Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: +2efWQC/fzkctPuR5AXqXf+nQD0HI7ILZVwddHDxhvw=
Subject key identifier: 14:69:74:E3:82:BF:A8:0C:B2:4D:ED:61:E6:FA:7D:BF:59:26:28:D1
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 0199FBEBF9E383417F5EEF4F4FD7E5094A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 12B3
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: hPSHVE0Wtn7rEaJhEigjlcUk+oMQD2oeEDjU8nvjHy0=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f9:e3:83:41:7f:5e:ef:4f:4f:d7:e5:09:4a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=146974e382bfa80cb24ded61e6fa7dbf592628d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:c1:84:36:d6:4c:ed:6d:8b:aa:c2:fb:a3:
eb:f0:c7:bb:8f:d4:cb:d6:4b:c0:c0:6b:56:4e:8c:
63:2e:ce:5d:c6:4a:2e:6a:64:8b:8a:15:a3:8c:4c:
19:53:32:23:c2:9b:05:9d:bb:72:c8:85:7f:cf:28:
a7:01:ab:4c:c4:34:4d:17:fb:e0:28:8b:e6:2e:f0:
da:be:65:64:e4:a4:c3:ff:b8:1b:9a:8b:cd:fc:14:
34:89:dd:ee:a5:ef:87:86:17:25:96:47:bb:80:4e:
62:06:9c:a4:55:cd:53:66:f4:3b:bb:dc:cb:7a:32:
2a:85:98:c0:65:f8:bc:dd:b6:ef:38:c1:84:23:47:
6d:72:19:1c:a7:37:b3:9a:64:6b:35:6a:9e:ef:4a:
7e:4b:07:a9:9a:94:71:dc:3f:fa:65:bb:74:9e:1c:
a8:7a:01:67:11:57:b3:6d:70:88:40:6c:1c:b0:87:
eb:49:3d:cd:2e:bc:f2:b5:1c:18:85:74:b7:4e:35:
b9:9b:e7:b6:8e:aa:78:2f:27:c2:ce:e8:6f:6e:53:
f7:af:e1:ae:0e:60:6e:4a:f9:bc:6b:c7:05:88:7e:
cc:62:39:e7:b1:95:19:2f:62:02:12:ee:4b:51:a1:
da:35:f8:60:d2:23:11:ec:97:12:ef:34:a7:d7:4c:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:74:E3:82:BF:A8:0C:B2:4D:ED:61:E6:FA:7D:BF:59:26:28:D1
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a6:2a:09:6e:03:b9:4e:2a:00:f7:7e:6e:36:a2:ff:36:6c:
44:df:f2:83:ea:17:98:81:86:b8:85:ea:66:f5:0b:f3:f2:32:
79:a2:7f:ea:7e:90:9e:00:83:60:d5:b9:06:07:40:94:4b:21:
e0:ba:75:bc:72:f3:98:29:95:80:c5:18:a6:e7:00:1f:11:e5:
c9:32:da:63:65:ef:a0:61:a0:e0:90:ef:24:dd:e7:f1:96:77:
84:6f:34:52:7f:90:2d:87:b9:2e:ae:67:57:bf:df:0c:9f:73:
2f:d3:85:7f:d4:51:da:f8:01:43:6a:c5:e0:8f:e5:58:c3:0c:
73:80:b4:6c:56:45:64:f0:b7:6b:1a:07:9a:64:eb:30:11:ee:
11:75:03:25:86:d5:00:6d:96:f4:0c:18:9a:c9:53:ec:21:04:
20:74:24:49:0c:3e:a2:34:b5:ba:70:3c:35:75:85:87:18:f5:
85:a2:52:79:c0:b1:da:52:7c:b5:df:69:80:d7:d1:64:05:76:
5e:a4:e3:6a:c9:70:f3:3e:77:d0:e7:60:7e:ab:3a:f9:b4:52:
43:7e:a8:76:4d:e8:47:81:42:43:2d:96:f5:b1:0d:aa:38:ce:
1f:3d:6c:21:83:33:cf:5d:a2:1c:ed:dc:0b:f3:f6:3a:9f:e5:
13:3d:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:41 2025 by rpki-client