Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: HKbKkQp6nZWaVZhQx894zWHWysp4YbwYIT8DtbBzZA8=
Subject key identifier: AB:72:C3:EA:02:28:87:EE:E1:3B:0A:26:A4:0B:FC:26:39:E9:BA:F0
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 0198D515A34CAED61C725B2D534C701B983D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: 0142
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
2: BNA4ARff29zCBfR6242MtTb6TGg.roa (hash: tJrTcm7xH3ApI498oc2nbD1Dbkv2EhPah1ZZUS9A5bs=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: El6FECa9HEjFHa4CkuhYCWL2PzotLk97Ho9YsBraWoU=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a3:4c:ae:d6:1c:72:5b:2d:53:4c:70:1b:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=ab72c3ea022887eee13b0a26a40bfc2639e9baf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:16:93:a4:fd:f6:25:e6:0b:30:6e:98:95:a0:
04:77:02:22:f2:00:99:f8:6d:48:27:dc:b4:38:e8:
52:2a:d0:f7:59:91:c1:b8:a7:c3:82:6d:90:e2:58:
14:28:30:8c:34:88:9e:76:ef:4a:c9:4c:ad:08:8e:
ea:ce:21:e6:b6:a6:6a:92:f5:91:94:60:6f:b4:78:
bb:84:f7:4f:69:70:85:0a:7c:f8:21:0c:89:9a:76:
2b:60:79:36:3e:5a:0c:36:3c:71:bd:24:c5:64:61:
ed:14:d8:7b:a6:6d:a4:95:63:6c:85:93:df:76:11:
d9:f6:7a:da:ee:04:49:32:6d:0c:84:18:79:06:5a:
15:1c:0e:60:3b:ee:1a:43:32:f4:84:bd:5a:25:0d:
97:ff:4b:f9:0b:94:14:a4:f1:81:b4:7f:4c:19:5c:
7a:d1:b8:3b:6b:d9:db:35:b4:4d:99:76:ee:8f:a4:
0d:a2:9e:e2:ea:34:37:d5:d3:89:db:6b:4e:2e:e9:
02:d4:1c:0d:f4:52:87:2c:57:31:3b:21:f0:99:81:
02:3f:ee:83:be:0c:4d:13:b5:ca:51:eb:21:0c:81:
6c:75:3d:4b:9e:38:1a:5f:53:99:a5:ee:89:11:6b:
cd:ca:49:15:15:3b:be:06:c0:ee:60:4e:a6:82:48:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:72:C3:EA:02:28:87:EE:E1:3B:0A:26:A4:0B:FC:26:39:E9:BA:F0
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1b:0f:8c:d6:03:a1:d6:3b:41:62:94:92:bb:24:c5:b2:c8:
45:7b:d8:9c:49:4b:b7:9e:6d:a6:1e:ec:1b:f0:b4:34:8f:01:
eb:3e:c7:da:72:19:27:63:cd:c2:89:11:9c:7b:07:86:27:3b:
ad:1f:24:f4:c9:1b:f6:0f:24:c4:63:84:6e:f0:df:fb:d0:cb:
37:7f:76:0d:9b:30:34:7a:8d:64:b4:1a:8c:47:7a:ad:99:70:
89:67:18:1b:e3:68:c0:83:96:3f:33:3a:ad:db:92:a2:43:e8:
63:24:3f:7d:fa:c4:05:49:61:66:41:83:32:fb:ee:d7:e0:ef:
9f:93:c4:4a:4f:c4:63:71:98:83:5b:06:eb:24:1b:5f:4a:1f:
b1:4a:0c:9a:29:2d:6d:25:c4:43:06:db:d1:04:b0:20:0d:00:
75:bb:d6:f3:2c:4e:0c:08:6d:4a:54:c7:bd:f8:59:b0:a4:b9:
d2:cf:54:50:94:66:51:27:5f:31:b2:12:f8:dd:de:13:4f:83:
f8:50:b4:db:fa:b1:7d:e5:b9:57:cf:27:2d:8c:c4:fb:61:83:
bf:ce:95:cb:0a:5c:64:e2:c0:79:df:c4:9c:b0:7e:70:96:0b:
50:26:ee:9b:dd:ab:e8:d1:76:69:92:c8:4b:39:95:72:f3:9e:
ad:bd:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:50 2025 by rpki-client