
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: UMYriJrqBmhaMk+JXc7+mI8x5V17GzwRDAmB1JbrE44=
Subject key identifier: 8F:14:C6:04:80:C9:8E:7A:CB:AD:0A:99:57:99:08:8B:0E:7E:C9:90
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 019A5119B2E09E68BEAEEBB05963FEB70990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 23:00:29 +0000
Manifest this update: Tue 04 Nov 2025 23:00:29 +0000
Manifest next update: Wed 05 Nov 2025 23:00:29 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: W8DNkyc2TLU01a9+1+6oE9xU8+RC/RK+eVWB8ngpz8E=)
2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:b2:e0:9e:68:be:ae:eb:b0:59:63:fe:b7:09:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Nov 4 23:00:29 2025 GMT
Not After : Nov 5 23:00:29 2025 GMT
Subject: CN=8f14c60480c98e7acbad0a995799088b0e7ec990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:65:4f:4b:33:ed:2d:31:18:bd:33:18:64:
d7:a3:a2:11:2f:c6:0a:dd:ca:5c:15:8c:fa:e8:e3:
a9:f9:95:84:30:36:20:b4:90:c7:69:da:5a:25:b4:
d9:36:7f:7a:2f:56:0f:15:28:4e:a6:0a:2b:0e:c9:
29:f5:01:ae:19:23:9e:ca:e5:16:ba:b2:f1:d4:79:
d9:6a:cd:a9:7e:12:a5:9b:c7:d8:89:9f:1d:ba:10:
ed:4f:9c:55:41:5d:5e:42:fd:4f:28:90:e4:dd:86:
f7:47:74:aa:4e:3b:ac:63:d1:a4:5e:fc:17:f2:f0:
74:37:66:59:60:46:ab:2b:8a:2a:49:80:57:c3:06:
57:ef:04:0c:ce:c5:41:70:02:a2:74:df:7f:f2:03:
72:5c:64:f0:25:e9:69:eb:50:14:b1:0e:30:4e:a1:
d0:f2:06:cd:77:ea:eb:44:80:73:74:9d:fc:3a:43:
7f:ca:e1:79:c4:9c:a0:e5:1f:e8:9a:31:78:d7:d3:
97:2a:4e:c3:88:2a:fd:05:de:b5:50:4b:5d:4f:b9:
62:c9:bf:58:fa:be:89:49:c6:42:f3:dd:fd:c2:dd:
09:19:45:03:75:95:56:44:e9:0d:26:d3:b8:20:4e:
9c:02:f9:54:dc:80:4d:d4:69:ec:6c:8a:cf:8d:68:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:14:C6:04:80:C9:8E:7A:CB:AD:0A:99:57:99:08:8B:0E:7E:C9:90
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:12:1f:67:d4:38:49:a8:08:fc:48:ac:4a:61:04:7e:5f:02:
83:d8:1e:1a:51:20:26:64:a6:44:94:28:d7:d2:05:4c:6c:b9:
5c:f2:0e:be:55:5b:b5:f1:3d:3a:d7:f3:0a:ef:e4:23:5e:a0:
27:c3:6b:39:dc:93:78:fc:69:96:a2:15:ed:74:15:58:72:bf:
48:49:57:ae:70:53:71:4b:17:44:ce:7d:2f:09:cf:60:a8:7a:
8d:ef:c4:de:de:0a:fb:11:41:2a:cc:fb:20:72:77:c5:81:8f:
d9:87:b1:38:03:4e:dc:0f:ca:c0:6b:38:b2:fb:7b:a1:ff:d6:
80:b2:a3:16:b2:85:1f:62:18:81:47:8d:24:19:7c:e9:f2:1e:
f9:23:09:d2:7b:55:f5:39:17:0b:73:81:d5:7f:ef:1c:77:21:
c9:bb:1d:0b:b7:0c:65:02:ea:a1:a7:c0:fd:c5:59:90:db:e5:
69:93:c6:56:60:72:04:80:2a:a3:58:65:90:da:d1:32:36:f2:
f3:02:97:81:7f:f8:c7:0a:23:68:53:e6:e5:62:4e:b8:29:92:
ae:5b:95:6d:59:32:cf:87:d4:40:cf:d0:a6:e1:98:4c:f9:3e:
45:59:9d:2e:f5:b0:17:17:d8:2f:fa:ba:ca:ab:1b:da:3f:45:
8f:fd:53:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGbLgnmi+ruuwWWP+twmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDgxOTA5NTU5NDgwZDI0ODQ5MGQ4ZTFkNzFjM2MwOTNi
MDVmZTUwHhcNMjUxMTA0MjMwMDI5WhcNMjUxMTA1MjMwMDI5WjAzMTEwLwYDVQQD
Eyg4ZjE0YzYwNDgwYzk4ZTdhY2JhZDBhOTk1Nzk5MDg4YjBlN2VjOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ollT0sz7S0xGL0zGGTXo6IRL8YK
3cpcFYz66OOp+ZWEMDYgtJDHadpaJbTZNn96L1YPFShOpgorDskp9QGuGSOeyuUW
urLx1HnZas2pfhKlm8fYiZ8duhDtT5xVQV1eQv1PKJDk3Yb3R3SqTjusY9GkXvwX
8vB0N2ZZYEarK4oqSYBXwwZX7wQMzsVBcAKidN9/8gNyXGTwJelp61AUsQ4wTqHQ
8gbNd+rrRIBzdJ38OkN/yuF5xJyg5R/omjF419OXKk7DiCr9Bd61UEtdT7liyb9Y
+r6JScZC8939wt0JGUUDdZVWROkNJtO4IE6cAvlU3IBN1GnsbIrPjWiqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8UxgSAyY56y60KmVeZCIsOfsmQMB8GA1UdIwQY
MBaAFC5IGQlVlIDSSEkNjh1xw8CTsF/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2It
ODdiYzU4ZjM0NjY1LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2ItODdiYzU4ZjM0NjY1
LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRIfZ9Q4
SagI/EisSmEEfl8Cg9geGlEgJmSmRJQo19IFTGy5XPIOvlVbtfE9OtfzCu/kI16g
J8NrOdyTePxplqIV7XQVWHK/SElXrnBTcUsXRM59LwnPYKh6je/E3t4K+xFBKsz7
IHJ3xYGP2YexOANO3A/KwGs4svt7of/WgLKjFrKFH2IYgUeNJBl86fIe+SMJ0ntV
9TkXC3OB1X/vHHchybsdC7cMZQLqoafA/cVZkNvlaZPGVmByBIAqo1hlkNrRMjby
8wKXgX/4xwojaFPm5WJOuCmSrluVbVkyz4fUQM/QpuGYTPk+RVmdLvWwFxfYL/q6
yqsb2j9Fj/1T3g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:01:51 2025 by rpki-client