Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: kciZQsM0jNhHAQk18z4dhIQmTQUO2ZpSTBcQFu1+RmQ=
Subject key identifier: 05:62:58:A5:EF:C3:63:D2:B2:D5:46:64:0B:41:AE:0C:92:6E:05:D7
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 0198D4045040DBE8B15098B6997C2B5C283B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 15DA
Signing time: Fri 22 Aug 2025 23:01:48 +0000
Manifest this update: Fri 22 Aug 2025 23:01:48 +0000
Manifest next update: Sat 23 Aug 2025 23:01:48 +0000
Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: VaQ0MLndM8gT7AfkzqLGg1egbHwQokpXiiwTuecWUn4=)
2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:50:40:db:e8:b1:50:98:b6:99:7c:2b:5c:28:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Aug 22 23:01:48 2025 GMT
Not After : Aug 23 23:01:48 2025 GMT
Subject: CN=056258a5efc363d2b2d546640b41ae0c926e05d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:5d:40:e7:d4:14:f1:71:49:8d:81:7d:4d:
3a:ec:47:9b:73:65:88:82:f6:36:69:22:51:2f:c8:
fa:7b:78:bc:ee:37:58:21:4c:ea:b5:a9:03:d3:80:
19:5a:fb:16:18:f1:7e:1d:c3:11:d8:0e:82:90:5a:
5b:23:e9:f9:a1:0d:31:4b:9f:77:3a:36:96:d8:75:
eb:4c:70:28:a6:3b:d7:75:ad:25:a6:1f:7b:56:08:
d3:52:7f:32:c1:20:5e:5f:17:3f:28:7f:66:30:82:
23:03:ea:c1:61:34:6d:2e:07:8f:33:ec:9e:e4:7e:
ec:7f:44:bb:47:c8:0d:67:21:35:b8:63:c4:1f:84:
6a:e1:f7:f7:ce:23:95:7b:6c:fc:d5:f9:04:8d:1e:
4c:51:9d:85:90:6b:50:c0:93:fe:09:37:45:1a:70:
65:b0:02:c9:db:18:73:14:ee:74:8f:7a:72:11:9c:
eb:89:dd:41:c4:96:1c:73:66:fa:7e:40:ca:5c:bc:
d8:42:a0:88:da:75:e8:5b:e5:7a:32:d9:11:08:49:
82:7a:28:75:2c:6b:05:8d:c2:45:70:2a:c7:1e:01:
ec:e1:c4:67:c5:f8:00:5f:e4:81:f1:4d:46:27:b0:
e0:07:da:1a:e7:dc:6a:dc:2f:db:ad:f3:41:c4:29:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:58:A5:EF:C3:63:D2:B2:D5:46:64:0B:41:AE:0C:92:6E:05:D7
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e1:4f:bf:d7:cd:e2:ce:9d:02:df:56:e8:5a:a3:87:86:40:
7f:c9:e6:61:26:5a:7d:f2:d7:74:b7:4f:4f:87:f6:e9:cd:af:
b8:40:b9:3f:6b:63:3b:fb:c4:40:77:e8:0c:67:ff:5c:d3:15:
74:74:ab:a5:3c:e8:c5:9c:dc:02:b4:74:a0:45:8e:65:06:09:
89:2e:35:d6:a6:c4:cc:cf:76:4a:0a:18:4d:c3:cf:f1:92:61:
71:20:77:a9:5a:db:8a:f8:95:ef:cf:46:54:26:76:24:0d:5b:
22:a7:82:48:f8:92:75:29:d5:a6:9c:fb:37:9c:10:69:d1:31:
74:64:f5:4a:ac:64:29:ee:51:01:e0:01:4c:cb:c5:cd:72:10:
b8:5e:84:ae:6b:8c:65:55:73:df:4f:8a:e0:3d:ab:1c:5c:9e:
d7:d4:8e:39:69:87:b6:9e:dc:8d:e1:b0:b3:97:f1:11:89:3e:
12:27:de:e3:3e:6f:8b:06:2b:37:94:59:f9:ab:0f:ad:6c:73:
77:02:ec:d4:bd:28:87:56:67:a2:a2:40:90:38:e8:9d:62:9c:
8a:89:ed:78:92:9e:bc:e3:00:66:5c:83:d8:ae:87:7b:a9:09:
7f:b6:c8:8b:c8:7d:ae:ac:35:59:4b:a8:8d:70:de:b0:60:87:
71:e7:06:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:55 2025 by rpki-client