Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: FoF5Xr4/t8w1XF+flxUHaNN6eZy3u1yJnyVPiste7uo=
Subject key identifier: B0:BD:54:88:07:F2:18:F2:BA:80:65:3E:78:A8:FF:33:C6:06:48:FE
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 019963905BE95674C4AE46A25732E842048E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 168F
Signing time: Fri 19 Sep 2025 20:00:29 +0000
Manifest this update: Fri 19 Sep 2025 20:00:29 +0000
Manifest next update: Sat 20 Sep 2025 20:00:29 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: pBUcrY8CyyURI+YObT+EWf1j29qxEZHGBGZRR0/mUfE=)
2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:90:5b:e9:56:74:c4:ae:46:a2:57:32:e8:42:04:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Sep 19 20:00:29 2025 GMT
Not After : Sep 20 20:00:29 2025 GMT
Subject: CN=b0bd548807f218f2ba80653e78a8ff33c60648fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:f9:6e:82:35:7c:7b:0e:7b:08:d0:c0:c5:
06:98:75:06:c1:18:a4:59:c0:38:d4:3c:f6:95:5a:
11:16:3d:6f:2f:f8:35:2d:17:a6:48:50:3a:ae:75:
26:43:56:5a:10:86:97:01:db:d0:e8:16:ce:3d:e3:
b5:3d:2d:ac:69:1b:fc:66:42:b7:f4:13:06:6b:67:
fd:ac:51:e2:e6:5b:84:0f:41:ac:75:cf:5c:2d:7a:
e2:ea:df:68:82:2a:0e:bf:d2:6a:ef:b2:7f:86:1e:
21:d3:d4:d9:98:ba:87:c4:5d:67:65:32:92:fc:8c:
f7:5c:eb:fa:8c:51:a1:2e:40:42:d4:96:6d:22:d6:
34:df:72:70:91:36:49:0c:70:e6:da:1b:c6:84:37:
3f:c7:3b:f4:44:51:75:b2:13:3f:73:f6:a1:c4:67:
a8:0f:03:4e:2c:b5:ad:c6:f9:99:2d:8f:c7:ad:ba:
b1:b7:c9:25:ab:87:33:68:ef:54:44:da:02:9b:77:
c1:ad:ae:77:de:0a:60:82:40:1e:fa:9c:1f:31:0b:
b3:07:bb:6d:37:8b:ef:3c:69:6c:97:60:47:da:a2:
a4:6c:bf:bf:e0:c9:33:a0:b9:aa:f8:a5:e6:c9:d3:
1b:d1:fb:ee:15:75:01:a1:a9:2e:13:24:63:27:b1:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:54:88:07:F2:18:F2:BA:80:65:3E:78:A8:FF:33:C6:06:48:FE
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:35:fc:6c:9a:30:e9:99:1e:d1:42:c5:83:8d:65:51:32:39:
5f:d2:09:8b:bd:8e:de:c0:de:68:b4:05:ce:81:ac:fa:b3:91:
c6:e2:c6:00:53:5f:2f:a1:f3:90:cb:89:5a:c0:b6:4b:03:d8:
fa:b3:e7:c4:41:81:09:2c:a0:50:a6:a9:f9:54:63:d2:f7:ee:
80:9c:ae:33:f1:aa:bd:9c:5b:06:3b:ed:e3:22:a5:4f:ce:29:
39:9a:5b:de:c6:6c:f6:54:ca:e4:11:15:03:98:97:29:8c:42:
e1:78:5d:3f:e1:df:df:1b:2a:cd:69:90:a9:49:54:39:dc:e4:
88:b8:20:52:ff:d5:57:9c:7b:3e:b8:c0:24:f2:02:3b:22:d3:
12:ec:5e:a1:cc:08:d5:db:e0:eb:c0:6c:e8:96:d9:c5:e0:6f:
2c:2b:2e:80:c4:7d:20:f0:79:ec:70:00:59:be:e1:52:c1:f7:
c7:a1:80:b6:66:3b:e0:72:00:64:9c:0e:f1:e3:0b:a1:ab:b5:
c8:e5:3c:e0:7a:e8:52:14:ac:06:a3:7a:55:cb:de:a6:65:e3:
b5:61:6d:17:e7:82:19:d5:ad:ed:7e:7a:5c:ae:b9:b0:57:bb:
37:f4:cf:d5:13:61:18:79:59:af:2d:b7:0a:0e:14:47:6d:67:
3c:39:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:29:01 2025 by rpki-client