Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: sy/pXaCLp+218tlhDZ1mS8+d8dGzk0Clk6Dd56ZLEcE=
Subject key identifier: D7:6E:89:D6:9E:36:B0:0F:BF:80:E0:28:CC:3B:8D:AE:5C:47:C1:02
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 019A0D81E63F54AFD37B1D4EFB10528A1D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 078D
Signing time: Wed 22 Oct 2025 20:00:08 +0000
Manifest this update: Wed 22 Oct 2025 20:00:08 +0000
Manifest next update: Thu 23 Oct 2025 20:00:08 +0000
Files and hashes: 1: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (hash: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=)
2: DNGDsibsMhX2Jm35ON8Z46A3KTk.roa (hash: IiQeZ36+XfzMEhi+j/AEKPMJtu/iUB+BlQw1Cz0Efws=)
3: ISe6Pp3VA_kxRdnQPPWGbrrMrrw.roa (hash: jRDpIWsPHeWViUOgK2ZXMO2/p/iubNFjVCoGO2Bmfv0=)
4: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: xt3WsOY+Ov/qtVe0n8Bw5GhyBfHmdigfqsZ0edXYoaU=)
5: aEkNJUT61sGLTRPZbM8A8m6bdBA.roa (hash: Oa5uK8ZTSu+K2eTr8GSg09GYxr4c/ZbA9ZN9SGGpyMM=)
6: jjSMkguCrtN8dke8B6BypY8W9bE.roa (hash: FKDJSDKH8RGck3prDQ6XfAn1r+nBQFd0Ov1wTU/64lk=)
7: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (hash: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:81:e6:3f:54:af:d3:7b:1d:4e:fb:10:52:8a:1d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Oct 22 20:00:08 2025 GMT
Not After : Oct 23 20:00:08 2025 GMT
Subject: CN=d76e89d69e36b00fbf80e028cc3b8dae5c47c102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:de:10:c4:6d:30:a0:90:96:3d:61:11:d5:
4d:39:32:3e:50:81:7e:bb:4c:9f:fe:cb:a3:71:7c:
df:d3:5e:a9:76:53:86:2e:ed:dd:fa:3c:7e:60:0a:
6b:d6:0c:40:83:3f:6e:29:0b:37:04:21:88:7b:b2:
ad:7d:a1:52:6f:e5:a1:22:0f:1e:3e:3c:ac:0c:6b:
63:0e:55:f2:f5:32:e4:cc:5f:6c:aa:02:14:17:8d:
39:52:ed:40:cd:21:e0:0d:ed:3f:8a:23:61:9c:7b:
f5:dd:9b:38:de:3d:82:6d:16:41:82:a9:c4:71:bb:
f0:66:72:f2:f5:b0:b8:36:8d:f1:d7:14:86:a7:82:
d6:be:2b:da:4c:0d:46:50:a3:47:09:e4:e5:14:73:
be:41:30:6c:c5:ea:58:85:96:71:b4:32:40:6f:65:
33:c3:d4:ec:fd:3d:a7:b5:3a:84:ed:23:8a:60:06:
f1:a3:1e:38:6a:01:63:7b:04:ba:3b:b9:e2:35:65:
ff:b2:c9:9a:86:5c:09:92:70:3d:1f:87:60:2d:88:
45:90:2c:2a:3a:2d:eb:53:2d:f3:e7:78:1b:1e:0f:
fb:67:63:4a:d0:72:dd:e2:ca:2a:08:8e:dd:ee:81:
21:3a:0f:63:22:81:81:ed:b9:88:1a:83:bd:4d:99:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:89:D6:9E:36:B0:0F:BF:80:E0:28:CC:3B:8D:AE:5C:47:C1:02
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:18:a8:69:71:8e:69:78:e4:06:d7:6d:73:c4:2e:c3:ce:98:
e4:b1:8f:a3:ad:71:44:a7:9b:b6:ac:ba:b8:bd:f7:c8:c6:3a:
31:5f:43:f1:17:2d:89:43:04:0a:06:1c:c5:e2:62:ac:09:74:
d5:a1:c2:39:f8:3a:a2:4b:d8:36:6c:ad:27:fe:70:f4:04:c3:
16:57:f4:da:f8:7e:d5:08:d3:9a:db:8b:6f:cb:a6:8d:36:3a:
72:a5:c7:ff:4c:02:eb:7a:ac:e3:0c:c4:98:ef:79:1b:d7:4e:
8e:a8:ba:b7:df:45:9c:46:32:16:fd:65:11:fe:99:3f:37:d9:
c2:03:eb:16:65:7a:55:c6:9b:ce:8e:1b:12:fc:11:2c:15:4b:
77:18:d4:e9:ff:c1:7b:de:5a:52:63:eb:8c:09:0a:15:a7:62:
a5:80:8d:ba:8c:45:1b:e1:40:10:39:12:01:2a:c5:79:96:8a:
bb:61:67:39:5e:e2:01:46:d0:04:34:90:3d:0b:b1:08:c7:28:
7d:5a:45:af:2a:d9:1b:e3:a4:1d:3e:2d:a5:81:60:c4:3c:27:
21:bd:cd:ce:f6:c3:bd:b1:01:02:de:43:cb:44:91:e0:20:7b:
ab:56:53:d9:65:a5:53:64:4e:72:12:04:c6:95:c7:ee:51:81:
4b:5d:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:58:22 2025 by rpki-client