Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json)
Hash identifier: KtDtZlQkQyxvOrLLVZSPAEEa0PyER0XQd7iqouK/hwc=
Subject key identifier: E5:96:A6:54:A6:C7:09:0C:19:A6:5A:2D:DF:ED:52:D9:44:48:04:89
Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa
Certificate serial: 019A72CA3E7D63880AE6B466D48E9975C209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
Manifest number: 0945
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: 3nW2OfmIPlrh/ozpUi2twUQ5UkkmAKitsh2/dBCt8Io=)
2: cj0dff8EdsGG8DaopETeofzcldw.roa (hash: 06o/5+ZmJQt03Z2LLNo5k4a7U1bSw5gDTRAuW+tjkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3e:7d:63:88:0a:e6:b4:66:d4:8e:99:75:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=e596a654a6c7090c19a65a2ddfed52d944480489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:92:06:0b:98:2a:2b:fb:96:57:ab:c9:32:
1d:8a:6c:29:00:ea:41:33:55:5d:45:07:d4:c5:2e:
62:29:ab:7b:11:1a:01:8c:d8:07:cf:98:59:70:77:
28:b8:f7:a1:c7:3a:5e:b7:0b:f4:02:c1:7a:2f:ca:
a6:6a:88:8f:7b:8f:58:11:1c:de:0b:a3:a2:e8:4c:
62:f0:3e:e6:41:e9:f6:c3:5f:f5:e0:1a:41:b4:af:
c6:c5:f0:ab:87:db:1a:71:95:23:fd:23:19:83:a3:
3e:6b:d7:8c:da:6e:7c:ae:7b:d7:8c:25:42:57:98:
cb:46:18:40:97:92:0f:67:03:3a:62:23:08:c9:b5:
c6:0d:a4:d1:ae:29:f9:18:02:5d:a2:ad:d0:ed:38:
0e:60:1d:a0:a6:84:23:95:96:b8:9d:2b:26:e2:e0:
b4:0c:94:b3:b3:ef:1d:d8:2c:e6:1b:d8:bb:34:3e:
76:ff:b5:72:dd:00:45:54:d2:9b:84:f5:b3:b6:02:
0c:86:1e:d5:bf:29:c1:bc:c8:52:c4:ee:1b:2b:00:
5e:61:35:22:d0:ec:4e:31:20:49:05:58:d4:3c:c9:
e9:a0:ef:cf:74:01:81:7d:5a:60:3d:50:1a:05:4a:
25:c9:7d:65:e5:ab:0b:8a:55:3c:23:f9:9c:24:45:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:96:A6:54:A6:C7:09:0C:19:A6:5A:2D:DF:ED:52:D9:44:48:04:89
X509v3 Authority Key Identifier:
keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:10:08:9f:e6:7a:be:39:4a:81:3f:30:ab:38:86:d4:61:3b:
f5:f3:85:6e:49:0d:13:61:b2:d2:00:49:e1:1f:f3:dc:65:a3:
62:89:fb:0e:ba:d8:cf:5b:69:f4:ba:f8:fa:f7:23:41:62:c0:
ae:0b:8d:cd:11:f8:49:75:fc:39:05:e4:55:02:45:16:b1:b4:
d7:dc:bf:45:3b:5a:74:c3:2a:48:91:2e:70:d9:d7:97:32:79:
05:f7:ac:3d:71:52:a6:71:4a:4c:d0:0c:b6:77:51:58:f2:74:
2e:59:e0:33:26:3f:f8:f3:9e:27:17:b2:04:03:10:5d:70:01:
93:42:6a:76:e9:82:ea:de:eb:c2:f9:5b:77:dd:3a:82:df:8d:
6c:de:bb:82:ad:ed:7b:67:c7:00:ce:a6:7b:a1:bb:06:ce:0a:
34:8d:ef:71:54:b0:93:49:52:76:38:0f:7e:af:80:cc:da:26:
d5:8b:f5:c6:08:4a:be:6d:4f:03:1e:8a:c6:f5:7c:d1:c1:59:
4e:63:50:06:a7:13:27:94:ef:1f:df:56:3c:d5:51:cd:b3:b0:
2b:dc:af:13:aa:fc:60:9e:f2:c6:07:07:95:16:2f:f1:6e:32:
ed:a9:81:a4:c0:50:a0:03:b6:ca:dc:bd:01:94:8f:7e:48:96:
0e:f6:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:18 2025 by rpki-client