Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: vuPEPPHVdbNTqndjxqbnHz+kRJr9P5/U6uDlnTN1PhA=
Subject key identifier: 57:74:26:F1:62:4A:AD:03:76:65:7C:4A:6B:62:4E:BD:FA:C5:F7:10
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 019A209BC252D6A014B6C74C65B0D8A99472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0FA3
Signing time: Sun 26 Oct 2025 13:01:09 +0000
Manifest this update: Sun 26 Oct 2025 13:01:09 +0000
Manifest next update: Mon 27 Oct 2025 13:01:09 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: kug59lirU+l5rVeGKdTjeToxyVZG7Sox3Bpf9+LteW4=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:c2:52:d6:a0:14:b6:c7:4c:65:b0:d8:a9:94:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Oct 26 13:01:09 2025 GMT
Not After : Oct 27 13:01:09 2025 GMT
Subject: CN=577426f1624aad0376657c4a6b624ebdfac5f710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:42:de:cd:e1:5d:66:09:2e:9c:4a:53:39:
dd:c2:68:a0:7b:56:59:d6:0e:ce:cc:a0:72:65:37:
61:15:17:67:b1:fb:ba:3e:8f:cd:2e:69:82:09:6a:
68:c6:b2:95:6e:d7:66:de:aa:13:13:d1:da:e0:47:
d6:58:a2:87:31:4a:16:4e:9b:dc:62:30:23:12:4b:
a8:82:70:0c:4d:88:b4:7c:50:c1:c4:b4:9d:d7:0e:
64:66:5d:02:64:38:0e:8a:27:56:f7:a6:2a:87:a3:
52:1c:fa:60:0c:62:14:1d:91:e7:a3:b8:70:dd:d5:
32:ea:0c:1a:4b:3a:6c:6a:c7:ef:72:4a:0e:2c:a3:
26:35:4c:41:a7:05:1e:ca:17:99:f0:f6:da:05:c5:
c4:e6:93:50:20:a4:5e:45:20:5c:8a:b4:5a:3a:67:
7f:64:58:4d:f5:57:eb:7c:ea:7a:fe:25:a2:e5:48:
e4:f7:92:d2:48:8a:b6:1a:8d:8c:7a:4e:98:82:6b:
3b:63:82:d6:d2:10:77:e1:0d:ae:8d:bb:c3:9a:df:
20:28:09:82:a6:af:ec:c6:ae:71:a7:e3:f7:6a:8b:
5e:df:cf:a6:08:40:86:bb:8c:91:fe:23:14:2b:fc:
2b:59:bf:cc:cf:cf:61:85:ab:97:e9:e7:da:2d:07:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:74:26:F1:62:4A:AD:03:76:65:7C:4A:6B:62:4E:BD:FA:C5:F7:10
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9d:c1:65:6a:8e:fd:11:34:4e:a2:c5:01:20:a9:2a:5a:d2:
8e:12:36:73:fd:2d:6d:e2:92:20:c3:68:0d:25:57:f0:fb:c0:
8c:62:ca:9d:10:b2:32:d2:3b:96:0d:f6:83:d9:39:a3:06:c2:
17:9e:4e:e3:b2:d0:2b:70:1f:c4:2c:40:b5:3e:b9:08:ef:cc:
f0:dd:79:a8:e0:90:fe:4e:6c:2d:d1:30:60:1b:be:4b:16:83:
e1:b7:5e:e1:73:44:5a:50:19:2c:56:e5:da:03:20:4c:f4:66:
3c:ea:6d:4e:07:61:1a:f2:e4:36:59:86:15:81:05:0d:e0:d1:
f6:7f:bf:f3:76:7b:3c:cb:09:67:4c:64:66:a3:e0:da:84:e9:
c7:8d:e9:6e:87:50:f5:3a:e2:e4:fe:f9:2c:2e:27:fc:61:2d:
31:06:46:cd:46:b7:f5:15:a8:b0:41:d0:ce:e8:9e:e0:86:dd:
72:6b:43:bd:cf:60:bc:f6:fe:a6:0d:82:95:58:36:03:39:01:
21:09:e6:c4:34:7f:da:11:67:64:0b:80:82:a2:b6:69:e2:a2:
13:6c:ff:f2:fe:56:39:22:ad:6b:28:7a:0a:7e:d0:1a:90:fb:
73:bf:00:18:95:9d:b5:b3:e9:0d:76:21:82:e3:c7:80:6f:27:
1a:21:31:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:54:13 2025 by rpki-client