Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File: LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier: fO/PfTBNdPhfnwuu8qb9hTE4anNFMggeTpwAK/ez+ow=
Subject key identifier: 7C:5C:22:3F:F6:32:45:DF:FF:9E:BE:F8:45:36:EF:98:0E:9D:22:8C
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 019A003588CDB9724704172B419EFC0ADA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number: 0199
Signing time: Mon 20 Oct 2025 06:01:39 +0000
Manifest this update: Mon 20 Oct 2025 06:01:39 +0000
Manifest next update: Tue 21 Oct 2025 06:01:39 +0000
Files and hashes: 1: 0ibK2rFO285XcmwVBGiaWy0mCcA.roa (hash: oJQ8kk++bxBUXY2O47Q7nsX7PbhR5uG9qTYOOM+oaS4=)
2: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: oqDOgYd5l3FZ+E8QAADT4QsPoB90FKYJbtWmqcflXBw=)
3: _GUEYp_ZvXFjTzg6X0GYxguDxqk.roa (hash: ILywVwzLVmDK7onvjHWRnavh4R3aawRApY/DmqcCPJA=)
4: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:88:cd:b9:72:47:04:17:2b:41:9e:fc:0a:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Oct 20 06:01:39 2025 GMT
Not After : Oct 21 06:01:39 2025 GMT
Subject: CN=7c5c223ff63245dfff9ebef84536ef980e9d228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:f0:18:19:d0:34:d0:9f:f5:5a:c7:ca:c0:
ab:18:fb:38:95:62:ab:47:71:62:51:b0:39:bb:49:
ae:b1:75:3d:70:39:b4:88:dc:bd:76:5b:43:cc:68:
12:dd:e1:8f:8e:8f:0e:eb:19:c6:54:f8:36:39:a7:
53:41:c5:3b:31:97:6c:0c:30:10:89:60:79:a0:a4:
23:42:ab:46:a0:a6:22:70:aa:86:e9:4a:6b:2a:af:
28:49:cb:16:fc:de:6a:5a:f7:9d:43:aa:15:aa:e8:
97:d5:e5:a3:ba:0e:83:7b:1b:3d:6f:e4:1e:df:3a:
38:ff:48:ac:9f:e9:93:56:c4:66:85:d5:cc:62:9a:
d0:ba:0a:11:b2:5f:2a:7b:8a:2b:7f:45:bc:14:56:
a5:77:b5:ff:32:57:16:34:f4:2d:af:1c:b4:32:00:
3f:ba:38:38:90:56:d8:56:49:72:1b:68:88:cc:fb:
0f:19:fc:21:6c:5b:ac:89:20:82:1b:db:11:9e:21:
c2:c9:a2:73:b6:89:ff:ff:57:46:81:2d:24:20:a0:
24:c8:49:86:b4:dd:bb:72:e7:0a:09:cf:ae:ba:9e:
99:00:85:ab:72:88:fe:8a:1a:66:0e:20:d8:b6:45:
b7:38:2f:90:81:6e:5f:3e:f4:c8:84:7a:30:85:86:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:22:3F:F6:32:45:DF:FF:9E:BE:F8:45:36:EF:98:0E:9D:22:8C
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:57:8b:42:c3:b2:42:84:95:a0:d0:7d:3b:fd:f6:86:ab:5d:
d8:d7:18:c3:e6:4c:b6:a0:4d:13:db:53:2c:33:83:b2:38:ca:
63:aa:2d:3c:81:13:2d:b1:e6:5c:3e:14:22:d6:5d:96:aa:26:
f7:54:0e:34:a8:0d:10:5b:ff:07:7c:5f:0b:90:b2:fb:81:3c:
56:d1:15:00:01:72:e2:cb:f9:f4:fd:9a:ed:66:16:6f:08:9d:
d6:fd:bb:87:b6:6f:52:db:02:55:55:eb:e8:4a:d6:84:44:01:
0c:5a:d6:50:92:5d:ae:3a:3a:85:4b:29:f6:17:ed:ae:63:47:
fd:89:5b:58:33:79:a9:7a:0a:62:95:4e:54:a7:f5:2e:4e:7b:
f7:78:a1:9b:3f:47:44:31:d8:21:f4:03:c9:94:92:f7:dc:e0:
93:bd:53:fb:12:16:a8:b6:01:b6:25:cd:ab:96:3f:47:e7:37:
e1:da:93:2d:c8:1f:30:21:42:ae:50:4b:9c:0d:9a:5a:14:33:
f2:9a:02:24:ac:72:7e:b0:cd:15:ef:06:20:d9:ee:94:b6:0a:
97:b5:ec:8b:37:c5:9d:77:21:24:06:96:6b:d2:3e:81:fa:2c:
fe:c9:73:61:c5:b6:30:59:af:75:d4:15:6f:78:6b:29:fe:6c:
89:86:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:48 2025 by rpki-client