Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
File: LpT_AwG-edgSYKxmrHNi762WikE.mft (raw, json)
Hash identifier: hvB1BOSoa1iGXwyLD0tcvZihU2Lv3FBCz4VOKgRUmIQ=
Subject key identifier: A8:2C:5C:64:81:0B:1E:66:DB:16:D3:64:48:19:6C:0A:01:3E:C0:B2
Authority key identifier: 2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
Certificate issuer: /CN=2e94ff0301be79d81260ac66ac7362efad968a41
Certificate serial: 019A70DBFF1CBE125FA1F3A4A93A9BD84313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
Manifest number: 0D5C
Signing time: Tue 11 Nov 2025 03:00:57 +0000
Manifest this update: Tue 11 Nov 2025 03:00:57 +0000
Manifest next update: Wed 12 Nov 2025 03:00:57 +0000
Files and hashes: 1: LpT_AwG-edgSYKxmrHNi762WikE.crl (hash: kIi75+S6AH8Y5hsvyRJVdnqQ7y5h2pvvO4W5oanw5BI=)
2: xl3BkGl_f_RqSB7FJBWzwtRLWbM.roa (hash: gmBp6MHi7PgcV0+T6HOJKzGRBuPuBU2bj1lv4nMBWYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ff:1c:be:12:5f:a1:f3:a4:a9:3a:9b:d8:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e94ff0301be79d81260ac66ac7362efad968a41
Validity
Not Before: Nov 11 03:00:57 2025 GMT
Not After : Nov 12 03:00:57 2025 GMT
Subject: CN=a82c5c64810b1e66db16d36448196c0a013ec0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:d7:01:11:ce:48:c8:e8:fe:eb:cd:f7:1f:
25:ea:c4:5c:21:2b:03:45:52:26:03:71:a4:cd:b7:
21:44:36:b2:fd:b6:b9:b6:55:26:90:3b:d2:93:8e:
c5:92:eb:b9:06:7c:94:78:6b:fc:ad:69:5d:0f:e6:
2a:0d:ea:ba:2d:87:af:4c:16:c0:49:17:5d:b2:24:
14:f2:b3:9f:a3:a7:d8:7d:aa:0d:d4:b0:de:62:b1:
8e:64:c1:9f:67:f0:c0:57:6f:f8:c4:19:5b:e0:60:
83:be:31:7b:78:d7:b4:7f:2e:71:4b:48:eb:e3:af:
26:ce:61:25:cc:66:84:e7:3a:9f:39:21:7d:e8:0f:
41:e2:94:fc:47:39:98:f7:8e:50:fa:80:f9:65:9e:
2f:20:83:e3:67:86:b4:f8:e5:04:41:6a:d0:b3:dd:
63:a4:32:60:a1:59:55:34:52:ab:02:1b:de:41:4e:
60:14:f8:af:ab:61:5a:d3:f6:15:cd:3b:6c:09:ad:
a2:3a:2c:e0:83:db:7e:ed:a0:8e:58:6d:df:8f:7a:
d8:a1:07:d7:14:0b:db:1d:93:9d:ea:62:e9:21:70:
bb:bf:1e:b4:05:a3:0e:33:2d:90:d7:30:fa:bc:da:
a9:99:7b:e1:2c:91:a7:4a:2a:cc:33:47:8f:6d:a0:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2C:5C:64:81:0B:1E:66:DB:16:D3:64:48:19:6C:0A:01:3E:C0:B2
X509v3 Authority Key Identifier:
keyid:2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1f:2a:b7:16:c5:db:89:ed:41:6f:b5:6f:42:62:83:1a:ed:
