Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: XCYAYHNVSohKCGa71p9DISEGUg2miagQmFNqa/aha3I=
Subject key identifier: F7:CC:0B:43:10:1D:98:E0:2A:1D:4C:BF:03:C5:B7:C8:56:3A:06:D3
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 019A1D2CA923B48C9EA665032FD6983A4BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 11E6
Signing time: Sat 25 Oct 2025 21:00:57 +0000
Manifest this update: Sat 25 Oct 2025 21:00:57 +0000
Manifest next update: Sun 26 Oct 2025 21:00:57 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: Ifj/vQ9zoc0Zk8tqHUZt1zHwR5l7uFRxN2QAsd0Qu00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:a9:23:b4:8c:9e:a6:65:03:2f:d6:98:3a:4b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Oct 25 21:00:57 2025 GMT
Not After : Oct 26 21:00:57 2025 GMT
Subject: CN=f7cc0b43101d98e02a1d4cbf03c5b7c8563a06d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:1b:3c:ef:c0:5c:8e:07:09:d1:56:86:75:
31:1e:09:f5:d5:79:41:e9:9b:61:c0:54:d4:ca:f4:
c2:1e:dd:1c:63:a9:87:c8:5c:f3:1f:23:67:88:c3:
22:37:3c:2f:bc:a0:c8:cf:a4:bf:3a:9f:f3:54:cd:
ca:10:6c:46:e7:9d:cf:8e:93:6d:7e:a5:83:61:e1:
3c:cd:31:ab:8d:e2:14:14:d5:f5:07:46:e2:61:3d:
a7:3b:70:cd:9e:0d:97:97:29:ad:1e:9e:00:31:3b:
50:79:d2:8f:79:d7:f5:2b:a9:66:b7:15:e5:fc:42:
50:d8:7c:44:77:b0:fd:80:7d:d1:21:e9:89:fd:2c:
74:1a:b4:e0:35:49:80:21:1d:1f:83:92:0d:51:f6:
0f:5d:75:8c:bc:07:cf:e6:37:e6:03:19:cb:42:dc:
05:30:85:c6:82:ee:d9:5a:89:b2:00:b0:13:a7:20:
4d:0c:a6:b6:d7:53:6f:d0:05:a9:6f:7d:ed:94:0d:
be:25:cf:ad:bc:bd:81:1d:ae:e0:e5:f3:e7:c9:4c:
d7:92:bb:db:dc:ec:21:82:61:f9:f1:eb:d3:a2:91:
a6:be:37:ad:69:6f:e0:3a:9d:40:bb:61:1d:b1:1c:
83:99:b1:02:26:d5:9f:85:b2:16:98:08:62:5e:b8:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:0B:43:10:1D:98:E0:2A:1D:4C:BF:03:C5:B7:C8:56:3A:06:D3
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d3:77:76:d2:16:09:89:30:d0:0f:51:41:5d:3d:3a:b5:0c:
88:a6:2c:cc:17:1f:5c:1a:1d:f7:d1:9b:70:8b:a3:81:6b:6c:
e8:fd:d5:51:1a:ea:2a:37:ba:72:b3:c4:9f:3e:4c:d6:ca:19:
94:7f:75:b5:19:81:29:89:18:32:a2:5b:80:9e:60:70:96:d7:
93:5c:f5:8a:50:fb:46:22:db:31:ef:c2:3f:46:d8:44:4c:af:
fd:0f:8e:81:4b:b0:e4:77:7c:74:4a:f9:14:0d:0b:18:8b:a2:
43:c1:7e:a2:7a:be:08:10:08:5b:90:29:66:86:e9:cc:61:28:
96:ff:d2:8a:12:bd:0f:78:e5:40:88:db:72:77:de:6a:19:c8:
ce:ff:53:5f:bc:3d:8d:3b:c5:75:e1:18:75:83:51:c7:5a:59:
ba:e0:d7:52:f8:32:1b:2e:6c:57:f0:85:0a:13:bb:4b:02:b2:
36:27:06:1b:8d:d6:4d:d4:4d:d9:2c:c6:82:a8:53:9a:8b:fe:
e3:14:fd:7d:97:7a:1a:69:97:14:f9:b9:b4:db:ae:18:ca:af:
b8:c0:b2:f0:ce:b6:f7:24:fc:19:06:b6:8e:c6:a8:1e:e0:d4:
66:47:db:25:aa:cf:95:64:e6:9e:38:59:42:8d:6e:70:d2:1a:
48:0d:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:52:47 2025 by rpki-client