Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: JwARUp1rG6h4aT9rucdOp+ZFBQjjDhtMKb+dRcJnewg=
Subject key identifier: 3D:22:7C:EB:B4:50:87:4B:B9:BF:2D:9B:0C:06:56:7D:2A:C3:78:97
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 0199FDD99E36B0949C30BD761B57752A3CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0C5A
Signing time: Sun 19 Oct 2025 19:02:01 +0000
Manifest this update: Sun 19 Oct 2025 19:02:01 +0000
Manifest next update: Mon 20 Oct 2025 19:02:01 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: Zsl6+qyfi1X0kF49Ky5n+69QKKuFhe9t0ldIpENwB7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:9e:36:b0:94:9c:30:bd:76:1b:57:75:2a:3c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Oct 19 19:02:01 2025 GMT
Not After : Oct 20 19:02:01 2025 GMT
Subject: CN=3d227cebb450874bb9bf2d9b0c06567d2ac37897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:4c:b1:6c:1b:0b:7e:c6:ad:7c:da:ff:8f:
86:c6:95:95:47:da:51:42:cd:13:23:09:9f:d0:35:
77:da:c0:0f:1e:b1:22:f6:8b:c4:26:a3:5e:9b:7f:
12:31:73:08:85:4c:16:dc:e4:af:37:7c:83:81:1b:
2f:40:c8:78:65:c4:7e:60:91:83:9d:4e:52:22:b3:
da:34:2d:e6:a5:5b:2b:e5:6f:b7:91:ad:70:5f:8e:
c7:57:6f:5b:06:a6:83:f5:8e:1d:4e:c3:3a:17:d3:
5a:d6:ee:6e:f2:4c:75:95:d1:58:03:bc:63:37:83:
b8:6b:23:36:d8:a7:ce:5c:95:43:58:4f:28:22:d0:
c1:49:fa:c4:26:48:52:cf:21:f4:40:e6:2e:77:2e:
d7:7b:4a:2d:4e:f5:df:d2:d7:41:0f:d4:ab:1b:13:
7c:23:11:62:74:9a:bb:6f:28:04:84:7e:df:17:4a:
33:aa:65:1e:ce:d3:60:23:c1:f8:59:6c:ee:90:00:
fc:02:f7:da:d7:9a:ff:45:c5:44:d2:85:13:e9:45:
13:31:e5:17:90:53:ff:ae:99:37:f9:83:f0:73:29:
e1:6d:cb:1c:76:99:5c:33:c6:a3:19:ee:2f:8b:39:
f7:60:30:d7:29:ac:b7:7e:19:bf:a0:dc:37:67:c1:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:7C:EB:B4:50:87:4B:B9:BF:2D:9B:0C:06:56:7D:2A:C3:78:97
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c5:6d:60:a7:31:83:3c:ee:29:98:67:66:ba:f6:56:42:7a:
f8:b6:6c:d5:6f:1b:0e:be:d1:27:84:73:b0:6e:b4:78:0d:de:
38:c0:c6:9c:16:b2:fa:15:a1:6a:7e:96:92:1f:81:49:23:ff:
bc:78:9a:d3:f5:f1:75:2f:2c:dd:bc:06:45:89:1c:29:32:da:
5d:bf:95:cb:47:1e:04:f1:00:39:c6:bc:23:c5:e4:63:ba:95:
a2:3f:6e:6a:29:ee:6c:38:d8:55:51:44:d6:1f:ba:03:2c:2e:
65:54:ca:1a:bd:29:49:74:2d:2e:8d:e6:68:1e:b2:05:07:2d:
1e:a4:3a:09:41:44:5c:3d:5a:cf:21:86:e8:b7:43:9d:7d:d6:
2e:07:a6:b0:42:2d:10:9b:bc:7b:ff:5a:1f:b6:53:cb:73:bd:
00:1f:c5:c0:a5:87:23:af:65:96:0d:82:07:57:11:d8:ff:fb:
98:2b:c1:27:66:4b:1b:33:7b:dc:5e:f3:4f:4d:6f:e8:65:29:
39:9f:d5:a7:60:ba:e8:0a:8c:4c:0a:13:92:32:b7:69:58:df:
27:28:c5:20:2c:3f:42:53:04:c1:0d:da:5a:ed:f3:8a:a1:2f:
65:1a:7a:02:23:0a:11:e3:35:0a:69:87:64:82:53:a4:2f:79:
7b:65:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:39 2025 by rpki-client