Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File: LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier: vvHeZ7nRbEnF/ddLzhXltoEMO9feYku9YMnQ/KU8kCo=
Subject key identifier: 45:8B:CC:ED:EB:85:E5:72:5E:CE:4F:50:89:F4:6E:31:CF:D7:43:E5
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer: /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial: 019933B6FBB7702F54F799D9609CB09F6B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number: 0625
Signing time: Wed 10 Sep 2025 13:00:53 +0000
Manifest this update: Wed 10 Sep 2025 13:00:53 +0000
Manifest next update: Thu 11 Sep 2025 13:00:53 +0000
Files and hashes: 1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: uC8oruaLoxU9wgU30EGu37Y973cf5T83u22Gwt33RFU=)
2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:fb:b7:70:2f:54:f7:99:d9:60:9c:b0:9f:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
Validity
Not Before: Sep 10 13:00:53 2025 GMT
Not After : Sep 11 13:00:53 2025 GMT
Subject: CN=458bccedeb85e5725ece4f5089f46e31cfd743e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:93:dc:54:98:6f:ca:ad:89:d0:d3:8e:29:
58:44:8c:dd:f8:2a:ce:2d:e0:7a:f7:0e:78:2c:fd:
8e:7c:67:fb:f5:5f:7b:49:b8:ee:73:1f:80:52:9c:
00:ea:fe:b0:27:45:1a:c4:29:28:a0:6b:3a:27:6b:
2d:41:8a:71:4f:1e:44:21:16:94:9d:3c:8e:b1:7d:
45:ed:23:21:62:a1:0d:62:e4:fa:56:49:89:d6:c6:
12:dd:c6:b1:7a:06:59:b3:0f:64:cd:79:4c:4a:cd:
3e:f0:3e:d6:0b:05:19:ba:00:4c:f3:07:a2:bb:93:
33:77:e1:17:ff:57:00:e2:a2:a3:ce:3c:7e:17:c3:
1e:c0:fe:9d:21:31:b6:56:fa:f8:96:68:db:26:0a:
29:46:38:0d:74:4c:ed:6e:f1:65:88:e8:02:77:a0:
59:58:a7:20:87:62:af:7b:4d:3a:34:a1:7b:dd:3a:
9c:bd:76:57:0f:19:13:81:44:b5:7b:6d:4f:e9:18:
40:60:16:4b:a6:47:7c:8b:72:db:dd:d1:24:e6:1b:
44:0b:da:63:98:16:53:22:22:e5:15:b3:0c:ca:63:
e7:96:d7:1f:a5:4f:08:83:3c:be:88:48:8b:ae:d2:
af:bf:e5:91:22:a1:0b:6b:cd:d6:8e:1a:80:bb:b3:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:CC:ED:EB:85:E5:72:5E:CE:4F:50:89:F4:6E:31:CF:D7:43:E5
X509v3 Authority Key Identifier:
keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c5:2d:cf:c5:0f:cd:f3:90:b5:c6:da:16:53:0c:7d:4a:ec:
18:4c:7d:82:7c:ac:2a:de:c2:41:06:17:32:fd:ed:54:6a:0d:
2b:af:23:30:94:37:6a:66:d4:49:03:9d:f8:11:ea:e0:c0:70:
42:d7:75:1f:5d:0f:ad:8c:df:f9:e7:f3:cc:d6:9f:9d:56:30:
c8:98:2a:66:f1:8e:9c:1d:6e:d7:b0:58:71:0f:42:63:58:f7:
15:15:55:86:51:37:b1:9b:e8:ea:c5:ab:62:ec:4c:f3:ab:d1:
d5:d6:e4:14:ed:99:e6:73:8e:56:42:c5:8f:2e:ec:e6:f8:76:
2c:f6:4b:9b:b8:e8:41:4a:f4:ab:31:73:75:71:2d:2c:c2:40:
e6:b9:e6:56:03:3f:ae:c5:5a:17:a8:9a:9d:72:d2:ce:8b:af:
92:c9:e3:aa:36:e3:75:82:2d:b3:67:76:8b:30:8e:8f:a7:e7:
d0:0f:e1:51:ea:a9:43:d7:49:8a:20:84:cb:c1:55:13:d5:29:
47:ed:74:d3:58:51:4f:93:e6:83:e4:d0:b2:14:e6:9c:32:26:
05:4c:65:0b:a3:ae:93:17:d4:75:c7:3c:88:32:65:27:76:dc:
12:c7:b7:cb:49:15:07:b3:8f:3d:fb:f2:b7:df:d7:3a:53:42:
54:73:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:25:32 2025 by rpki-client