Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
File: LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft (raw, json)
Hash identifier: LSApCSpVBokAyfDvZCV8GOK9We60pHCRDHOvvpL4uX8=
Subject key identifier: 61:2A:FB:89:20:71:6E:0B:2C:8B:DA:63:6D:42:CD:1C:5F:5F:BC:15
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 019A669004A9FF2412CA5181E75ED14C06DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
Manifest number: 01CE
Signing time: Sun 09 Nov 2025 03:01:45 +0000
Manifest this update: Sun 09 Nov 2025 03:01:45 +0000
Manifest next update: Mon 10 Nov 2025 03:01:45 +0000
Files and hashes: 1: 0ibK2rFO285XcmwVBGiaWy0mCcA.roa (hash: oJQ8kk++bxBUXY2O47Q7nsX7PbhR5uG9qTYOOM+oaS4=)
2: LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl (hash: UXWwDkABEkwSNKNZ/I1wZVhpI6b4CvTVjsEQT4ZKCTU=)
3: _GUEYp_ZvXFjTzg6X0GYxguDxqk.roa (hash: ILywVwzLVmDK7onvjHWRnavh4R3aawRApY/DmqcCPJA=)
4: s4XGskQFU7_Cf6_mWSLuiAFByjk.roa (hash: nc4Vl3rpM+BRB2fbj+46n9BE/ubeond5FkvagoQcDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:66:90:04:a9:ff:24:12:ca:51:81:e7:5e:d1:4c:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Nov 9 03:01:45 2025 GMT
Not After : Nov 10 03:01:45 2025 GMT
Subject: CN=612afb8920716e0b2c8bda636d42cd1c5f5fbc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:3a:eb:e1:52:a5:bd:91:bb:30:2c:a1:b1:
af:08:4c:bd:dd:d8:9e:d6:29:3c:5f:48:10:08:28:
b8:45:ed:b8:ca:5f:98:5f:4d:96:03:04:44:0b:a9:
d7:72:48:c6:30:5d:a2:1e:65:7e:cb:da:24:15:80:
2a:a3:eb:79:91:a7:27:b4:95:b0:54:87:32:52:e4:
7b:5e:1e:ca:55:aa:2b:fc:40:cf:c0:62:b0:36:66:
b6:b6:c2:1e:7d:7b:5d:4f:97:0d:06:32:a9:47:fb:
8e:30:b0:1a:93:9a:d9:9a:ce:9a:a8:6f:84:93:f4:
fe:4a:4a:6d:ee:44:6e:24:a1:82:f3:26:53:f1:f4:
58:56:98:6e:26:bb:23:c4:2c:b2:84:f2:e5:e4:d0:
62:ae:09:ab:14:b6:49:35:ef:3d:4a:30:2e:e0:41:
5e:6f:c0:0c:b5:9e:b8:20:5c:7f:d6:21:9f:c8:57:
4d:7e:09:98:71:8a:94:7d:8d:c9:89:aa:0e:90:40:
45:e4:97:72:7b:38:9c:27:75:4e:fc:5f:10:ec:e3:
3b:87:14:2f:9e:ac:75:ac:93:24:8f:42:0c:9b:99:
da:1d:09:35:9b:2b:b3:77:a4:0e:d0:dc:fd:bc:26:
e9:f5:42:f6:54:3e:dd:ee:ec:1e:09:ac:29:62:ad:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:FB:89:20:71:6E:0B:2C:8B:DA:63:6D:42:CD:1C:5F:5F:BC:15
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ef:fa:f2:16:67:f2:3d:ba:0b:35:56:da:8c:da:b9:85:35:
6f:85:91:78:a1:a8:73:20:06:d2:46:8a:07:fc:b9:06:db:db:
59:e7:9e:96:8d:bd:e5:60:ac:cd:f6:86:91:9c:4d:3e:76:ec:
37:cd:d9:c3:d0:5e:b9:df:29:a6:5f:30:80:39:fb:5f:05:1c:
ef:48:03:a0:5a:00:c1:1e:63:67:b9:66:18:60:85:fa:c8:36:
d4:9f:a9:d5:a5:dd:e7:db:22:a3:f3:cf:02:bc:ab:d8:98:a2:
eb:c9:1a:db:5a:0d:5a:f2:47:8a:2b:09:1e:d6:92:c9:e1:2c:
4d:4a:8c:92:1c:85:5b:d8:d1:b2:90:e1:d1:31:12:72:20:b7:
99:98:2e:37:9f:74:98:13:14:e7:8a:f2:e8:cf:4e:31:02:3a:
41:e6:a9:63:32:b7:e0:6a:84:84:c1:ea:23:52:0f:be:aa:02:
42:86:ed:ba:0d:d8:b6:6a:33:fa:5a:c5:94:8a:bd:5d:dc:51:
1e:cf:c1:42:27:ff:ee:c3:0b:26:dc:3d:0a:a8:7e:07:a0:5e:
0c:cd:18:25:ab:0c:42:e4:4f:18:c2:93:04:30:c8:82:26:61:
c5:1c:a7:07:b5:57:f5:2d:b2:9c:1b:ea:ab:6a:69:df:99:cf:
68:a5:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 11:00:21 2025 by rpki-client