Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: 4bd6w6H/GkEic8nAYp5S24gNbjyi+3bE3IXD8hpIKJI=
Subject key identifier: F6:53:15:71:AD:17:57:14:E3:25:27:D0:CE:25:0D:AB:BE:E8:ED:F0
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 0199FC8F9EA33B626CD69E16869DBC65F6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 0232
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: uXvZgDQuO8ncrbgx2RmOKFHpdAfGFyfidnikHvbGeFs=)
2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9e:a3:3b:62:6c:d6:9e:16:86:9d:bc:65:f6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=f6531571ad175714e32527d0ce250dabbee8edf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:c3:6d:32:63:b5:00:2b:44:3a:aa:0c:d7:
ab:a7:b5:b1:68:9d:f5:62:8e:ad:51:e8:fb:fa:91:
53:b7:2a:04:1f:c1:07:cc:55:7c:e3:f1:19:38:e1:
37:28:96:0a:ab:a6:6b:fa:cc:e3:18:30:3b:d3:6e:
ad:6c:c1:0a:ae:c6:3f:73:ed:f2:d3:c5:f8:cf:90:
ea:4c:7d:dc:58:a6:82:66:57:6c:3e:06:69:7f:8a:
74:fb:da:8b:4f:41:a3:00:a6:70:ad:88:c7:5c:91:
46:f4:16:a9:37:28:0c:9f:86:7f:df:9f:b0:21:9a:
e8:49:e8:5c:22:b7:c1:a9:5e:c8:bc:0d:84:88:34:
c7:5a:cd:2c:5e:eb:61:5f:7c:88:f3:d5:6a:fb:f7:
5f:b8:84:67:9f:92:45:ec:e1:fa:2c:8b:a3:7a:e5:
4c:7c:99:99:6c:73:f3:70:5c:6c:d7:82:8a:75:aa:
5a:d4:dd:e2:f2:70:eb:fd:ef:77:2a:c9:87:e8:a5:
71:8c:ed:2a:7c:2e:af:f8:15:24:e7:85:86:8f:70:
3c:53:61:b4:58:7c:b0:7a:af:28:45:cc:1a:e0:82:
9b:c9:dc:df:54:0d:41:23:f5:8e:d5:29:ac:f7:eb:
85:da:5f:ab:b6:4e:9b:a6:fe:b8:38:e1:da:54:08:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:53:15:71:AD:17:57:14:E3:25:27:D0:CE:25:0D:AB:BE:E8:ED:F0
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f5:61:ad:a4:a8:a4:80:97:20:96:08:e2:af:3b:97:5f:c9:
0a:55:fb:7b:27:fc:6c:0b:bf:bf:f9:75:09:26:03:80:d2:cc:
10:ec:d0:06:a2:e3:36:5c:27:9e:de:f9:4b:68:4b:7c:37:d3:
ff:1e:98:4d:66:40:fc:71:59:0b:66:bf:20:c2:93:5c:69:96:
22:ac:5b:df:7f:19:fb:a6:a9:50:6a:34:17:18:5d:c2:d4:d4:
07:ac:9a:80:68:c1:28:d0:16:14:b9:18:d5:b1:d5:ec:4f:61:
9e:a4:5c:ba:c0:50:52:c7:60:ee:2f:b1:43:26:ae:bf:41:bc:
f4:9b:c7:2a:81:d2:68:03:45:82:29:3e:be:2e:40:1b:f1:54:
f7:66:a2:56:19:29:26:bf:9f:cc:7e:e4:77:71:2c:bc:bd:4b:
44:af:40:aa:d4:be:58:01:5c:71:d4:a6:4b:05:9f:a0:22:8b:
cd:7d:ec:1f:ff:f4:82:95:55:7e:ca:88:6b:53:a4:33:b0:de:
a6:5c:0b:a0:af:b3:b9:b6:d7:d0:ad:75:b6:87:06:dd:56:be:
71:9c:3b:0b:d8:75:3e:4b:da:51:a3:3b:d7:01:fb:94:d4:c5:
1c:18:e0:ae:9d:fb:86:d4:77:45:05:e8:cf:50:a4:ba:ab:3f:
43:0f:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:47 2025 by rpki-client