Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier: mJ5889U4yPW6KBRt0JB7raPS14PaTCdktjT/L223e2w=
Subject key identifier: 3E:F4:F8:8B:79:A0:3C:12:5B:16:A2:44:2B:FE:F7:90:56:11:21:38
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 0199FCC6C56DEA54C92BC0AC5BA13E933ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number: 14F5
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: luBEYFFLb4DGmjpcS/VjuJEAEwg7lI8HMrvgREmQB8w=)
2: XuUIg00P_oELwRIdekPlKjcVl2M.roa (hash: D5bbltVcpYBKzhGcnj29+Y83dlfa0xkosi+p8XbJoUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c5:6d:ea:54:c9:2b:c0:ac:5b:a1:3e:93:3a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=3ef4f88b79a03c125b16a2442bfef79056112138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:79:42:34:4b:05:11:79:ba:12:af:66:ab:
65:f5:85:84:84:e6:d2:4e:a0:8e:1d:6d:e6:e5:e6:
3c:25:9b:02:cd:f3:98:b6:b7:a7:85:97:b7:0c:7d:
8e:99:df:04:00:d3:b5:8f:39:65:ae:fc:75:10:41:
54:bd:ed:29:25:02:04:78:d6:d2:c0:ee:b1:bb:e9:
81:de:e5:ab:ec:cf:ce:ac:52:c1:8f:e6:99:37:5d:
77:81:e4:fc:b5:77:ad:cb:d1:a2:b6:cd:23:f5:6a:
d7:24:c6:3e:c0:a8:f5:45:80:f5:1d:32:31:f4:99:
0f:97:18:5e:01:7c:41:a7:81:17:21:bf:b9:06:6d:
a6:29:89:ec:3e:3d:f8:29:e1:1a:39:cd:af:ce:bb:
81:3e:f8:4a:15:37:25:e6:d4:3d:79:0d:fb:ca:30:
51:f0:7a:f9:26:1a:5c:05:6d:42:f2:1e:48:6c:b3:
ca:15:d3:1d:9d:9b:9a:80:f1:7c:11:11:3d:3f:02:
62:02:7a:31:9b:6e:f4:db:0d:96:66:af:e1:b7:c1:
e7:4b:3b:df:4a:71:bc:9a:d2:ba:92:b2:25:18:39:
c3:29:62:ef:60:2a:6b:d2:8e:0b:70:3a:5c:3a:c6:
16:6f:58:55:c5:54:b2:33:73:10:ae:3c:29:dc:1f:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:F8:8B:79:A0:3C:12:5B:16:A2:44:2B:FE:F7:90:56:11:21:38
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:93:da:3c:e8:64:97:e8:90:ec:b0:b2:42:e4:9e:48:fd:49:
4b:4d:e7:bd:7f:e4:c3:a1:10:55:cd:27:51:fc:dc:46:e9:e9:
e6:9d:f9:58:e4:02:49:09:b8:c2:da:fc:99:60:37:5b:be:b9:
01:58:0a:96:65:cc:11:c9:fd:b9:ef:2b:8b:ed:32:2a:80:ac:
f5:59:dc:a9:74:f9:72:c1:41:f5:65:06:f0:65:d0:21:14:27:
5f:bf:96:f1:ec:42:bc:d4:07:54:ae:ab:5d:d6:ee:88:e4:c5:
80:02:5d:09:e9:6e:f0:79:dc:f0:8f:74:58:f7:5e:cc:24:7f:
d9:25:03:93:28:94:c6:83:c5:fd:f1:41:1f:52:38:36:07:a1:
25:98:9f:40:a1:bd:e2:00:1c:7f:37:e7:67:1c:bc:8a:78:bc:
5f:10:0e:d2:68:81:66:ce:17:39:92:85:a5:19:6f:c8:f4:af:
c8:75:61:39:95:97:56:69:65:7f:6f:1a:26:24:2e:91:03:e3:
4b:f6:00:5c:d0:df:b7:83:de:9d:6b:d2:60:05:77:f0:98:42:
00:3e:f0:f8:bc:ed:0b:16:48:25:93:cd:31:82:e7:cb:37:1a:
7e:08:24:1b:2b:91:a4:e8:fb:14:42:85:5e:a0:df:c7:09:58:
67:b8:5f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:10 2025 by rpki-client