Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: kZRWoLYQR74+j0IlfErVT4897TT+rBPzPuG/2jpAhsE=
Subject key identifier: EC:55:1F:47:CB:BC:09:64:3C:32:D1:52:61:39:A0:C4:17:F0:36:5D
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 0199FC58D934280A5316BE4EA1858A7D0570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 152A
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (hash: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=)
2: i4xZsK__v3rFAdp2I4QUrGdulkA.roa (hash: 7y/IXk7zUN3UVxHCXKQjh1FoBdjvSc3K/G/mRr6+6Gg=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: LLEPZnReF13YpWV+AycXLJd0pqgZx9rUULsXgl1h+E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d9:34:28:0a:53:16:be:4e:a1:85:8a:7d:05:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=ec551f47cbbc09643c32d1526139a0c417f0365d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:42:70:78:0c:b8:fe:c5:06:c9:71:07:1e:
e1:26:a7:04:87:ad:b2:68:16:20:5b:93:e4:05:82:
c5:c2:70:9c:0e:68:3c:13:a1:72:d6:57:d4:e9:c3:
53:57:b8:89:e5:14:b3:ef:48:6d:bc:f9:5f:c0:0e:
66:d3:d4:87:76:4f:38:97:a7:ba:9e:ab:78:07:33:
61:f2:10:fc:4f:ff:06:73:08:f5:18:2e:e5:a2:28:
5d:1b:62:36:27:7c:51:f4:dc:8b:6e:7c:e6:6a:f5:
29:d1:d3:c3:bd:67:a8:f5:71:ca:c1:08:2f:5e:08:
67:8d:57:ef:aa:2b:f3:6e:bd:30:30:51:92:3c:aa:
cb:7a:8b:a8:2d:27:58:ca:06:1d:90:6c:1c:d5:eb:
aa:21:0f:98:60:52:16:99:f5:ca:91:18:c5:75:d8:
8e:ff:5b:e5:22:95:39:84:8e:2d:ab:67:8d:19:56:
3f:47:f5:6a:db:9d:7c:43:30:bf:ce:91:41:d3:0a:
e1:68:09:4c:ba:2e:87:64:de:ee:30:ce:7b:b2:34:
1d:2f:3f:c1:6b:00:e2:c7:fd:8a:6e:ab:db:00:c6:
21:a0:4f:6e:66:7c:3c:8b:39:eb:23:20:2f:b8:3f:
9b:18:2c:ab:22:c4:8c:ed:1a:dd:ee:a6:57:0d:b4:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:1F:47:CB:BC:09:64:3C:32:D1:52:61:39:A0:C4:17:F0:36:5D
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ab:41:50:5c:b8:9e:ee:c2:51:d6:ae:8f:a4:d4:ea:64:fe:
d1:e3:5c:31:55:06:ed:1b:1b:ea:e9:47:84:10:81:50:49:6f:
ad:08:1d:37:26:9f:06:db:3d:52:fd:4d:09:a3:c1:42:76:a8:
f0:23:14:1d:02:72:94:4c:51:be:7f:68:4e:8b:91:dd:b2:07:
5e:b3:71:51:29:b8:ac:5a:c9:b2:4a:39:38:ed:8a:71:a7:97:
33:9f:3a:24:c3:f5:81:29:9b:f7:e8:43:3d:6b:c8:5b:dc:68:
ac:53:78:43:30:16:92:62:e9:36:4a:1a:c7:0b:87:10:35:c7:
89:f5:82:5d:a1:7e:00:22:8e:64:49:e6:9c:9e:23:55:2d:ee:
2a:e0:8f:da:57:81:f8:ea:6b:f9:92:10:ce:ba:0f:b0:21:4b:
ef:57:ac:d8:c0:a2:2b:ce:50:16:10:eb:8c:21:95:13:46:42:
b3:5d:46:dc:c5:7b:7e:54:a4:f0:06:06:37:8a:8a:fa:93:6e:
d7:08:be:12:cf:a7:11:be:3b:d8:e8:0a:35:eb:a5:64:74:35:
93:40:48:95:2f:a3:8f:c2:37:22:9e:2f:e0:b7:cf:12:91:8f:
db:31:4f:7b:f7:16:48:ac:07:cd:95:ed:a8:6f:e1:92:12:82:
47:ef:2f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:57 2025 by rpki-client