
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: B5YDdhhNLZAZZJe/OX1/r1veE+wRSjtqa7GJIksTTKQ=
Subject key identifier: 7D:F6:F9:FF:C9:90:8C:0D:F8:85:AD:CA:E2:18:BF:ED:A0:77:61:16
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 0199FCFD25AD01836337EC4EA15D4370998F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: 01DE
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: 1KnXeZeK2jaZLc215sUulykWcXQ.roa (hash: MfFGqElV/jvH/sstkJrBdiD+qKnk4Q33yEmCF2id+a0=)
2: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: L40EDl1mUrVAOENIcr46mnLI6NU1b2Ax353rA2edjlo=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
6: mgJ3Sc6KxuSRQNVYzl0KbaYNlDY.roa (hash: +UkcMaXx37s6HLo3vytB7ItB+h6lkh9Nk4bNEQS1Dtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:25:ad:01:83:63:37:ec:4e:a1:5d:43:70:99:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=7df6f9ffc9908c0df885adcae218bfeda0776116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:27:2e:48:a5:c8:bd:57:e4:60:30:34:d9:79:
d2:c0:4f:b1:d3:1b:8c:44:d2:e6:6a:2c:97:cc:32:
1e:f5:2d:da:cd:ca:71:61:23:c9:37:d1:a1:ac:65:
a0:45:cd:5a:3b:eb:db:0b:5e:d7:ec:d4:ec:8f:08:
45:de:3e:67:b6:50:b5:29:3e:e6:00:e1:eb:ca:af:
5c:7a:b2:75:33:c4:db:58:c7:fd:5c:04:9d:d3:4e:
bf:4c:f1:3f:05:7f:bb:a0:16:f6:ca:53:de:b6:36:
05:5e:e5:ba:94:52:4e:f8:f5:8b:d3:b8:3b:a7:9d:
7d:16:dc:0f:7d:21:2c:bf:4a:9c:5a:b4:61:2a:e1:
a0:c5:a4:e9:26:1e:b4:96:71:c2:fe:81:2b:47:18:
23:81:c5:e0:9b:65:73:02:44:26:09:01:1c:1a:62:
22:63:73:bb:cc:41:45:f6:bb:39:5e:8c:12:f8:b1:
f2:2f:d0:a5:3c:a9:20:9a:1e:15:6b:cb:0a:77:f6:
2a:8d:f4:f1:9b:8b:1c:e1:1e:59:b4:dd:fd:34:3c:
13:93:e3:5d:88:83:35:87:b5:c7:c5:d9:51:ac:c2:
df:d4:7b:9c:98:01:3a:ec:75:61:be:8a:ee:3e:a9:
74:94:ca:d5:f5:eb:f9:a9:77:f9:6d:55:2a:d7:65:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F6:F9:FF:C9:90:8C:0D:F8:85:AD:CA:E2:18:BF:ED:A0:77:61:16
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:85:c6:53:35:b4:0d:50:e1:da:33:15:f3:51:63:d7:50:a4:
e0:2c:b5:37:05:34:df:c2:5f:a3:6f:c6:54:06:09:4b:14:f5:
b0:2c:19:d3:6c:62:60:44:a8:27:cc:ae:89:93:c2:33:47:e2:
b1:74:c9:fa:5e:4a:be:13:de:a2:23:54:cb:5d:c6:09:2a:e4:
f3:73:3c:a0:f1:a0:ca:8f:34:4c:3e:e4:19:90:26:42:f9:c4:
e7:8d:a2:29:27:6f:95:4b:e7:83:a8:7f:23:28:1e:21:5e:d4:
a9:04:d5:ed:c0:e2:ed:8c:65:4c:d7:a6:b8:04:42:8b:71:a8:
cc:46:af:18:84:2a:74:39:57:f6:a6:26:0c:c3:93:e9:ce:2a:
7b:cb:e9:6c:6f:f6:cb:a5:cf:02:40:36:90:a4:bc:f4:8b:d1:
ed:01:72:62:f1:e4:eb:46:ad:2c:0e:b0:7f:cc:60:90:a7:ed:
3e:4f:e4:fa:27:2c:a6:c5:d8:fb:eb:19:8a:8d:96:56:b9:91:
32:47:3b:94:da:3c:09:3c:5f:a4:4c:b9:52:42:84:96:12:47:
d1:62:94:9a:34:15:e4:0b:07:dc:5f:73:a8:43:a1:50:c5:2b:
13:4e:47:18:76:a9:cb:20:e5:0c:1f:cc:f0:97:f2:9f:71:5e:
6e:1b:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:26 2025 by rpki-client