Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: k/mD+dilkZNyxPeTxf8i4bkJQBxwA7e+0JDZd/xAEb8=
Subject key identifier: 58:59:4C:E5:A1:FB:2E:61:F0:E3:7F:0C:1E:DE:C0:BA:15:03:68:38
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 019A70A5088E138F4F3430C3DDC605D6260C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 0391
Signing time: Tue 11 Nov 2025 02:00:55 +0000
Manifest this update: Tue 11 Nov 2025 02:00:55 +0000
Manifest next update: Wed 12 Nov 2025 02:00:55 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: O1PcjdoAz4JFkAlNBmCjfepZ5vGK7C5BYBdAZPD4+Gc=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:08:8e:13:8f:4f:34:30:c3:dd:c6:05:d6:26:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Nov 11 02:00:55 2025 GMT
Not After : Nov 12 02:00:55 2025 GMT
Subject: CN=58594ce5a1fb2e61f0e37f0c1edec0ba15036838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:e4:cf:ed:a2:56:72:15:b0:5e:3c:46:f8:
48:93:54:ee:d5:c7:8a:8b:ca:1e:1f:41:20:96:67:
47:6d:4e:21:ce:20:cf:d6:4b:59:1b:77:d2:b1:13:
46:07:aa:a0:13:b4:b4:7c:25:c5:71:6a:2f:15:78:
69:4e:e6:92:29:c9:f0:e5:bb:3b:0f:b9:4a:e8:fe:
d5:98:0d:28:80:a4:ea:7c:85:23:d0:4e:1f:7c:8a:
6d:19:73:9d:6d:7e:43:32:b6:33:90:30:8c:54:87:
f9:0f:ca:c3:ed:d3:ad:6d:99:01:1a:a9:e4:d3:c4:
96:01:48:b4:d6:73:28:29:0c:c5:6e:9c:39:26:2b:
88:55:ed:72:9f:77:8d:14:ab:6f:ec:30:f5:0d:97:
e2:00:fa:c0:a1:3d:79:48:c1:3e:3c:10:29:f8:47:
ae:2c:31:31:c9:fc:a5:ed:78:92:55:80:e0:90:ea:
01:7a:52:6c:31:ed:df:23:6f:d6:e4:1c:05:d1:b9:
5b:6a:c6:ac:07:fa:7b:d0:0b:ff:c7:ac:7a:0b:f8:
57:db:5f:f5:a0:9a:c6:80:8a:a7:6a:34:06:49:1a:
41:f1:e9:cd:6e:34:9f:5d:d6:66:f1:a8:a1:e2:1d:
ed:17:f5:05:01:97:3c:9f:67:47:84:a8:1c:79:3f:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:4C:E5:A1:FB:2E:61:F0:E3:7F:0C:1E:DE:C0:BA:15:03:68:38
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2d:e0:cc:21:f6:15:e4:f0:fc:28:f1:e1:a6:02:f9:04:87:
18:e5:47:6c:e4:c7:d6:36:f0:73:ff:0c:3d:0b:a0:37:ea:1d:
b4:30:17:8c:bb:58:20:55:8a:9c:ec:32:f5:26:68:9c:56:36:
2b:31:8a:ee:23:7c:ae:85:b1:f2:bf:5c:f5:93:e6:73:1b:0f:
c0:65:6a:a9:3f:18:4f:4c:f9:fb:3d:ad:f1:01:9b:2d:bd:c9:
ff:50:d1:ed:94:5f:4f:e0:c0:5e:d0:ff:47:dd:46:29:d8:a8:
69:da:20:84:db:5c:41:c6:ac:84:78:bc:84:b3:9d:e0:65:ae:
33:25:32:bf:8d:5e:77:f2:3e:94:45:f5:16:1f:55:63:1b:a7:
7b:9e:ac:80:b9:c9:7d:2f:ce:ff:53:46:38:5f:9f:5d:39:57:
63:da:a5:cc:39:60:e9:5e:03:60:0d:0e:f8:1d:66:7a:82:a5:
32:95:eb:53:1f:68:82:46:a1:d7:f2:82:37:37:e6:71:78:fd:
47:4c:9b:dc:1c:02:14:b3:82:ab:33:40:c4:df:36:8a:06:f7:
3e:b6:d7:9a:25:cb:50:3e:5f:54:d3:9b:0f:71:21:e7:b8:32:
31:ab:5c:c1:2a:8c:8e:e2:71:04:9c:47:ea:87:21:99:55:1f:
91:7b:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:17 2025 by rpki-client