Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: UzHTREXSASL146gSlVdbaKo0okq0JHC4+Ust5iP6bWA=
Subject key identifier: 0A:BA:82:29:B5:4C:1F:B3:A0:1F:16:89:21:1A:22:0E:BA:21:BE:7C
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 0199FBEC3E0C00E3A835D6FD6037124C0F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:03:07 +0000
Manifest this update: Sun 19 Oct 2025 10:03:07 +0000
Manifest next update: Mon 20 Oct 2025 10:03:07 +0000
Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: zlqOZuRoX7/36Pa7hdZRo432RaeCniDilyWWzejvV54=)
2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3e:0c:00:e3:a8:35:d6:fd:60:37:12:4c:0f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Oct 19 10:03:07 2025 GMT
Not After : Oct 20 10:03:07 2025 GMT
Subject: CN=0aba8229b54c1fb3a01f1689211a220eba21be7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:9b:8b:b6:37:c4:e8:68:b8:f2:75:d1:3a:
1d:55:e9:0b:3f:e7:b5:4f:26:ce:99:b8:79:ef:73:
14:a3:34:43:99:73:ff:4d:bf:a6:f9:52:0a:40:c1:
8b:2a:40:58:59:a5:28:9f:e5:b1:03:52:60:ca:e2:
8f:29:9f:fe:b3:66:3a:64:3a:99:5d:69:16:93:3b:
2f:15:28:56:4e:ca:e4:2c:1d:9a:48:17:6b:65:40:
8e:6c:6b:34:e9:a2:9a:0b:c8:5c:74:57:d7:a5:a7:
c1:32:76:2d:f7:33:56:ba:f3:e6:1a:15:71:17:6d:
9b:e9:66:3d:74:c8:ce:6c:2f:0b:c7:86:82:11:fc:
79:44:d4:bf:16:88:b3:b0:a1:51:90:52:6d:c2:cb:
33:f8:8b:cf:64:7b:60:07:11:42:c9:f9:ce:47:0d:
1e:6d:d0:41:8d:27:9d:ed:b3:9e:c5:f3:10:40:94:
15:aa:18:fa:1a:75:4f:af:f4:39:a7:bd:4a:1f:e0:
3a:25:99:16:e4:7b:60:a6:83:fc:e3:e8:98:cf:5e:
7c:c2:27:06:ba:0b:4d:03:a8:61:e0:9d:0c:d1:84:
82:46:6b:e4:25:e6:3f:1d:98:b3:3a:18:74:28:67:
09:cc:c2:81:bb:24:18:c1:27:31:1d:2f:50:68:70:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BA:82:29:B5:4C:1F:B3:A0:1F:16:89:21:1A:22:0E:BA:21:BE:7C
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2e:2c:6f:ac:10:31:35:b7:e6:3f:df:68:2f:7a:79:b8:fc:
9e:df:8a:19:56:a6:26:fe:bd:c8:da:bc:b1:f9:46:0c:43:aa:
43:e4:7f:bf:f1:b4:93:1a:b1:69:be:de:36:54:79:2a:8a:87:
c8:ad:2d:ab:9a:c5:d0:cd:aa:76:1f:6e:34:c6:c4:66:5c:47:
1e:e7:7c:44:db:6e:e9:6f:08:40:e7:86:1d:31:30:1e:6a:38:
07:55:e9:c4:72:b9:5e:ff:86:c4:25:57:8c:a7:de:b5:da:b0:
33:ec:99:01:de:ea:81:31:15:19:a3:75:09:61:c5:e1:1f:9f:
cc:35:7a:a4:09:84:ae:06:b7:ea:f0:31:9c:33:68:fd:fc:91:
60:f9:63:58:d2:8b:15:dc:d7:af:05:5c:21:01:00:e4:1c:b7:
dd:65:43:2f:44:e3:3e:b9:cc:3e:9f:c6:62:1e:af:25:8b:bb:
8c:f2:4e:ac:b9:a1:bd:81:06:0e:03:23:42:b5:b6:6b:17:e4:
6b:c2:94:76:0a:42:6d:63:05:70:21:6a:96:1c:35:7c:3f:b2:
29:71:09:2c:1e:75:3a:26:e2:99:5f:0f:e6:68:5b:82:43:73:
ee:4e:9c:f2:e8:81:de:49:dd:d2:25:5a:b6:b0:cc:61:c8:e1:
f9:b4:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:27 2025 by rpki-client