03:b9:45:48:73:b0:c4:83:63:e6:d4:5e:9c:9f:9f:6e:48:c3:
63:03:1d:5d:00:42:8b:d3:03:4e:33:61:4a:49:2d:60:48:d8:
97:a6:a0:35:97:90:4d:65:6d:9c:e8:fa:24:36:86:d2:65:4f:
ec:1d:6b:ef:63:0c:c0:c7:bf:e1:c0:3d:dc:e0:94:00:0a:0b:
d6:0b:f1:e3:52:8a:89:da:2d:0b:28:38:54:bd:a3:de:f0:86:
95:ee:d6:47:93:57:d8:cc:9b:ed:59:2a:57:8a:c9:9e:4b:e2:
5d:23:19:77:5b:77:b5:52:25:9b:0e:12:1d:67:5c:23:72:35:
7b:79:65:5b:4c:10:d6:d1:4c:95:cf:22:eb:89:7b:03:60:83:
54:05:22:c1:81:62:77:1b:9b:d6:7f:83:e9:23:99:df:ee:db:
93:78:3b:79:26:0b:c9:6a:41:d1:32:f4:e9:9d:98:b3:dd:83:
2a:94:0f:54:79:18:b5:b8:51:a7:14:0b:a9:bc:33:d9:6b:e6:
43:ce:6b:f8:21:fc:11:30:00:69:d4:d9:38:82:95:ab:d6:13:
f6:c2:f6:db:1a:08:5a:2e:ef:22:74:21:eb:18:24:d6:d3:c4:
b4:2c:b1:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2/8cvhJfofOkqTqb2EMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOTRmZjAzMDFiZTc5ZDgxMjYwYWM2NmFjNzM2MmVmYWQ5
NjhhNDEwHhcNMjUxMTExMDMwMDU3WhcNMjUxMTEyMDMwMDU3WjAzMTEwLwYDVQQD
EyhhODJjNWM2NDgxMGIxZTY2ZGIxNmQzNjQ0ODE5NmMwYTAxM2VjMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtzXARHOSMjo/uvN9x8l6sRcISsD
RVImA3GkzbchRDay/ba5tlUmkDvSk47Fkuu5BnyUeGv8rWldD+YqDeq6LYevTBbA
SRddsiQU8rOfo6fYfaoN1LDeYrGOZMGfZ/DAV2/4xBlb4GCDvjF7eNe0fy5xS0jr
468mzmElzGaE5zqfOSF96A9B4pT8RzmY945Q+oD5ZZ4vIIPjZ4a0+OUEQWrQs91j
pDJgoVlVNFKrAhveQU5gFPivq2Fa0/YVzTtsCa2iOizgg9t+7aCOWG3fj3rYoQfX
FAvbHZOd6mLpIXC7vx60BaMOMy2Q1zD6vNqpmXvhLJGnSirMM0ePbaD0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgsXGSBCx5m2xbTZEgZbAoBPsCyMB8GA1UdIwQY
MBaAFC6U/wMBvnnYEmCsZqxzYu+tlopBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZjc3ODctNDA0Yi00YTFlLWJhOGIt
NjhlN2ZiMTdhNDRiLzEvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lZjc3ODctNDA0Yi00YTFlLWJhOGItNjhlN2ZiMTdhNDRi
LzEvTHBUX0F3Ry1lZGdTWUt4bXJITmk3NjJXaWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiB8qtxbF
24ntQW+1b0JigxrtA7lFSHOwxINj5tRenJ+fbkjDYwMdXQBCi9MDTjNhSkktYEjY
l6agNZeQTWVtnOj6JDaG0mVP7B1r72MMwMe/4cA93OCUAAoL1gvx41KKidotCyg4
VL2j3vCGle7WR5NX2Myb7VkqV4rJnkviXSMZd1t3tVIlmw4SHWdcI3I1e3llW0wQ
1tFMlc8i64l7A2CDVAUiwYFidxub1n+D6SOZ3+7bk3g7eSYLyWpB0TL06Z2Ys92D
KpQPVHkYtbhRpxQLqbwz2WvmQ85r+CH8ETAAadTZOIKVq9YT9sL22xoIWi7vInQh
6xgk1tPEtCyxrA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:50 2025 by rpki-client