Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier: GVUqklcoxXXeDhTb4lT5KlNdcrxCsjL3rG+TckKuYNU=
Subject key identifier: 85:B9:7B:4C:E5:63:F0:4F:56:D1:EA:D8:4B:A9:C6:B0:67:32:A7:EF
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 019A73013DAD7A96FFBE3319F52B341CB84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number: 13B3
Signing time: Tue 11 Nov 2025 13:00:52 +0000
Manifest this update: Tue 11 Nov 2025 13:00:52 +0000
Manifest next update: Wed 12 Nov 2025 13:00:52 +0000
Files and hashes: 1: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: uV+WnhHIelPvuSm+kef+bBOudwnxqhHso43EaooQekM=)
2: f7aLiKVHyM1OWvHdDt9KjBrOjRc.roa (hash: gXMbVjSWssRl5pUSyy0mfRaHyNZzTR/Z01nmT1EQCvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:3d:ad:7a:96:ff:be:33:19:f5:2b:34:1c:b8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: Nov 11 13:00:52 2025 GMT
Not After : Nov 12 13:00:52 2025 GMT
Subject: CN=85b97b4ce563f04f56d1ead84ba9c6b06732a7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:6e:6b:2e:1b:99:b0:e9:a3:ba:cc:bf:65:
d3:83:21:5a:8d:52:12:72:66:ab:c5:20:5e:77:db:
3a:bd:21:a0:71:1a:b6:e2:be:bd:4d:d4:b9:c3:ff:
a6:18:57:43:22:89:bb:d9:6c:1e:cf:c5:2e:8b:88:
b8:a9:46:ea:de:35:fb:f3:9d:a9:8d:5c:97:1f:cc:
a9:71:b2:56:0e:f7:68:c1:fa:68:1b:61:ed:ee:85:
49:3b:57:3f:61:3e:4a:76:ae:95:c7:e2:e4:00:dd:
49:00:7b:2d:5e:cd:9a:1a:21:c1:1d:fe:09:9a:23:
d6:59:25:6e:f8:a2:94:40:48:92:a2:86:bb:75:1c:
07:c5:7d:fd:89:2e:61:41:4a:36:61:8c:c2:dd:32:
9c:3c:ed:e1:b0:a3:50:65:60:66:eb:c5:19:1f:98:
ba:b0:3a:4f:fe:c3:5f:af:3a:26:8f:dc:04:27:fe:
dd:91:f9:6a:16:d5:28:54:ee:27:70:fb:7c:42:d1:
25:bc:7b:64:8d:84:10:c8:e3:30:b4:9b:7e:10:f2:
66:42:0b:5b:16:16:0c:8b:70:79:1a:3e:3e:05:40:
3d:bf:95:d8:9b:2d:8e:cc:49:71:36:0b:cc:e6:4d:
9c:98:2b:4b:bc:03:d5:bf:69:ea:dd:7e:fb:3b:34:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:7B:4C:E5:63:F0:4F:56:D1:EA:D8:4B:A9:C6:B0:67:32:A7:EF
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:13:8f:eb:24:bd:b1:35:d0:eb:ef:c3:d3:36:7a:84:1c:f7:
68:37:da:20:1e:9e:86:b6:6c:e1:3a:52:d8:ec:a7:48:9d:0e:
bd:57:22:ec:5c:ad:98:1c:a5:3a:1d:af:f5:63:2c:77:e6:6d:
4a:6b:ea:69:ca:c0:86:33:6e:f2:56:c7:ac:23:a7:a5:76:dd:
f4:6c:40:f2:29:b0:e9:ea:b3:be:e5:86:e3:f4:9f:8a:a6:bc:
2a:09:c2:02:67:7e:bd:a4:3b:fb:80:4d:ac:80:f9:0c:55:82:
e8:43:ec:ae:41:c8:52:c5:c9:3f:05:d0:f5:9d:1e:ae:c6:0f:
29:f9:c1:76:76:7c:20:c1:47:d8:74:ed:8d:24:bc:1e:83:ba:
48:19:16:ce:77:1f:9c:4f:55:86:a1:ee:09:f1:ff:9c:17:86:
93:72:cf:12:fa:5e:02:0a:13:47:fd:19:e6:cc:59:3e:08:9b:
98:1a:96:7b:4f:9f:fb:56:ab:84:24:a8:42:58:09:af:a7:79:
45:32:e4:88:ad:60:f1:aa:b0:84:26:e2:6d:55:dc:70:7f:38:
47:c2:77:54:9c:50:5c:fc:7e:d3:d6:09:fa:1d:86:7d:41:95:
1f:9e:1e:bc:2b:d7:f0:6d:e6:9a:17:6e:16:50:f0:a2:03:fc:
4d:d5:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:18 2025 by rpki-client