Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: +mvjzO+gxcJvkBWH4/NYQ62bt4e2qvUCOsxQFf1UrUk=
Subject key identifier: 1B:8B:38:89:86:19:A3:39:D5:58:0A:C2:20:AC:9C:92:6A:AD:A6:FF
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019A1F516E17EDD43F0BE0ACB28FDCFB016B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 0628
Signing time: Sun 26 Oct 2025 07:00:21 +0000
Manifest this update: Sun 26 Oct 2025 07:00:21 +0000
Manifest next update: Mon 27 Oct 2025 07:00:21 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: TTGnMs8BZOblBFQntnVWZRowz2431S3U71BJvnlXaZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:6e:17:ed:d4:3f:0b:e0:ac:b2:8f:dc:fb:01:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Oct 26 07:00:21 2025 GMT
Not After : Oct 27 07:00:21 2025 GMT
Subject: CN=1b8b38898619a339d5580ac220ac9c926aada6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:b2:5c:d7:85:0c:13:28:19:f2:90:00:48:
a9:80:06:5c:83:47:11:93:da:bb:f5:ce:55:ff:06:
1b:20:13:60:40:a9:60:04:5d:ca:fa:bd:3a:d1:c5:
2a:58:02:30:4d:e3:0d:05:32:d0:5f:40:34:df:86:
f2:a9:f6:d3:aa:26:b0:52:97:74:95:94:dd:6c:16:
72:21:27:ba:1c:46:b7:49:ba:8b:da:55:18:5b:b9:
de:d2:68:ac:d1:13:89:43:3a:de:fe:82:8d:7a:e1:
55:38:9e:0b:26:aa:03:2e:ca:d9:71:17:b7:94:7a:
67:77:d1:c7:88:60:54:78:41:1e:55:11:95:9e:e5:
50:1c:da:80:b1:ba:cb:c6:3a:4f:f9:28:17:31:87:
cb:97:25:d6:cd:43:17:92:2d:98:b8:29:82:1f:38:
fc:78:5d:3d:66:21:e0:ef:92:cc:64:65:c2:f8:46:
dc:19:fa:74:1a:43:ee:8a:8e:e0:df:bb:c8:6a:c3:
3c:f4:90:2b:36:0f:62:dd:63:e9:7c:2f:cd:d4:92:
e4:ce:91:95:18:d7:c0:1f:bf:a2:dc:8b:d1:6f:0d:
71:ff:cc:c4:60:97:9f:9f:04:15:d7:ea:eb:8f:f3:
47:00:28:ee:8b:19:d0:82:24:64:76:c8:26:54:c8:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8B:38:89:86:19:A3:39:D5:58:0A:C2:20:AC:9C:92:6A:AD:A6:FF
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:46:3e:b3:7b:b6:6f:64:cd:e5:75:c4:b6:11:e0:d6:70:07:
38:b6:2d:61:16:47:22:de:98:87:2c:6d:ac:1c:b4:e5:d7:4c:
24:af:c2:6b:da:78:22:64:6f:4c:2b:32:62:bb:cb:f6:77:9d:
00:3b:33:76:7a:f2:d4:61:a5:b7:d5:16:ee:e8:8f:37:6e:22:
57:58:5b:17:f5:f5:3b:70:1d:a8:d3:ce:a3:f0:f0:30:cf:4f:
b0:a6:ab:3c:37:79:a8:db:c2:06:95:f0:e0:79:0e:8b:a0:03:
83:ce:a6:8a:bc:ae:34:51:4e:9a:60:27:63:8a:12:f8:0c:a6:
3f:b3:1f:fd:03:c6:98:70:b3:7e:00:22:7f:f7:84:af:cd:10:
61:0f:ab:9b:24:a7:9e:f6:ae:ee:77:24:86:e0:c8:42:75:10:
62:2e:95:72:4d:0d:1f:db:8a:67:09:b2:2a:80:4a:fd:26:8d:
79:ac:75:2d:7c:34:3e:d5:46:75:0e:2f:fe:cc:52:03:79:1e:
3b:a5:fe:a1:5f:cb:5e:0d:5a:0d:74:73:ba:f9:aa:db:70:0a:
ae:28:2d:24:5a:3e:a6:fa:67:5e:4f:7d:6a:51:49:4e:e6:77:
25:4a:8d:8d:0d:71:30:41:4a:71:e8:5b:6a:75:c1:0d:e3:3f:
7d:a0:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:56:00 2025 by rpki-client