Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: feHTLu3KQQrkhSWO72ngLJELFCax8i45ja4GkbyCECw=
Subject key identifier: DA:28:69:13:37:9C:8E:15:7E:FC:40:42:5E:B3:B2:C5:7B:B8:12:75
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 019A71B9537F05A55724D7E33240A887D546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 07:02:42 +0000
Manifest this update: Tue 11 Nov 2025 07:02:42 +0000
Manifest next update: Wed 12 Nov 2025 07:02:42 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: l/fTmZ71CRqqS/ay+e4s8ioKRqqoOngv8//06HVuOCY=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:53:7f:05:a5:57:24:d7:e3:32:40:a8:87:d5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Nov 11 07:02:42 2025 GMT
Not After : Nov 12 07:02:42 2025 GMT
Subject: CN=da286913379c8e157efc40425eb3b2c57bb81275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:ed:b9:a2:7d:50:02:cf:3b:99:9d:e3:4b:
5e:b5:7e:65:60:d9:19:3e:c0:08:99:1b:3b:c2:ba:
17:eb:e2:e4:6f:ad:00:ae:d7:f8:98:87:82:c7:44:
e0:09:81:b7:79:8f:19:56:fb:c8:29:9f:20:a0:b2:
da:0b:7a:e1:03:52:ed:7e:4a:17:66:d9:d0:62:9f:
bb:bc:75:81:b5:1b:0a:12:01:61:39:0a:cf:d2:95:
8c:30:12:d3:07:e8:f3:27:63:71:d4:f6:40:43:41:
66:e8:7d:8f:be:de:8a:74:26:49:87:e4:a5:77:ee:
ab:23:d5:b0:b8:6a:f7:93:00:11:a0:79:cc:8d:32:
ac:6e:d8:c2:f5:f2:89:3f:46:96:08:de:99:5d:24:
a1:12:77:97:53:70:b0:4e:2e:5a:c3:80:6e:a3:f1:
3c:16:a8:26:b8:1a:68:70:cf:1f:b9:1a:c5:e6:eb:
e2:71:86:7c:02:e6:c1:a2:f6:0d:a7:6a:3e:e2:52:
7d:f8:f1:08:57:bb:66:98:c0:2f:0f:10:e8:25:7c:
03:fa:5d:8c:1b:c5:62:df:3f:13:26:47:e9:e2:e7:
54:8b:5a:cd:00:ca:3d:c7:8e:1d:27:7d:80:5d:31:
66:1d:4e:c4:c7:33:c0:7d:0a:9c:27:e5:59:ae:d2:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:28:69:13:37:9C:8E:15:7E:FC:40:42:5E:B3:B2:C5:7B:B8:12:75
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ce:9e:bd:0a:1d:11:59:d4:73:70:3a:04:3d:95:70:ea:cd:
dc:bd:5e:d4:f4:de:2e:e2:e7:3c:60:31:df:3f:4b:a8:a6:e9:
60:e1:85:d7:6c:3d:48:6e:8c:1d:a7:ae:bf:fa:c5:21:a2:d5:
e0:1b:2d:19:3e:d4:1a:72:5e:6c:93:8e:ab:ba:4e:10:ec:b7:
70:75:3e:83:c6:e3:63:e5:6e:60:fc:9e:38:4a:4c:6a:62:68:
fe:f7:4f:9a:c1:5e:86:f2:7e:df:09:e2:1a:22:9f:dd:bb:80:
68:39:54:61:c3:cd:9f:a3:e4:35:15:df:f5:f2:d6:9b:f6:1d:
cc:21:bd:3a:06:36:72:24:c6:58:a3:2c:ee:61:3f:69:93:95:
33:8e:24:fb:4c:eb:03:2d:97:2b:8a:1f:8a:f4:73:4c:48:2d:
ac:6c:ec:45:4d:bf:8c:18:9a:45:af:6c:22:ea:92:11:36:11:
38:04:96:9c:47:83:d1:95:db:c0:45:c2:cc:dd:da:ed:91:eb:
00:90:11:64:a5:aa:ac:c1:3d:81:61:ee:fc:56:9b:74:5c:5b:
cf:ff:32:f2:cf:b4:17:34:5b:c7:be:ec:fe:27:16:3d:97:e3:
84:58:54:50:04:01:8a:fc:ac:80:54:e2:c6:1c:78:e9:0c:06:
1f:48:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:02 2025 by rpki-client