Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: Ch88PwJxoDY58Iroj0VCuyzxCA/hqaXEjRlc+pZ4tTk=
Subject key identifier: BB:52:CF:05:19:C7:28:A0:39:2E:27:FD:2E:58:34:1C:33:3E:9F:28
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 0199FC5845EFD235864665B81BEFB4FE3EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 03EB
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: Az1lTQskrrX++gdt//wEa/Xlki8XZRQ5SK1rkPtF/94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:45:ef:d2:35:86:46:65:b8:1b:ef:b4:fe:3e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=bb52cf0519c728a0392e27fd2e58341c333e9f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:d7:34:3d:bb:98:6f:24:2b:77:3e:af:d4:
0b:7b:e2:49:05:ab:aa:83:e2:b1:b4:25:c7:0e:b1:
ab:8e:7b:8d:27:be:d4:05:98:f5:08:24:9e:4c:87:
fe:13:2d:86:da:1b:e1:08:62:88:47:bc:ca:5f:62:
71:ad:7c:4f:cb:0b:78:50:27:7e:86:d0:3a:ec:4f:
1f:fc:bf:47:ee:9b:18:0f:e8:cf:ab:a5:a8:6d:4a:
34:67:ab:2b:22:82:e9:7f:8e:23:e9:43:11:98:b0:
4e:83:75:18:0e:11:60:76:96:d6:74:57:88:1f:c1:
c1:45:f9:7b:01:83:96:31:95:8b:3c:e4:69:46:06:
23:3b:ae:f0:55:ef:06:0a:fd:44:8f:27:0d:d1:3b:
99:77:3c:07:e0:4b:a1:90:cd:71:9c:22:d0:f8:4b:
88:8d:f9:9c:78:5e:75:39:87:2d:73:49:ce:b8:b2:
a3:96:17:b5:dd:80:f1:b1:99:9c:95:c8:f2:b9:3b:
ab:15:9b:55:56:c3:83:d7:c7:44:47:bd:99:dc:2b:
14:b5:34:1e:e0:b7:81:81:f9:23:56:c1:24:bf:79:
66:30:aa:ba:ed:39:81:8f:c5:aa:ef:d9:62:d5:bd:
3a:98:fe:43:b0:ee:0c:1a:46:b9:d3:c0:fd:4d:f9:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:CF:05:19:C7:28:A0:39:2E:27:FD:2E:58:34:1C:33:3E:9F:28
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2d:a9:4e:c5:f1:56:85:4c:6b:28:90:0f:b0:05:94:c5:c1:
e3:16:d1:72:8c:4e:11:3a:4f:fc:20:b3:2e:45:ed:f7:0f:2d:
ac:3b:b3:1e:14:d1:45:62:cf:f9:93:7e:7b:f6:57:0a:4f:99:
4a:26:44:ca:51:60:4d:fc:76:5e:f1:85:69:6d:93:85:20:82:
e4:1d:15:be:53:58:1d:6f:d8:0d:22:a4:a8:83:3a:a6:a2:ce:
ad:c7:ff:7c:87:52:1a:39:ba:53:54:61:1c:34:a7:96:96:43:
04:6b:df:07:00:4e:dd:f5:06:85:52:f7:7d:fc:0c:22:81:a7:
63:7b:94:5c:46:ec:8c:61:2a:e5:71:61:80:59:ff:66:17:9b:
81:14:7a:cd:76:dc:57:42:12:35:2a:74:59:7a:02:9a:4f:65:
45:83:4a:4b:e4:5d:39:7c:f7:77:01:2f:db:30:b1:81:04:df:
7d:4f:43:49:0b:83:38:c4:be:27:03:97:12:2b:be:16:6c:31:
9b:ac:58:2c:87:b2:65:d3:7a:20:bf:b3:6f:5b:c4:7d:2f:f5:
c3:eb:16:71:ae:7d:76:dd:b0:19:22:4e:fd:49:47:9b:93:6c:
2b:64:e0:c2:a0:68:0a:ed:5b:99:ec:cf:19:e5:94:0b:2d:6d:
21:ea:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:57 2025 by rpki-client