Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: F41QG73iqwXNnFaMeT9anjasMUbtnKiUUo+ZzVEo7XY=
Subject key identifier: A3:A8:0F:40:D1:78:AB:0D:2D:4B:74:C9:B4:8B:77:06:83:54:1A:8E
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 019A725CEA1BA4C5B2D193C200822E354832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 026F
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: KeP7rZ5SK2tDSj494tDuHzmg3WPzhsHgZ7J9S5yDmFk=)
2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ea:1b:a4:c5:b2:d1:93:c2:00:82:2e:35:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=a3a80f40d178ab0d2d4b74c9b48b770683541a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:11:8a:0f:cb:df:4c:e2:8f:d0:c0:7d:ae:
ca:11:76:cb:81:19:f8:40:3c:80:25:10:a5:2d:f2:
e7:d4:fc:72:92:b2:b0:a5:97:8a:87:96:3c:e1:12:
5a:56:7a:03:00:c8:e8:e4:11:ca:ab:6d:fc:bd:94:
48:8e:3d:b0:62:1b:85:9e:f2:07:58:a1:24:03:aa:
ef:5e:31:6c:05:09:9c:c4:19:14:e1:e5:a9:98:ef:
87:27:50:0f:e7:ed:53:38:30:6a:cc:8b:ef:42:a8:
53:b6:ac:81:b8:c2:69:17:99:12:dd:17:83:ae:3b:
83:3a:01:54:af:0a:f9:a2:0f:59:38:1c:46:7a:be:
5c:e1:37:66:ed:f3:8a:9d:57:6f:64:c0:18:d5:73:
b5:8c:81:2b:58:30:59:ee:c3:a5:66:05:90:e3:f3:
cd:7d:43:1a:62:5f:99:15:c2:16:d6:ea:44:75:d9:
ab:fe:1f:91:02:cc:55:73:ba:53:94:3e:5d:07:a9:
15:09:9a:4c:67:5f:2a:00:fc:56:c9:89:27:65:97:
19:22:b0:3c:17:84:b2:61:75:41:a8:17:31:b4:b4:
cf:c6:f7:b3:0f:e9:e6:4b:6b:0a:fb:d9:42:af:cf:
27:d1:82:c2:2b:bf:17:22:08:e7:df:7e:95:db:6c:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A8:0F:40:D1:78:AB:0D:2D:4B:74:C9:B4:8B:77:06:83:54:1A:8E
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:db:88:45:e8:54:10:8e:99:86:6d:28:f2:11:05:f5:70:a4:
60:55:b4:34:a1:f3:3c:aa:d4:6c:30:02:78:83:f8:e7:f3:d8:
48:c8:9a:76:54:38:6c:cb:02:68:57:70:49:81:0f:00:93:b8:
5a:8c:bb:ee:ed:c4:ae:32:5c:c3:c3:b2:79:65:ef:6e:0c:60:
08:80:46:be:c1:ff:2d:a4:a9:3e:a9:e4:0b:cd:57:27:0b:29:
1c:ad:fb:82:d1:3f:28:61:33:c7:68:7b:44:6b:de:e8:59:11:
4d:b3:c5:9e:91:a0:27:f5:e6:00:10:f3:1e:a9:41:19:ca:01:
2c:d2:55:fa:85:bb:94:d5:24:cf:bd:82:62:47:7b:0f:7d:19:
f3:76:18:b7:20:99:30:79:d2:be:14:0e:49:91:49:72:e1:5b:
d9:df:20:89:30:b1:51:75:7a:df:ad:a0:8f:f0:78:db:79:b4:
76:ac:47:7c:81:fe:2e:f8:25:53:23:ba:b5:b6:d0:2f:1c:02:
90:3e:56:c0:c0:1c:ce:13:f1:62:ba:b1:af:8f:6e:22:57:ab:
a5:68:72:16:d4:86:36:ff:32:32:53:d6:5d:89:c8:dd:c8:75:
9e:bc:bd:70:13:0a:88:e9:85:e4:f0:1d:aa:57:1e:06:a7:b6:
0a:8b:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:57 2025 by rpki-client