Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier: zOvzgttdB4e5j8/pNz+Zgs/xmQM31bHdtW0kjrUWUW4=
Subject key identifier: 04:A2:3C:1A:56:9C:54:6E:98:53:71:48:A7:3E:F8:75:A2:F4:B0:CF
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 0199CDC7C8DFF37C245BBA674E8821BFBD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number: 1706
Signing time: Fri 10 Oct 2025 11:00:46 +0000
Manifest this update: Fri 10 Oct 2025 11:00:46 +0000
Manifest next update: Sat 11 Oct 2025 11:00:46 +0000
Files and hashes: 1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: 8vurJidd1gZMiLrczOYtrtFMvsolH+Z5wVHtdkMig2Q=)
2: xfTt7QwtZDYwpOqt-xtQurA5I0c.roa (hash: ZlEBp7t71aNEAPDDQ8kVF7//cmlxkwRPGVq3nvU6tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:c7:c8:df:f3:7c:24:5b:ba:67:4e:88:21:bf:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Oct 10 11:00:46 2025 GMT
Not After : Oct 11 11:00:46 2025 GMT
Subject: CN=04a23c1a569c546e98537148a73ef875a2f4b0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:be:46:88:81:df:87:95:c6:a2:c0:81:de:
b0:a4:89:d8:96:95:dd:4a:15:33:4a:7a:f2:9d:18:
8e:02:4b:17:98:02:ee:0c:97:b5:53:37:8b:49:9e:
87:78:8f:b0:69:53:3e:e1:0a:ef:95:eb:c2:4e:f7:
ad:d5:68:23:45:d1:2f:4c:b9:92:02:ef:fe:11:2c:
52:82:cc:ea:7a:27:2a:70:84:90:81:ef:00:ff:1d:
c8:e7:e8:72:8b:8b:18:0e:63:f6:16:43:9e:c1:82:
44:14:64:94:c3:d1:0a:d4:f4:26:37:d4:04:69:99:
f7:82:69:e2:46:4f:45:70:c8:e5:7e:9d:be:33:cf:
d6:af:85:d5:e7:c2:18:b9:3b:cc:02:a4:e7:db:85:
a6:12:df:f1:29:55:44:c7:f5:94:e7:83:06:ad:b2:
a9:81:3a:46:11:ed:58:5c:bc:36:7e:84:1b:06:25:
7a:c5:8e:48:b3:27:14:1b:9e:19:e8:da:4e:7e:fe:
6b:d3:a5:c8:fd:61:b6:25:d4:a1:a5:1a:7c:73:61:
06:8b:0f:0b:c7:a5:0a:e9:00:46:fb:eb:ed:56:4f:
a2:ad:14:f8:20:dd:8a:6a:55:a3:32:6b:9a:2a:ab:
ad:7e:07:8d:63:6c:0d:6a:bd:ae:2a:d9:80:d3:84:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:3C:1A:56:9C:54:6E:98:53:71:48:A7:3E:F8:75:A2:F4:B0:CF
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bf:35:38:a2:ac:33:41:e1:f0:44:4c:94:bc:82:79:f3:45:
f4:09:e9:7b:97:1c:1a:33:56:3b:ee:63:89:b0:e3:d6:71:08:
1e:e0:55:2c:f2:52:d7:53:6c:34:47:8a:5f:3a:f2:44:2b:10:
8b:39:75:0c:00:d6:ae:3d:45:40:56:a3:53:9f:e8:87:80:60:
3b:57:7b:c0:98:10:ba:75:6c:aa:6f:7f:e4:81:42:b6:2f:76:
13:df:a4:a0:69:1a:aa:cd:93:b5:ca:4d:07:07:05:94:37:22:
4a:fc:95:33:10:31:c3:f0:aa:eb:24:a1:8f:b0:81:35:ef:ba:
7f:15:9c:93:21:38:a0:75:b0:e5:58:d7:b3:5f:83:69:f8:c8:
0f:52:d1:0f:4b:a6:28:95:60:72:0b:b5:d0:1c:fd:13:52:be:
ab:c7:69:63:b7:dc:a5:f4:78:3f:8c:c7:86:37:77:ba:7a:bc:
b0:3a:28:47:ae:26:8c:e8:a0:9c:34:6b:4b:48:91:3e:15:91:
e8:9a:73:d5:d9:0c:ca:4f:1d:c2:79:6b:76:5e:12:91:17:0a:
09:ba:49:3c:48:7c:d7:3b:13:f1:bc:ec:3c:a8:76:05:3b:10:
91:84:65:7e:db:48:3f:0b:29:6b:6d:30:11:01:af:aa:a6:90:
f1:c2:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:06:46 2025 by rpki-client