Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: iK6ZkmSFAMOFg8YB7N4tQWLM/n6JgwkiUeDRkBW7964=
Subject key identifier: 31:A6:E5:DB:EF:00:40:45:D9:C3:20:2E:1D:6D:E2:6D:D1:6B:9C:D7
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 019A25C19FB66FFFC10D04677956B66CD3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 0410
Signing time: Mon 27 Oct 2025 13:00:37 +0000
Manifest this update: Mon 27 Oct 2025 13:00:37 +0000
Manifest next update: Tue 28 Oct 2025 13:00:37 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: 3jOm6jycmUcNpsxOo6X1wp2jGiR/Bg/EXsGfj8Ykk3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:9f:b6:6f:ff:c1:0d:04:67:79:56:b6:6c:d3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Oct 27 13:00:37 2025 GMT
Not After : Oct 28 13:00:37 2025 GMT
Subject: CN=31a6e5dbef004045d9c3202e1d6de26dd16b9cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:28:7e:56:e8:f4:f4:6f:be:95:64:15:fd:
c2:32:23:80:90:92:3e:fe:33:3d:07:b1:6f:f5:a5:
2b:30:85:76:77:8c:cb:2a:a5:15:a1:fe:dc:e8:c3:
f5:57:ce:54:99:ab:00:2a:d7:ee:73:f8:50:6c:e1:
e9:89:10:1c:93:a9:4d:67:66:73:1f:e3:3d:5f:2d:
6b:41:e2:e4:65:44:6f:51:73:84:59:3f:ec:96:6a:
05:c8:f7:d6:81:2e:7a:a5:45:54:66:3d:e5:37:93:
13:c4:ee:75:35:e5:16:3a:28:68:6c:e3:58:93:2a:
4f:22:5b:f1:9e:af:c3:31:3d:6e:09:04:86:c9:35:
1e:6e:3d:ea:ad:d8:52:4c:f0:2b:22:d9:02:0a:e4:
da:02:86:db:5b:1a:4b:cd:b6:ab:a0:88:31:c4:2c:
92:82:1a:36:6a:23:8d:9e:bc:0c:19:89:b1:cd:42:
5c:3b:fd:de:a4:35:2b:0a:95:f9:89:c7:f7:f2:5f:
c2:db:92:d2:42:cf:77:37:80:5c:6f:8c:8f:fe:a5:
66:23:6f:9c:6d:64:00:18:e7:ec:e1:2e:3e:b1:80:
fe:e0:92:f3:b0:2c:75:ff:4d:10:39:91:06:c8:01:
50:2d:01:29:f2:66:dd:43:54:78:13:54:5c:87:21:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A6:E5:DB:EF:00:40:45:D9:C3:20:2E:1D:6D:E2:6D:D1:6B:9C:D7
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cd:c3:da:eb:89:89:06:dd:08:3b:72:4d:e6:0a:96:cd:ba:
0a:e9:98:92:18:5b:d8:f1:ab:0c:79:40:05:6a:1d:89:c0:07:
0f:6f:bb:e8:f9:2e:f1:55:49:59:c4:4a:9f:d4:b7:24:04:9e:
f1:94:63:cb:ec:57:fc:4f:61:f8:bc:b2:d6:9e:03:78:73:24:
33:78:15:d6:45:09:71:fa:55:2c:d1:c3:41:5b:23:7a:30:dc:
20:67:3c:f3:6a:b6:95:e3:2a:a9:c4:40:e4:a7:f6:02:58:2b:
e9:75:dd:ea:74:8b:56:52:89:3c:cb:fc:2f:6b:24:de:9e:d2:
a1:07:e1:68:ed:1b:a7:fb:dc:0e:bd:29:48:c2:94:60:dd:e9:
e4:3b:8c:ae:6d:f2:d7:f7:0f:2a:52:6b:34:84:80:85:d0:11:
a6:cc:1a:0c:83:95:43:8e:83:b2:e6:8b:18:47:34:3b:79:8b:
da:83:27:35:d4:19:0e:f1:bc:d8:26:ff:a3:c8:68:67:fb:49:
86:e4:71:8b:ca:12:e4:7a:de:ef:39:f2:0d:31:27:78:1d:c8:
8a:fa:ff:d7:f1:fa:40:d2:f4:4f:b8:ff:1f:8b:b0:0b:97:39:
3d:c5:9c:0c:2a:e5:01:a3:4c:41:ab:5a:95:87:62:9d:05:c3:
41:23:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:22:34 2025 by rpki-client