:74:12:65:bd:c9:09:b3:d0:b6:72:25:ed:dc:d4:f7:9c:7a:
c4:a6:0b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:31 2025 by rpki-client