Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
File: LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json)
Hash identifier: XagTSH1DOTsFLW6xpnaTjiMIFYw+qDMV6JmvIuaJDO4=
Subject key identifier: 1E:FE:BD:CE:68:ED:DD:9B:C5:72:79:6D:21:2D:35:68:E9:EA:13:52
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 019A71B87050007029A211430838C51ADA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
Manifest number: 1232
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: IQBzmQUy3opifqg3r65IRtCdqXayQp50x64py1zXZ2I=)
2: cLEFI3xQS9CocTbeHuHrBA7ho04.roa (hash: Oc8zbYVVumhuzpzB+yVW8PsOP/g+K8DFdyeD3cFkIFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:70:50:00:70:29:a2:11:43:08:38:c5:1a:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=1efebdce68eddd9bc572796d212d3568e9ea1352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:e6:05:29:bd:c5:50:f7:54:c2:64:02:fd:
14:00:08:2e:fc:a0:72:01:01:6f:eb:3d:51:b6:49:
48:8b:06:03:68:03:3d:21:8f:da:00:26:ca:02:95:
e2:da:9a:30:b1:2c:8f:58:71:46:8e:6b:90:d8:56:
f6:b1:09:68:a3:fd:e2:a4:92:2b:56:39:56:df:48:
11:e2:8e:c3:68:0f:b2:0a:0e:2d:45:46:74:e0:e2:
82:fb:b9:f9:66:76:ec:3b:6a:df:64:38:38:0e:6c:
b8:ec:c9:3f:2d:6e:3f:08:97:cb:4a:0f:47:2f:92:
d1:38:33:3d:5e:01:53:f8:13:cb:22:9a:11:5b:dc:
3c:c1:80:29:73:37:dc:77:b0:07:22:0b:9c:c1:df:
ae:37:1f:4b:81:a5:41:28:79:0c:b0:12:fd:fc:f0:
8f:ea:b2:5d:7e:78:8d:92:f1:5f:16:30:77:a7:75:
c0:bc:aa:04:68:6d:41:30:05:c0:de:b3:34:ec:8a:
f6:e0:10:61:b2:af:a1:df:6c:a8:00:01:f3:68:62:
51:10:a4:41:74:ca:02:3c:31:ce:4b:34:b8:5b:85:
b6:8b:7c:5d:c8:e4:76:f5:c7:87:57:1a:b6:1e:89:
a8:a6:b9:9d:dc:6f:85:ad:72:83:27:a4:e5:e9:43:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FE:BD:CE:68:ED:DD:9B:C5:72:79:6D:21:2D:35:68:E9:EA:13:52
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2c:35:29:90:0c:12:83:d2:c6:88:3a:ed:a5:93:43:60:21:
c0:b3:e3:63:a8:92:12:59:c4:99:7c:5a:cb:6c:52:6d:bf:77:
01:4d:59:a1:cc:51:8c:e2:9c:6d:50:38:a3:65:e4:ae:90:e4:
23:4a:48:71:e2:e2:0e:3b:ea:ba:05:8a:32:e3:fb:47:42:27:
e5:d1:88:62:98:ae:6b:92:57:6f:7a:29:bd:69:23:2c:dd:8c:
60:81:3f:4e:bc:67:fd:3a:4d:2a:14:84:f9:9d:f3:89:25:3f:
fc:41:ba:01:7e:d1:b1:1f:61:8e:3b:f3:96:dd:4f:81:2d:ff:
1e:3d:f4:7e:01:3f:92:cd:18:c3:27:f1:bd:0c:b8:d7:b3:54:
15:ba:bd:f1:04:f9:20:3b:1a:11:79:c1:1b:55:72:60:ab:d9:
3c:2e:8e:49:6a:2e:c6:f2:28:28:d4:23:b9:fb:31:99:12:96:
f3:6b:22:00:de:74:4e:07:fe:1d:f3:c5:45:b7:ab:23:72:6c:
67:66:6a:5a:4b:8b:43:c2:fa:e8:61:d8:43:5b:64:2c:6d:7b:
cf:d4:a6:2e:d7:eb:b2:8b:9d:d2:9b:43:cb:e3:2a:76:dc:1e:
54:ed:94:ce:22:48:e3:a7:2d:71:0a:fe:43:03:5b:b0:45:6f:
da:22:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:16 2025 by rpki-client