Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: piGB09GWGHZyjaGMeMGfD18DlHAhsHWONBnpuxw+/+0=
Subject key identifier: 28:EB:B8:A0:66:99:60:AC:10:7E:80:18:7A:9E:F5:D8:57:FF:E0:94
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 019A1AD15DF39F9A2D5B66CBB941564BAC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 12C3
Signing time: Sat 25 Oct 2025 10:01:59 +0000
Manifest this update: Sat 25 Oct 2025 10:01:59 +0000
Manifest next update: Sun 26 Oct 2025 10:01:59 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: sL0aIsqigfzs1vew+k4SSoLHxQ+gRbTNE6hDGRf2ovI=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:5d:f3:9f:9a:2d:5b:66:cb:b9:41:56:4b:ac:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Oct 25 10:01:59 2025 GMT
Not After : Oct 26 10:01:59 2025 GMT
Subject: CN=28ebb8a0669960ac107e80187a9ef5d857ffe094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:68:dd:76:33:d0:b5:3f:3b:54:ea:9f:66:
15:c3:13:d7:87:33:55:f4:5e:51:28:33:e7:ea:96:
80:82:13:97:f9:dc:34:b8:5a:31:ad:0b:ca:bf:cd:
7b:95:85:9d:19:96:8e:33:0e:bd:98:d6:f7:be:d9:
9b:07:81:09:62:ea:b3:a1:ae:a7:42:c0:9c:cb:b8:
fe:9b:28:f5:e3:c3:4e:7e:c7:b4:f3:31:64:5e:2c:
08:01:4f:92:d5:8e:21:5a:35:2d:63:58:a5:c7:26:
a9:db:1e:9e:df:20:ac:4f:64:c4:ce:64:b5:d7:61:
1a:ed:f3:07:81:84:12:5c:2f:8b:61:97:eb:c1:8b:
8f:f5:64:8f:f9:d6:45:7e:33:d5:7b:e7:59:a3:1c:
1c:fe:8e:4b:8b:76:11:6f:ea:e5:94:76:74:fe:af:
c0:75:2a:3b:65:a9:66:27:c1:69:82:48:64:3f:00:
4f:51:42:22:ff:7b:c1:c3:c2:85:53:37:ee:40:a7:
19:4c:94:a0:f4:be:87:43:87:fa:20:ef:5a:cd:db:
1c:d6:24:2b:b2:51:ef:5f:ad:a7:24:48:b2:5e:9d:
c5:13:29:02:36:90:3a:7c:f5:e5:dd:c9:29:0b:0e:
ef:12:3c:e8:4f:8b:a9:b4:cc:05:fd:8e:71:87:0a:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:B8:A0:66:99:60:AC:10:7E:80:18:7A:9E:F5:D8:57:FF:E0:94
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6a:a9:d9:2f:93:f5:eb:d3:4c:1a:18:73:c8:8d:9e:cd:83:
fc:73:cc:8b:f2:7a:a3:ba:9e:25:3c:29:6b:9d:34:70:cb:31:
2b:e6:f8:13:a2:e7:c5:87:12:98:6a:da:26:6a:93:dd:20:12:
30:27:30:a6:d0:10:98:ed:69:1e:3e:4f:0e:1b:59:09:a7:7f:
35:ba:7d:62:11:d4:b4:e3:87:4c:8d:e3:5c:3e:8c:60:81:ab:
87:17:9a:a3:80:d5:85:a9:71:7f:50:4e:ab:1a:28:3f:e4:e8:
ac:d5:56:4d:3b:34:37:46:68:cb:5f:0f:de:03:00:92:b1:2f:
76:86:51:e1:4b:9e:e7:20:db:81:d6:9b:d2:4c:3d:4d:02:b1:
a3:cd:29:d0:ef:d6:af:0a:e5:00:36:07:1d:cd:56:db:4e:9d:
c5:b8:4f:b1:60:87:e7:f8:65:2b:eb:45:28:d6:d4:55:48:63:
aa:fd:c9:15:c2:a8:9c:ae:71:1d:8d:40:be:49:6d:a5:10:cb:
e7:81:1b:45:53:5a:ff:0d:fc:8a:a6:bf:59:18:27:35:90:d2:
c8:eb:39:02:9f:9e:6c:3b:16:15:bb:e1:f5:e0:c3:7e:07:d6:
e7:10:7f:ae:19:21:1c:a4:e6:37:dc:ef:16:a0:f1:a9:13:68:
f4:30:55:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoa0V3zn5otW2bLuUFWS6wDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl
MDk5MGEwHhcNMjUxMDI1MTAwMTU5WhcNMjUxMDI2MTAwMTU5WjAzMTEwLwYDVQQD
EygyOGViYjhhMDY2OTk2MGFjMTA3ZTgwMTg3YTllZjVkODU3ZmZlMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVNo3XYz0LU/O1Tqn2YVwxPXhzNV
9F5RKDPn6paAghOX+dw0uFoxrQvKv817lYWdGZaOMw69mNb3vtmbB4EJYuqzoa6n
QsCcy7j+myj148NOfse08zFkXiwIAU+S1Y4hWjUtY1ilxyap2x6e3yCsT2TEzmS1
12Ea7fMHgYQSXC+LYZfrwYuP9WSP+dZFfjPVe+dZoxwc/o5Li3YRb+rllHZ0/q/A
dSo7ZalmJ8FpgkhkPwBPUUIi/3vBw8KFUzfuQKcZTJSg9L6HQ4f6IO9azdsc1iQr
slHvX62nJEiyXp3FEykCNpA6fPXl3ckpCw7vEjzoT4uptMwF/Y5xhwp7uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjruKBmmWCsEH6AGHqe9dhX/+CUMB8GA1UdIwQY
MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct
YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm
LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmqp2S+T
9evTTBoYc8iNns2D/HPMi/J6o7qeJTwpa500cMsxK+b4E6LnxYcSmGraJmqT3SAS
MCcwptAQmO1pHj5PDhtZCad/Nbp9YhHUtOOHTI3jXD6MYIGrhxeao4DVhalxf1BO
qxooP+TorNVWTTs0N0Zoy18P3gMAkrEvdoZR4Uue5yDbgdab0kw9TQKxo80p0O/W
rwrlADYHHc1W206dxbhPsWCH5/hlK+tFKNbUVUhjqv3JFcKonK5xHY1AvkltpRDL
54EbRVNa/w38iqa/WRgnNZDSyOs5Ap+ebDsWFbvh9eDDfgfW5xB/rhkhHKTmN9zv
FqDxqRNo9DBVHQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:24 2025 by rpki-client