Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
File: Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft (raw, json)
Hash identifier: ip6ex9NH0oXC1uFpXNngNbCRonYthGi43+zXn7FONgw=
Subject key identifier: FA:1A:12:9E:AE:2F:D9:14:F7:43:05:68:43:CB:38:2B:1E:5C:0B:05
Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
Certificate issuer: /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Certificate serial: 019A71EEFA5ECD460FC6BE6ED57FEEAECB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
Manifest number: 02A1
Signing time: Tue 11 Nov 2025 08:01:18 +0000
Manifest this update: Tue 11 Nov 2025 08:01:18 +0000
Manifest next update: Wed 12 Nov 2025 08:01:18 +0000
Files and hashes: 1: Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl (hash: f2AEZrPq8e9bygV5L6roQ1fCu+8Xe+RrjE5tuW+1P50=)
2: S7R40cp3GhnKkmjft9RMef_54Y8.roa (hash: 8lQswAz9iKln85edEU2eDSuB3VyL1jNQyiwguuxfyac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:fa:5e:cd:46:0f:c6:be:6e:d5:7f:ee:ae:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Validity
Not Before: Nov 11 08:01:18 2025 GMT
Not After : Nov 12 08:01:18 2025 GMT
Subject: CN=fa1a129eae2fd914f743056843cb382b1e5c0b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:ec:5e:08:0c:d1:cc:d9:54:92:a1:7a:56:
dd:66:9c:b5:b2:3a:09:8d:7c:b9:d2:a4:32:3e:21:
cf:0b:5a:87:e7:83:f2:27:6c:54:11:41:8c:ee:23:
d3:d3:fd:4c:80:1c:7b:88:8e:61:00:fc:d4:5c:a4:
f8:dc:8c:7a:84:59:2e:24:23:f7:b1:b5:e2:a3:b0:
ad:a9:7d:48:0e:d0:7e:8e:25:56:a9:1d:84:ab:51:
6a:c8:c6:62:bd:b6:13:17:b1:c6:0c:75:08:b2:09:
5c:54:db:92:1a:0c:24:66:ad:46:3a:50:50:b1:fe:
ba:55:fe:52:ab:09:1c:e4:80:77:3a:cd:4c:82:b5:
b1:3a:b0:be:66:23:49:c7:7b:c5:57:b3:13:8b:a9:
56:78:a4:3d:63:e3:16:41:3d:15:1e:fa:75:2e:8f:
a6:90:f2:9c:58:07:03:a5:f7:98:ed:ca:7f:06:2e:
cf:9e:1c:99:8f:4c:84:36:70:e9:2a:d8:c5:a9:eb:
2d:0a:14:ba:71:de:9b:2e:05:00:3a:41:0a:71:4e:
2d:08:8b:1b:df:79:c2:ac:a4:0d:44:3c:c2:16:74:
bc:88:5f:24:bb:57:f6:80:e0:44:4d:1c:96:42:42:
8e:db:0a:2e:15:1a:fe:16:17:4d:b2:ae:b3:9a:cd:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:12:9E:AE:2F:D9:14:F7:43:05:68:43:CB:38:2B:1E:5C:0B:05
X509v3 Authority Key Identifier:
keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b6:d6:8a:5f:1b:04:4e:d4:87:f0:b8:47:cb:02:28:13:22:
00:f2:97:f5:8e:4e:d1:3e:42:23:56:ea:33:28:39:f7:a6:4a:
95:92:93:25:22:44:1e:53:f7:4f:ea:e4:50:c9:b9:02:32:7a:
d0:c8:4b:0c:d7:d3:cf:33:07:22:76:39:3b:34:01:5d:4d:42:
58:51:88:f9:e4:0d:fc:1b:70:aa:9d:ca:08:43:8b:f7:6d:4a:
ea:15:fe:88:99:77:4a:3c:f6:83:a9:7c:07:26:5f:04:96:39:
2e:19:d3:27:8b:5f:42:c1:98:7e:9e:7e:5c:41:b3:70:eb:3f:
ad:ba:c9:ba:32:c3:ff:b3:fd:09:49:c0:91:ae:22:88:e4:97:
19:12:4e:48:24:18:94:7e:8a:50:ae:e8:3e:e3:af:74:72:40:
61:84:8a:63:91:4e:0f:75:db:cd:1b:4b:82:ac:1e:4f:be:ad:
dd:91:46:ae:b3:c3:c6:df:78:2d:8c:6e:e5:2e:fc:f4:ed:2e:
ba:07:ec:23:e7:e3:58:f7:94:41:ac:61:6d:9a:9f:b3:1e:64:
ef:7e:2e:f5:53:d3:a7:67:32:6d:20:35:c7:52:67:8c:49:fd:
24:e9:49:49:94:08:64:e8:c6:4b:bf:c1:64:22:6f:b4:01:d0:
1d:72:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:35 2025 by rpki-client