Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: WY9UJx+nZqbCfL5xtf82i5e2S02ZxiWZTKHXzg137mY=
Subject key identifier: 7F:B1:C9:1B:3C:AF:25:F8:DA:48:CC:C5:3B:4A:87:1F:73:57:14:F2
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 0199FC8F7BA9B7DBF59755A7C65B0265050E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 1678
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: 67QOBgg+ZGcUwqOtHqiiexZIUkEl/dDmhtEE5r6E1Ok=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7b:a9:b7:db:f5:97:55:a7:c6:5b:02:65:05:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=7fb1c91b3caf25f8da48ccc53b4a871f735714f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:00:6c:16:ab:ee:5e:74:93:8d:cc:3e:d4:
ea:92:aa:2f:ef:cf:56:38:af:a6:4d:70:c6:a8:c2:
3f:a9:cb:51:3c:78:69:6f:d1:b6:1f:2d:da:39:39:
3d:0a:56:d5:c9:47:5b:36:84:04:7f:c6:c1:2d:05:
a0:65:28:63:a1:42:53:cc:1d:81:e2:70:53:c5:be:
0f:89:62:02:de:c4:e6:e1:e2:59:c7:fc:df:1f:9d:
9f:94:fc:50:c9:12:84:ad:46:29:14:d9:38:99:30:
7b:6a:db:77:9a:32:5b:c1:81:d3:ea:63:9c:2c:bf:
71:e7:a1:a0:2d:80:c3:53:5b:01:da:8a:cb:e3:4a:
ca:68:44:23:f2:6f:09:56:dc:79:36:03:b4:1e:09:
f4:21:0c:c4:d3:bc:6e:1e:ff:98:74:17:80:0d:13:
49:fc:16:93:23:4a:5d:4b:fa:91:f8:85:0e:52:39:
60:c1:66:3d:95:db:03:32:e2:ee:7f:fe:85:f5:a8:
17:7a:bf:51:33:c3:b7:fb:9e:95:a2:e5:51:1d:76:
9f:fc:32:38:92:e7:1c:c6:11:25:55:ab:b5:ce:44:
ee:74:30:61:ca:59:25:58:09:38:8e:e8:8b:c5:4e:
17:37:98:57:ed:67:1a:79:f6:fa:ee:7d:2c:9a:bc:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:C9:1B:3C:AF:25:F8:DA:48:CC:C5:3B:4A:87:1F:73:57:14:F2
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:90:cd:8f:73:e2:99:78:98:26:fc:ef:91:6c:f5:54:3e:ed:
c3:ae:59:14:2d:34:ce:d2:bb:d8:6d:18:da:64:ef:69:04:7b:
49:e1:7e:94:ed:3f:52:97:12:28:82:6c:45:32:f5:24:97:f3:
fe:c1:b0:c1:1e:da:3b:b7:18:ca:74:ea:89:8d:c6:96:e5:e3:
a9:43:f8:4e:59:cd:25:76:4b:af:5e:ec:3b:52:cf:7d:da:46:
30:3a:8f:b5:8c:ca:80:36:3b:0a:91:de:c0:0d:48:fc:ad:62:
98:99:01:2f:04:51:b4:27:2c:67:7d:b7:8c:d3:62:11:e8:63:
0e:44:52:e4:9e:37:43:c9:c1:36:a1:34:b4:62:56:0e:b7:cc:
bd:c6:46:38:c1:d6:ec:3e:75:c6:7a:38:33:bc:cc:71:04:07:
a2:e0:2e:bf:d9:a0:7e:df:9a:74:76:5a:71:93:74:39:3b:b5:
b9:db:08:e5:96:d6:e9:ab:d6:19:76:41:8d:29:00:cc:0f:72:
3d:c0:45:a4:02:b9:54:47:d6:ca:10:ec:e4:77:97:21:04:76:
81:50:a2:d0:19:bf:0f:45:0f:b8:88:3c:c1:35:13:d0:3b:b0:
51:60:f1:04:a1:50:76:0c:05:40:40:92:03:dd:22:38:ad:1f:
13:43:14:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3upt9v1l1WnxlsCZQUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0
ZDZlZWQwHhcNMjUxMDE5MTMwMTI1WhcNMjUxMDIwMTMwMTI1WjAzMTEwLwYDVQQD
Eyg3ZmIxYzkxYjNjYWYyNWY4ZGE0OGNjYzUzYjRhODcxZjczNTcxNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovgAbBar7l50k43MPtTqkqov789W
OK+mTXDGqMI/qctRPHhpb9G2Hy3aOTk9ClbVyUdbNoQEf8bBLQWgZShjoUJTzB2B
4nBTxb4PiWIC3sTm4eJZx/zfH52flPxQyRKErUYpFNk4mTB7att3mjJbwYHT6mOc
LL9x56GgLYDDU1sB2orL40rKaEQj8m8JVtx5NgO0Hgn0IQzE07xuHv+YdBeADRNJ
/BaTI0pdS/qR+IUOUjlgwWY9ldsDMuLuf/6F9agXer9RM8O3+56VouVRHXaf/DI4
kuccxhElVau1zkTudDBhylklWAk4juiLxU4XN5hX7Wcaefb67n0smryfTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+xyRs8ryX42kjMxTtKhx9zVxTyMB8GA1UdIwQY
MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt
NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli
LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5DNj3Pi
mXiYJvzvkWz1VD7tw65ZFC00ztK72G0Y2mTvaQR7SeF+lO0/UpcSKIJsRTL1JJfz
/sGwwR7aO7cYynTqiY3GluXjqUP4TlnNJXZLr17sO1LPfdpGMDqPtYzKgDY7CpHe
wA1I/K1imJkBLwRRtCcsZ323jNNiEehjDkRS5J43Q8nBNqE0tGJWDrfMvcZGOMHW
7D51xno4M7zMcQQHouAuv9mgft+adHZacZN0OTu1udsI5ZbW6avWGXZBjSkAzA9y
PcBFpAK5VEfWyhDs5HeXIQR2gVCi0Bm/D0UPuIg8wTUT0DuwUWDxBKFQdgwFQECS
A90iOK0fE0MUWg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:09 2025 by rpki-client