Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: EWhF6gUbTxk4voLp1dWRth3iseBzhttFlxEzhaRp2k8=
Subject key identifier: FF:FD:3C:D3:37:19:98:0C:6A:5A:0B:2A:38:00:1B:1E:E7:32:77:DB
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 0199FB7CCC0940986A7277EEB913ACD720E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: PZUgbtLXnRFjMfmKvyaRnIv+zSr8RkoS7/rA1VbXz4o=)
2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cc:09:40:98:6a:72:77:ee:b9:13:ac:d7:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=fffd3cd33719980c6a5a0b2a38001b1ee73277db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:49:24:67:29:fb:6e:1f:e9:08:45:46:d7:e5:
22:78:60:bb:5d:81:8a:e4:c6:fa:55:63:3d:c8:1d:
79:b2:50:e6:28:6d:27:aa:1a:f5:31:26:74:09:31:
d8:e6:c7:56:ad:5b:e0:9a:7a:63:79:35:11:b5:c2:
00:0b:cf:3b:b1:8d:9c:cd:58:59:df:5a:43:df:c4:
4e:7a:eb:53:f3:cf:57:9d:fa:60:c4:25:f6:62:69:
e5:a7:f9:66:0c:dc:d5:0d:d8:cd:c9:fa:eb:27:cd:
51:d2:ed:37:74:a6:e7:c5:9c:3d:60:59:17:be:18:
94:3e:3d:c5:b4:dc:aa:50:35:32:27:15:7b:7b:e0:
31:df:b8:54:cf:82:cc:d3:6d:1a:46:fb:42:5d:8a:
17:96:cd:c8:86:ef:3c:36:63:1a:84:ae:24:8b:85:
dd:f1:93:76:84:8f:44:ed:1c:d4:55:77:99:84:d8:
29:9d:79:85:06:95:2b:f6:16:df:bb:f7:22:ac:94:
9b:bd:5c:6f:d8:69:55:96:88:7e:0b:6a:6d:a9:8a:
85:50:5c:03:84:26:80:90:8d:3e:9c:de:ae:fd:7d:
6c:0b:83:c1:29:c6:ef:e4:da:20:10:31:ae:d2:ee:
a3:64:95:5d:45:b5:29:46:de:8b:cf:0b:aa:45:2e:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:3C:D3:37:19:98:0C:6A:5A:0B:2A:38:00:1B:1E:E7:32:77:DB
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b2:bc:3c:f2:26:d8:c1:4e:f4:d1:94:42:dc:07:de:84:bc:
2a:dd:98:24:e2:73:13:f3:d3:84:35:95:e6:7c:60:2f:db:4b:
22:2f:da:26:ab:19:33:7f:16:12:66:5e:87:c8:cd:bd:cb:64:
a5:52:cf:a2:95:4b:82:9f:80:6e:4a:16:2d:19:4e:05:7d:1c:
ef:6f:ab:08:05:7f:c0:7b:e0:bd:f2:50:ea:41:78:87:ca:24:
5c:9c:f3:f3:d5:76:23:a1:19:bf:2f:6b:32:d2:b0:18:e1:d1:
59:b4:8a:90:10:e5:93:6c:09:bf:be:53:60:7f:13:54:15:1c:
7b:a3:47:0f:d0:23:be:e5:74:41:b4:0c:ff:39:03:1b:c1:ee:
a1:2e:1e:ad:f3:b8:e7:15:00:04:bc:03:3f:07:2f:d4:fb:e3:
8d:70:4f:cb:b2:7a:e5:d9:e6:47:c4:fc:89:f7:ad:41:fe:70:
5a:e1:bb:83:ac:eb:eb:20:38:50:5f:f5:1a:54:8b:1a:1e:4d:
bf:3c:c0:78:e2:e1:9a:ea:2e:50:8f:f0:cc:4f:5b:c5:bc:6e:
21:88:86:6e:59:65:89:76:c3:17:52:d6:6c:4d:91:58:56:5b:
fb:32:7d:69:61:3c:5a:7b:98:69:d3:d9:d3:66:79:61:0c:6c:
52:07:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:51 2025 by rpki-client