Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: ea2yF8xDvrPPo4UwH2Qfh6adswI55NrA7r0RSLwMwy8=
Subject key identifier: 54:73:AC:50:1D:C1:39:5E:58:5D:CB:F1:94:56:2A:34:A0:9A:D0:CB
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 0198C7920F01C99782D6AC29F8D6DBC21115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 15D8
Signing time: Wed 20 Aug 2025 13:01:34 +0000
Manifest this update: Wed 20 Aug 2025 13:01:34 +0000
Manifest next update: Thu 21 Aug 2025 13:01:34 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: 0Fo0EWG0YjFmf1aWGiuP/tboI5Xj2qIH7Cpt7oPfG3g=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:92:0f:01:c9:97:82:d6:ac:29:f8:d6:db:c2:11:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Aug 20 13:01:34 2025 GMT
Not After : Aug 21 13:01:34 2025 GMT
Subject: CN=5473ac501dc1395e585dcbf194562a34a09ad0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:25:0a:1d:77:3a:d0:27:43:62:1c:ff:7c:
90:13:46:6d:e3:56:e4:4a:15:69:03:b9:a2:e4:8e:
a4:7f:22:58:92:1a:fd:8f:ec:46:f8:df:ac:f6:5f:
81:59:b8:b6:f1:88:a6:03:19:e5:86:d0:ed:aa:37:
a0:97:ec:39:5d:16:29:19:82:79:75:f5:29:78:88:
0c:ad:6c:a9:10:d3:61:6c:7a:c3:c1:4a:77:33:e8:
8e:d8:0a:0a:fe:02:e5:c3:19:c9:0c:bb:36:22:1b:
05:dd:72:f3:19:e8:eb:4c:ac:d5:fc:8c:49:73:04:
cc:07:c5:64:15:f6:27:ed:95:bc:33:67:a3:7b:b9:
00:1e:64:c8:32:36:b9:6e:a0:31:c5:2f:c8:b8:22:
38:af:8b:65:34:a3:e3:a7:95:72:a6:5a:75:5f:bd:
1f:b0:79:16:e3:3b:99:c6:15:be:e3:89:9d:04:68:
4c:fe:3a:24:c8:c2:82:16:a1:d5:4e:14:39:cf:2d:
85:33:79:bb:c4:81:eb:d9:1e:91:25:79:6d:85:10:
b1:1b:83:50:8c:a7:71:45:6e:50:25:d3:52:31:e7:
89:e3:3c:fe:1f:35:8c:e9:d1:00:b8:9b:a3:a3:08:
a1:93:16:d8:a9:60:80:01:53:c3:01:2c:d2:e4:35:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:73:AC:50:1D:C1:39:5E:58:5D:CB:F1:94:56:2A:34:A0:9A:D0:CB
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a2:99:6d:e5:3b:17:22:ed:8e:77:1f:ef:da:b1:70:8b:f8:
23:65:7d:96:f1:2a:fd:3a:1a:e9:a9:14:c1:3f:25:37:1d:57:
70:3b:b8:2c:42:59:cb:32:9d:0c:a0:9c:c5:c2:30:2d:e8:15:
72:e2:36:9b:9a:2b:f9:86:6c:fc:00:03:be:13:26:b6:2c:a9:
f1:cb:97:60:c9:5c:37:5c:46:a4:b7:6b:e9:43:fb:aa:9e:e8:
35:68:01:79:2a:70:23:97:38:7e:9f:cc:e2:dd:e2:1c:a4:5e:
ee:00:01:11:19:1a:87:77:8e:41:f3:7a:0a:52:75:4f:ce:6f:
c4:d1:eb:60:ce:b4:51:3b:6c:73:f5:33:75:22:41:90:10:a6:
75:18:6e:16:5d:e0:33:56:23:a3:da:4c:ea:ab:4e:2b:d7:41:
7e:81:5a:03:de:cc:d0:0a:9d:02:d7:6e:25:ce:57:15:65:30:
ad:72:1b:b9:3b:9c:63:5a:fd:1d:ea:34:de:66:89:85:1e:84:
b9:1d:36:5d:0f:ac:5e:9d:4a:cd:5f:45:f8:21:a1:38:bb:05:
90:d1:2f:5b:3c:69:01:85:f3:34:12:a1:9d:37:3d:4d:bf:99:
5d:63:a8:18:04:c4:cc:55:4e:c2:20:19:54:f8:75:0a:48:fb:
eb:87:43:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:28:09 2025 by rpki-client