Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
File: LG88xdeFlC5gSAk8dDOXOusV_iI.mft (raw, json)
Hash identifier: /kBrrod36pVQ0v+dy1Eowrd23FEGks5bqJ4ydjivMuM=
Subject key identifier: 53:EF:4E:A8:EC:30:B8:60:72:76:02:62:0A:E4:90:3E:B7:B4:A1:47
Authority key identifier: 2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
Certificate issuer: /CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Certificate serial: 019A2855C3A695072ED2C3CE390A0A70279A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 01:01:40 +0000
Manifest this update: Tue 28 Oct 2025 01:01:40 +0000
Manifest next update: Wed 29 Oct 2025 01:01:40 +0000
Files and hashes: 1: LG88xdeFlC5gSAk8dDOXOusV_iI.crl (hash: M9NLL4VlR8kXTqbtm0hOlxTEZ2BVfmbvQ4YjB06QYEA=)
2: r-LdmNgDJxor_chtzxn23ViAn4E.roa (hash: MPImeKuP5zzvcwvgc9vgO37r54W5h9GJtWUTmdVepC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:c3:a6:95:07:2e:d2:c3:ce:39:0a:0a:70:27:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6f3cc5d785942e6048093c7433973aeb15fe22
Validity
Not Before: Oct 28 01:01:40 2025 GMT
Not After : Oct 29 01:01:40 2025 GMT
Subject: CN=53ef4ea8ec30b860727602620ae4903eb7b4a147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:56:ed:67:66:d2:95:42:b8:1a:6d:4e:f5:
3e:68:95:c0:da:e4:96:57:e4:a8:9f:8b:d8:1b:2a:
3f:a9:55:2c:53:d4:9e:60:cd:79:2e:18:d9:59:b1:
4b:97:86:b8:c5:13:62:c9:c3:b7:1c:06:09:50:8c:
cb:5b:8f:e1:8b:ac:74:0b:db:dc:b8:e4:76:f3:81:
b9:21:15:e4:90:33:28:47:d2:54:95:d0:3d:d5:03:
5e:fe:8f:9b:e4:a3:b2:3f:04:d7:c7:90:89:1e:ec:
d8:23:6c:58:eb:24:c8:d1:4c:c3:6a:8a:59:2e:bc:
c5:3f:72:cd:e3:39:d6:f0:b3:30:fd:c4:2c:6d:9f:
bd:c4:38:38:cb:62:4b:2e:b2:b6:64:9c:60:c7:ad:
03:22:8e:d0:e3:1e:ed:5f:4b:5c:f8:84:9a:98:50:
e5:12:f1:b5:6f:bc:d3:af:26:3f:d7:0f:ce:90:4e:
0a:ac:2f:d5:68:56:0d:1d:84:f4:12:5a:1e:d9:d0:
73:d3:9d:e2:cc:93:ca:50:45:a4:d6:58:5f:af:34:
20:09:1c:e6:5b:d0:8c:97:cf:de:16:f1:8b:e5:1d:
d2:d6:4c:c8:b0:d0:28:b1:cd:32:4b:7d:7c:76:c0:
da:d9:63:c2:fd:1c:0d:21:f1:7a:a2:25:d3:0e:35:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:4E:A8:EC:30:B8:60:72:76:02:62:0A:E4:90:3E:B7:B4:A1:47
X509v3 Authority Key Identifier:
keyid:2C:6F:3C:C5:D7:85:94:2E:60:48:09:3C:74:33:97:3A:EB:15:FE:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG88xdeFlC5gSAk8dDOXOusV_iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c791dd-8b17-49c5-a1ef-6cf1ca508d1a/1/LG88xdeFlC5gSAk8dDOXOusV_iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8c:8a:57:15:5a:58:59:a2:39:c9:d6:9f:27:0f:c1:4c:42:
a7:61:76:95:92:b1:96:84:e1:db:6e:c6:09:95:3c:bd:58:ff:
a8:92:7e:c9:99:4f:2c:15:e2:5b:c0:8e:14:ee:d5:49:22:2d:
ba:e3:3e:00:12:24:33:2d:21:bb:28:d8:c5:e7:04:c0:78:9a:
a4:fc:03:69:63:9f:7f:28:28:95:92:4d:c1:63:ed:48:bc:3c:
33:8a:26:97:b5:3d:2e:9a:e7:83:c8:26:4b:07:36:5b:c6:34:
16:44:89:51:1a:e9:b3:63:8b:19:f7:57:cd:a1:3c:f3:aa:0a:
2a:82:b7:03:b8:07:55:3f:51:32:74:46:d4:44:b7:6a:32:a1:
62:27:73:f1:c8:17:ec:d0:94:4a:66:a4:6b:4d:7d:a9:f6:ca:
22:6b:49:4f:45:ea:06:c4:ae:07:cc:07:2d:16:d3:47:e3:be:
ce:01:d8:21:92:a8:78:7e:83:7c:7a:3e:4e:de:98:c0:fc:db:
ba:8c:c6:47:8a:b5:ca:ee:62:07:34:58:76:a8:42:70:f3:0a:
8c:d5:29:93:65:cb:3c:22:f9:01:34:fe:a6:ef:34:5c:66:fd:
ce:e4:b2:29:42:5e:8f:65:0e:44:66:45:d8:a1:24:f2:4d:e3:
9c:00:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:21:08 2025 by rpki-client