Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File: LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier: Quqf8tU4KkbfkPC3Gp514+rUVYcJoM+b8d82l44wvi8=
Subject key identifier: 7C:83:DB:2D:7E:98:4A:E4:0A:65:E0:F4:4C:99:64:CB:DF:58:58:FF
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer: /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial: 019A3E376CE0B4A62B6ED17CB6708F2398AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number: 06AF
Signing time: Sat 01 Nov 2025 07:00:11 +0000
Manifest this update: Sat 01 Nov 2025 07:00:11 +0000
Manifest next update: Sun 02 Nov 2025 07:00:11 +0000
Files and hashes: 1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: qLuWawA+4oGf+fy7oZzREvLgwRl7dmlW4Cn405KEFA8=)
2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:37:6c:e0:b4:a6:2b:6e:d1:7c:b6:70:8f:23:98:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
Validity
Not Before: Nov 1 07:00:11 2025 GMT
Not After : Nov 2 07:00:11 2025 GMT
Subject: CN=7c83db2d7e984ae40a65e0f44c9964cbdf5858ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:50:a2:b1:6f:a5:44:cf:6d:24:65:47:60:
46:0e:a5:0a:8a:14:98:e6:fd:da:2c:08:62:f1:d1:
c1:c1:63:94:3b:9d:c8:c2:1a:bd:f1:0c:5a:71:ad:
02:49:9d:a7:68:db:61:c3:38:c5:3c:e6:6e:30:b1:
70:8b:c3:03:0d:00:46:07:fa:46:a2:32:9b:c9:05:
6d:5a:bb:4d:9a:4f:0e:5d:2c:f3:c8:01:f8:77:fb:
94:c5:ac:90:39:84:0b:da:59:aa:57:04:5f:75:13:
47:5a:59:52:f5:16:9b:6c:21:b6:c7:56:81:16:4f:
6a:d3:04:67:81:9e:ff:7c:cf:c9:3d:23:cc:59:90:
62:02:ae:30:7c:29:e2:cd:6b:dd:ef:3b:b8:28:a3:
55:5c:f5:4d:8d:7b:17:05:3b:45:c4:f9:99:e1:db:
93:3a:50:97:a3:1d:b6:72:d3:05:e5:80:6f:79:02:
b8:af:28:5b:5c:7d:31:9b:ae:3f:9b:29:32:7c:47:
46:d8:55:bc:5e:79:93:c0:74:4a:5d:4b:9f:0f:71:
86:f2:85:54:e2:83:c1:c5:c8:11:2f:91:2e:9a:e4:
e0:32:11:0c:07:45:d6:10:46:f9:bd:2e:07:54:d3:
53:44:3e:fb:ee:b0:8d:d2:fc:18:d2:4a:80:26:27:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:DB:2D:7E:98:4A:E4:0A:65:E0:F4:4C:99:64:CB:DF:58:58:FF
X509v3 Authority Key Identifier:
keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:59:16:e2:f1:ee:63:17:b7:d4:e7:54:f2:67:77:4d:c9:89:
a7:44:1e:b5:62:a3:15:70:f3:a0:3e:23:d6:5e:9f:06:00:a7:
92:87:55:9e:0c:db:b2:f2:c8:e1:dc:ea:60:e6:96:8c:4b:b5:
6d:f2:cc:1d:1a:c1:b8:64:d7:48:2b:cc:04:5d:7d:38:80:26:
87:5c:43:27:cb:2a:06:a0:80:58:d9:e3:a2:0e:30:73:02:9e:
2b:83:b8:d7:8f:16:21:86:bc:29:45:fd:36:9e:44:d4:45:95:
44:54:9c:0e:ea:90:be:a2:1c:68:8f:c2:51:41:80:b7:59:67:
c5:b4:42:03:13:7e:63:e1:c5:dc:44:93:eb:4c:15:79:2b:50:
08:87:cd:00:89:3d:b8:b1:76:52:61:e7:e2:20:70:f3:ee:9a:
9b:9e:fb:26:04:96:65:65:a0:69:90:0d:be:c0:ce:97:c8:df:
ee:f0:66:09:b6:47:66:e1:25:07:a8:81:c8:75:ad:b6:9a:b3:
fd:45:aa:36:b5:08:21:46:c1:71:c5:39:be:3f:ca:71:cd:96:
29:99:80:57:61:a7:6d:37:c7:73:67:6e:4a:b7:4c:b7:d6:8f:
10:ab:c4:07:48:c0:be:c3:0d:15:3e:f9:58:90:2b:1f:5f:06:
d4:73:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:06:43 2025 by rpki-client