Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: j0ejishrLccfP0n6braK11RLfcJllD2+fZqgHG08vYI=
Subject key identifier: 92:C3:DF:D2:25:A8:CD:55:35:3E:53:4F:62:49:92:2A:E1:BC:CF:E3
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 019A4BBC162FF433743E5F3ABE525855A1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 16A1
Signing time: Mon 03 Nov 2025 22:00:08 +0000
Manifest this update: Mon 03 Nov 2025 22:00:08 +0000
Manifest next update: Tue 04 Nov 2025 22:00:08 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: S/aFlZi9I+kM86v6uiqcjHUT+QPfBZVIE0LdQV0/Hao=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:bc:16:2f:f4:33:74:3e:5f:3a:be:52:58:55:a1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Nov 3 22:00:08 2025 GMT
Not After : Nov 4 22:00:08 2025 GMT
Subject: CN=92c3dfd225a8cd55353e534f6249922ae1bccfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:3e:aa:a3:61:a1:0a:d4:a3:d9:a8:ae:ef:
ae:1e:59:0e:d0:32:a0:6f:f5:ff:e6:31:8f:21:9b:
ae:7f:c1:17:b5:10:38:02:54:b6:61:93:d9:ec:65:
ca:36:f1:4d:47:b1:1e:fb:2e:5a:01:fa:74:7c:fd:
82:60:bc:c9:03:d3:77:37:a4:87:9d:31:72:a2:75:
79:05:6f:36:92:e6:fd:e1:ae:d7:98:32:d7:58:6e:
97:b4:92:8b:92:ff:ff:dc:19:44:f3:b6:3c:bd:77:
2d:a9:3b:c0:b9:d3:70:6a:f1:61:80:5e:53:8f:8f:
e7:4f:90:ba:d7:c1:cf:77:e3:c2:a1:95:25:ad:c8:
b0:c0:f1:81:45:33:1e:80:89:48:55:de:fa:3f:01:
16:17:28:5c:ac:10:57:78:32:89:81:43:8c:a8:09:
f8:96:d7:27:0d:61:9c:ed:a3:80:12:39:72:a9:4a:
c4:43:ff:14:21:5f:fa:e0:28:46:64:0f:60:2c:12:
4a:f9:0f:38:5a:9e:0e:5b:c4:08:75:2c:66:e7:22:
11:b7:5a:2d:3a:d8:54:18:b9:10:e2:76:8b:f8:e4:
28:4f:93:ff:9f:11:3c:3c:fd:5b:27:27:38:b7:de:
1b:5b:cb:f7:60:0f:6c:b2:8d:84:32:d3:55:fb:6a:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:DF:D2:25:A8:CD:55:35:3E:53:4F:62:49:92:2A:E1:BC:CF:E3
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:88:df:f9:c7:cd:8d:f1:72:f9:29:8c:94:72:ac:ef:3f:51:
a7:bf:43:6d:52:f2:72:3d:64:84:da:80:35:8d:ad:20:f3:e3:
5b:59:63:06:bc:30:9e:53:57:03:f2:e3:89:1b:de:d4:df:7e:
4f:45:c3:7c:af:80:b6:0a:a5:11:e8:58:12:dc:9c:c9:e0:f0:
d3:cf:d5:d4:3d:99:e3:ee:e3:48:f0:38:4d:aa:e8:16:66:33:
27:e9:d9:43:65:76:78:11:d0:db:a5:e6:e8:68:3e:69:4a:79:
ad:ca:98:24:51:42:c2:dc:4a:f9:eb:63:e0:e8:98:e1:d5:5d:
ce:ee:f2:c4:fe:10:9b:bc:b0:2c:5f:92:9e:e6:a3:56:3e:78:
2f:45:32:99:06:35:6d:c5:ae:56:61:c2:e9:4e:c8:c9:d6:4b:
2e:6d:26:7c:fb:5c:39:01:02:fd:a1:f6:2c:1d:28:87:47:bd:
a4:05:aa:52:69:11:f6:0d:0f:b7:ef:e3:43:31:f2:88:04:95:
9d:2d:e9:36:1a:48:f6:81:97:75:77:e7:b6:2e:1e:76:cc:d2:
6b:74:5d:8c:d5:8b:e5:c4:56:49:fe:e2:89:b8:da:a4:b1:2e:
3b:93:35:4f:75:d6:20:a3:2f:b6:69:6e:92:76:c7:36:93:b7:
48:36:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:59 2025 by rpki-client