Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: MP3k2RQgWtPGE3nnCRGQVYzVZKNocPuFdTyU6ScGqRs=
Subject key identifier: 15:4D:44:E1:78:CF:2B:84:3B:D3:10:3B:AB:9A:61:A5:39:1E:16:BC
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 0198D4A7FDC6CC46DE3D473200BA8CED41EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 02:00:35 +0000
Manifest this update: Sat 23 Aug 2025 02:00:35 +0000
Manifest next update: Sun 24 Aug 2025 02:00:35 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: ID7bTUYFgTUqXgjulbkiCarmSCQRtU/P8p0vlSwwmLA=)
2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fd:c6:cc:46:de:3d:47:32:00:ba:8c:ed:41:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Aug 23 02:00:35 2025 GMT
Not After : Aug 24 02:00:35 2025 GMT
Subject: CN=154d44e178cf2b843bd3103bab9a61a5391e16bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:84:a0:08:90:b2:22:91:95:d7:b4:bb:15:
b3:ea:4e:6c:c5:39:26:db:04:4d:d5:11:d4:9f:c2:
f8:6d:fc:bc:b7:66:4c:94:2b:09:c6:f0:9b:8c:14:
74:0c:c3:a2:21:8e:65:95:b4:62:34:3d:62:e3:c9:
b4:ba:c1:9d:b5:cc:15:76:18:08:d4:98:45:5a:c2:
dc:d9:fb:cc:fb:80:2d:c2:3c:a1:9f:18:e2:13:5c:
d6:63:1c:90:13:27:9d:48:22:89:56:e2:15:5e:d5:
bb:51:58:25:2e:c2:20:bc:d6:62:39:3b:47:b3:c3:
7a:aa:10:f6:2e:63:2b:d8:95:6e:d2:d7:82:53:f3:
a0:54:86:c7:01:96:54:75:27:32:3c:34:19:e6:7b:
50:dd:06:c4:60:08:30:5c:65:59:77:4b:c1:77:36:
1a:56:f1:dd:8a:4c:33:20:3e:29:6e:85:a4:0d:86:
0a:63:f2:ff:3c:b7:56:bf:51:cf:9d:37:f8:36:a7:
2e:5e:c9:8d:82:29:a8:c3:82:d7:db:74:95:37:2f:
62:05:65:4e:5b:b4:7b:99:8f:11:c8:66:2d:13:a7:
00:93:5b:ff:60:46:8a:b8:a7:6f:6f:cc:e4:5e:74:
3d:86:3f:86:ff:ee:73:be:84:81:8d:31:37:fb:c6:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:44:E1:78:CF:2B:84:3B:D3:10:3B:AB:9A:61:A5:39:1E:16:BC
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5b:2a:6f:a6:20:90:74:58:bc:02:1b:5b:fa:a6:9b:4b:4d:
4c:43:26:fa:56:58:42:27:93:18:ee:30:63:b5:f8:21:b1:b3:
f3:c6:fd:cc:6e:15:80:e4:c0:e7:a0:6d:53:27:d5:25:85:44:
3a:26:ee:f1:a4:93:95:a8:e2:f5:7c:ea:4f:37:c3:51:59:79:
37:2c:03:6c:6c:71:76:b2:10:f4:15:15:e2:6c:da:bc:9a:24:
32:a2:67:17:20:1d:0f:55:5d:ff:b6:6f:7f:57:c5:3b:55:73:
38:f8:8e:0d:d2:0b:09:3e:31:13:a5:84:f3:3e:d8:25:78:9e:
86:0d:d4:35:ef:c3:e4:e3:8e:71:b9:ef:e9:26:e8:cc:4a:bb:
92:f0:8e:cf:cd:66:41:f5:d6:42:97:65:d2:82:d2:e2:4b:4f:
08:54:06:8d:3f:81:de:87:30:65:1b:f9:3c:54:d7:14:21:28:
73:3a:52:22:f9:ca:9d:9a:b8:96:60:13:99:a9:f1:74:9d:82:
ec:d1:35:c5:c1:81:dd:09:3d:10:2c:4a:d3:b8:8d:45:c3:ae:
ed:31:27:9d:fe:23:68:bf:c6:04:69:e9:a9:bc:e9:3e:8d:26:
3f:f2:53:ce:40:d2:e3:13:d3:26:14:50:e8:10:8e:47:58:46:
7a:94:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:07:39 2025 by rpki-client