Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: 5/lVA2qkULDSVPNnSSps7Mn25hYc9bYhCOiLwBAsZ5I=
Subject key identifier: 07:D8:38:4F:90:43:8E:86:5C:F4:1C:FE:4B:4B:F9:11:47:A2:85:D7
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019A2478C1E2ECA4DD96E4F9E051F480E631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 07:01:25 +0000
Manifest this update: Mon 27 Oct 2025 07:01:25 +0000
Manifest next update: Tue 28 Oct 2025 07:01:25 +0000
Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: p8qM7wgyyzoS5rqI2VFnACNORp2cGNTCI+njFEfAT6s=)
2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:c1:e2:ec:a4:dd:96:e4:f9:e0:51:f4:80:e6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Oct 27 07:01:25 2025 GMT
Not After : Oct 28 07:01:25 2025 GMT
Subject: CN=07d8384f90438e865cf41cfe4b4bf91147a285d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:15:a8:41:d9:8d:01:2e:8e:fb:63:76:fc:
4b:ed:5b:1f:d1:b1:2a:aa:7d:7c:14:24:a3:6a:50:
aa:2d:67:54:8d:e0:4e:60:f7:f5:ab:35:24:93:99:
df:c4:58:b0:b3:91:82:e7:6d:36:34:3a:cb:ce:b4:
26:6d:8b:97:54:dd:e0:f5:0d:3e:00:c9:9e:47:4d:
06:d7:bf:70:6c:f3:d7:e3:7f:e0:d5:ec:e2:fd:6a:
d5:11:b4:47:24:e4:ce:43:43:10:0d:15:bf:f1:16:
f0:41:64:ee:86:3e:55:f4:86:38:67:67:f0:19:de:
4a:b8:12:01:ac:6a:90:d7:4c:aa:4a:9d:52:d0:63:
ab:a6:a5:96:81:7a:bf:8e:5b:8b:dd:ec:0e:16:be:
b0:f4:bf:c5:c2:63:4a:d9:41:70:bd:8f:52:8f:37:
01:73:67:a9:f6:db:b2:d2:61:7d:1d:c1:80:5c:52:
e8:f3:b2:f1:18:15:c7:c1:a3:e8:3c:27:ca:c1:5b:
c5:4c:9c:f9:b6:a8:17:d5:6f:52:5e:9a:43:e2:56:
fe:16:96:3c:0f:d5:11:01:a8:02:65:94:f3:d5:c9:
9d:ff:77:c4:de:0c:44:ad:c1:37:ca:00:63:96:45:
12:2e:1f:43:3d:9a:a0:12:64:d1:d4:6d:5f:73:23:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:38:4F:90:43:8E:86:5C:F4:1C:FE:4B:4B:F9:11:47:A2:85:D7
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ff:a9:5e:22:42:0b:25:35:99:bb:99:97:be:66:8b:91:3f:
2e:db:e2:77:82:12:17:fe:a9:31:49:39:7e:c1:9b:01:4a:3b:
20:23:be:a6:dd:c1:94:4a:7b:80:d2:4c:e0:e4:0c:fc:c2:3e:
62:b6:b8:5c:21:da:2a:f1:7c:10:20:7e:cc:a2:e9:33:c9:87:
0c:49:1b:00:39:2b:05:f6:9b:e5:23:9e:ee:b9:6b:d7:18:fc:
a7:fb:90:de:bc:ac:50:c1:e8:05:c2:73:13:cb:42:e2:9c:08:
f5:c9:1d:73:06:96:68:87:1c:d3:45:95:bd:6e:0d:47:c5:a5:
ee:df:8a:e7:2d:b8:72:89:b9:ed:20:73:05:5f:1a:72:ee:2d:
3e:7e:81:5a:57:bd:da:68:e5:8a:5b:a8:c1:07:eb:56:17:e6:
de:3f:a9:3f:77:96:91:37:36:a8:fe:f8:53:c9:8f:86:a7:de:
88:73:f0:17:69:ad:e8:8f:5e:4e:a2:4f:f1:69:7e:50:f2:cf:
2e:30:ae:25:99:4b:ca:d3:d4:ab:92:d1:90:81:b9:88:fa:1d:
54:c7:94:60:80:00:62:92:c1:a8:9e:e9:74:ac:50:a1:67:6f:
a5:75:1c:2f:7b:38:19:20:23:1e:39:da:96:f5:c7:9b:fd:e1:
8a:9d:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:31 2025 by rpki-client