Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: LemnaR3zU/rFpFNH4Jr/WOmbVhlQcjqcxMYYKwsDSQ0=
Subject key identifier: A6:B5:98:B6:3B:EB:D5:9A:9E:31:AB:1D:42:10:6E:66:E1:66:53:BC
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 01995D8E43B3E9C6C5C6B599C31569F92092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1698
Signing time: Thu 18 Sep 2025 16:00:28 +0000
Manifest this update: Thu 18 Sep 2025 16:00:28 +0000
Manifest next update: Fri 19 Sep 2025 16:00:28 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: grAqtIu3bjqoC8oVczGdWBjBq/VZJ5PMasLyY680+tw=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:8e:43:b3:e9:c6:c5:c6:b5:99:c3:15:69:f9:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Sep 18 16:00:28 2025 GMT
Not After : Sep 19 16:00:28 2025 GMT
Subject: CN=a6b598b63bebd59a9e31ab1d42106e66e16653bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:70:4c:1a:aa:de:cc:65:27:ef:f8:75:c1:
f5:7f:9e:69:56:20:6f:a4:10:ec:a2:72:af:d4:d0:
c1:3e:51:54:9e:da:a5:fd:6d:45:e1:4c:44:c3:04:
03:75:b4:8f:06:81:98:4b:ca:33:50:fa:2d:dd:28:
dd:e3:a6:ff:17:c6:2a:13:22:ce:3c:0d:0e:ba:2e:
71:cd:08:49:f4:15:10:64:a1:36:0e:bd:01:39:56:
ca:1c:9c:c2:bb:74:72:61:25:9f:65:13:96:b7:64:
c3:9e:f3:f3:fb:7e:74:46:93:98:98:35:16:a7:65:
06:23:59:78:9d:72:8e:f3:c2:8f:4d:1e:f6:2d:d0:
c1:13:b8:a3:bc:06:d7:0f:4a:6c:14:76:61:eb:24:
ff:75:e3:fe:47:93:15:a2:02:cf:b3:f6:1d:52:16:
fb:a0:0c:e8:48:80:8a:f0:50:36:cc:2b:df:79:99:
40:fa:3c:31:07:de:2e:e6:20:d3:8e:94:41:90:95:
be:58:54:67:58:56:5a:c9:9c:6a:57:31:6f:a2:65:
52:a7:fc:83:18:2c:ed:5d:53:0f:0f:a6:eb:98:d6:
ec:60:fe:44:5a:4d:76:21:68:37:0a:1f:dc:82:10:
a5:d3:c6:2a:f8:32:ab:47:ff:96:90:ea:be:15:44:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B5:98:B6:3B:EB:D5:9A:9E:31:AB:1D:42:10:6E:66:E1:66:53:BC
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b4:47:99:ba:4f:53:38:d7:f2:46:c3:81:0e:63:d5:0d:da:
63:1c:86:f9:3a:22:37:a0:c7:98:ec:32:e4:ee:a9:b5:77:8f:
42:a9:70:ee:04:ea:db:cf:77:fb:0f:04:9c:b7:02:0f:63:1d:
26:c3:bb:de:35:40:4e:e1:10:42:84:06:92:01:e1:d3:cd:f2:
1f:a3:b9:47:29:55:40:c7:f3:3c:5a:24:7b:25:01:4e:b1:66:
ef:62:74:81:72:f9:84:79:1b:ab:8d:f2:90:72:e7:a8:f7:e1:
02:36:8e:5c:64:bd:c8:cf:c6:fe:cb:e5:15:32:f8:70:07:31:
b5:29:ce:e1:54:73:d8:5d:50:a6:a5:27:f2:30:8e:ab:77:fb:
02:47:47:48:7a:ad:4c:04:6c:a4:aa:0f:54:3f:2f:29:b6:68:
32:7c:a6:5f:40:76:f5:1a:6d:db:96:25:88:84:c3:9c:03:d4:
52:bc:17:e0:1b:73:3b:4e:a8:f9:46:ef:73:5d:0c:ef:66:28:
d5:8e:5e:58:d1:a7:f7:8b:a2:ee:08:cf:de:dc:9e:15:45:c6:
e2:89:e6:3b:bd:7c:a8:46:0a:94:ec:75:c7:cc:1e:fa:2a:51:
d4:bf:51:c2:bd:13:31:ae:6a:84:af:12:c5:84:92:4f:ab:25:
67:f0:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:32:36 2025 by rpki-client