Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File: LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier: IQOs33f1CtFPbmk9U0yP4NSnx5RqzSs5XS0VYgw4IjQ=
Subject key identifier: 60:EA:96:D9:7C:A7:02:9B:B5:FB:C1:6D:02:66:31:6F:5C:62:77:9B
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 0199FFC81A8B5E11C581750B8D3C4B5DFEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number: 05C5
Signing time: Mon 20 Oct 2025 04:02:08 +0000
Manifest this update: Mon 20 Oct 2025 04:02:08 +0000
Manifest next update: Tue 21 Oct 2025 04:02:08 +0000
Files and hashes: 1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: ZGA53eF9HycIdleum/WY1l9yuSDu2wpioph5Xf8qU20=)
2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:1a:8b:5e:11:c5:81:75:0b:8d:3c:4b:5d:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Oct 20 04:02:08 2025 GMT
Not After : Oct 21 04:02:08 2025 GMT
Subject: CN=60ea96d97ca7029bb5fbc16d0266316f5c62779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:bc:e9:40:d6:77:3f:b9:81:46:ab:f9:6b:
d2:5f:ec:1d:e8:84:4e:74:d0:34:6c:7c:e9:84:2e:
bc:67:42:99:a7:19:88:10:26:cd:7a:e3:ad:49:af:
1e:3e:d5:c5:b8:a0:dc:2b:8d:60:d8:f3:5c:bb:fe:
b5:d8:17:20:54:6f:21:03:92:f0:d7:d0:f2:45:a3:
98:e8:f7:44:23:63:fe:3c:b8:d2:ae:07:57:fe:25:
8a:9d:ea:c2:02:f2:12:44:1e:02:4e:58:3a:0a:c4:
f2:4b:c9:94:18:fa:62:5c:cc:10:90:50:f5:2c:9e:
9f:61:c7:32:ce:56:41:3e:e3:90:ab:cd:e6:e2:12:
5c:08:f1:6d:e6:fd:de:23:22:87:7e:6a:7a:15:a9:
f3:50:00:f4:9f:c2:77:e8:48:40:1e:d0:d3:ec:f8:
8b:47:0f:da:eb:af:33:4f:95:c1:2e:1e:ed:31:1b:
b7:a1:6c:de:81:95:1e:f3:53:37:ec:74:53:c3:27:
c0:e2:a1:c7:9f:c7:27:3d:c4:01:b3:e7:48:62:b0:
d8:14:09:2b:a7:ef:2f:8e:58:e6:62:9a:14:9f:8b:
2d:c8:43:f9:11:8a:29:8c:b5:51:46:98:1c:74:0d:
b0:8b:9f:a2:65:1b:77:69:c9:a8:41:91:0c:d1:91:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:96:D9:7C:A7:02:9B:B5:FB:C1:6D:02:66:31:6F:5C:62:77:9B
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f1:2c:da:8b:31:f9:5a:53:ca:ef:c7:f8:26:69:bc:a2:a1:
3a:de:dd:7e:0f:6a:0f:a0:cc:ff:10:54:8f:54:41:26:7e:1f:
e6:d5:39:b4:86:b0:01:5b:d2:18:0b:49:f3:35:cd:79:d9:88:
d6:7c:b0:a3:a4:80:51:22:85:2d:77:97:19:c3:a9:19:84:cf:
53:69:09:27:67:58:6e:1d:b9:8f:c9:3a:79:9c:49:61:68:e4:
ec:31:3e:be:ce:b0:35:14:7f:87:87:ce:39:d1:51:75:05:40:
93:fc:0c:75:ad:90:c1:b9:16:f0:f5:9a:44:84:a2:05:0a:18:
0a:59:67:4b:5a:5c:e9:08:b7:5b:e5:9c:d5:c5:c7:d8:f7:63:
a0:a5:97:ad:74:d0:f0:c9:7b:45:eb:48:96:35:c4:3a:b8:5e:
1e:7b:c0:0f:c7:88:d4:e3:29:c6:49:9b:bb:1a:a2:99:3c:32:
7a:8f:30:3a:d6:78:84:87:ec:b6:6f:b1:d8:dc:1e:c0:28:cb:
c9:0a:c1:8d:67:3e:fc:75:63:5a:83:b6:a4:0f:7b:54:8b:7f:
6c:df:8e:c9:1d:8f:fa:f9:a1:b9:a1:d3:e8:22:a9:9e:7e:99:
fd:16:c9:a9:ac:1a:15:d6:03:d8:fa:eb:01:9b:4d:93:5f:19:
6d:10:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:34 2025 by rpki-client