Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: xTcBudRkFxz/sWioghtS318QHwP3jb2QLqshHTF+cUY=
Subject key identifier: E0:02:2A:C5:BB:08:98:2C:4D:DC:51:34:35:D9:3E:EE:A3:8B:73:F7
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 0199FCFD9283EF22C27E6C5B183B3AE5BB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 062C
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: KyNwSXzvxP57dM1HsV7BJP22UhQCihq/bMc1MNG/H74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:92:83:ef:22:c2:7e:6c:5b:18:3b:3a:e5:bb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=e0022ac5bb08982c4ddc513435d93eeea38b73f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:d1:cd:32:7b:bd:4d:37:cb:d5:45:d7:20:
7c:79:33:ec:37:7b:77:a5:de:38:23:5b:5f:a4:40:
7b:fa:ab:bd:dc:05:65:f9:7f:1c:7d:cd:31:f2:0f:
c4:b9:42:2d:06:bb:29:3e:46:da:36:1f:14:04:d1:
60:8b:e6:bb:9d:3e:14:ae:10:2a:c2:7f:cc:3e:57:
bd:3a:8f:0a:79:bf:9e:4f:04:28:0f:7b:66:c8:fa:
9c:6c:c5:98:71:f2:37:d6:6e:c1:26:a0:7d:a6:dc:
28:ee:b1:ce:06:8a:7e:c3:f1:50:d3:41:c7:28:4e:
5e:35:83:7f:91:16:88:cc:a3:14:59:96:ae:f9:89:
44:97:0e:79:19:3f:73:b8:0d:de:aa:2d:72:86:95:
58:d2:24:f8:17:7e:36:7c:e1:bf:7b:ae:1e:d7:db:
58:2c:4e:7d:91:31:0c:91:f3:57:ca:75:80:b6:51:
a3:4c:fb:83:47:a3:10:3c:50:e1:2d:3a:7e:f0:27:
2a:22:88:68:5e:ca:5b:b1:70:59:35:2c:80:ef:bf:
5c:d3:34:50:14:f9:22:95:df:1c:9b:88:ba:b2:7c:
07:5b:00:22:b0:52:a5:e6:48:03:23:5c:66:d9:7b:
a2:ca:18:d5:07:49:db:1d:cc:49:2f:06:3e:d7:12:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:02:2A:C5:BB:08:98:2C:4D:DC:51:34:35:D9:3E:EE:A3:8B:73:F7
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:1c:77:9b:95:c9:72:a6:40:4c:e5:3b:92:2e:3e:91:db:
dd:65:2e:6f:31:5d:40:05:fd:6b:f8:4a:c2:98:16:8f:25:cc:
c7:32:8d:ed:81:2c:bd:9f:96:7b:f3:3b:fe:bb:f5:79:61:f2:
5d:35:4e:9f:4d:07:50:4c:6b:16:57:6e:24:71:3a:88:ba:8c:
9c:f3:f1:d7:1f:b4:88:6a:62:56:27:50:2b:0c:90:23:39:61:
44:31:18:cb:d5:44:ef:dd:52:3d:7e:47:cf:cd:a6:e5:d9:e9:
7b:4a:c2:04:a4:cf:80:77:3d:e2:81:67:3e:71:92:b9:0f:4f:
25:3e:84:56:ec:b7:c3:98:7d:bd:0d:83:9b:2e:86:fa:ae:06:
30:49:0c:24:c3:15:7a:fa:e2:82:87:9c:1f:2b:fb:19:ff:2e:
32:ba:a5:6f:86:52:cc:22:54:3f:0f:6a:84:bb:84:d0:20:f4:
e4:86:e6:36:b0:ae:be:0a:c5:22:82:67:a3:59:f1:7b:0a:2b:
cf:bf:9f:13:74:48:95:e7:91:ca:f9:c1:63:6e:a0:40:d0:ad:
12:de:f0:e7:68:47:3c:50:e8:fa:62:52:22:31:4c:be:e4:26:
4b:44:62:b9:ed:19:64:1a:07:d7:ab:6b:11:bf:1a:33:dd:ae:
fe:e5:fb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:49 2025 by rpki-client