Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: 0xeNcWCY9xfqoF/26OAAHiQhsT7jCgOn/tfOe8Fqpio=
Subject key identifier: A0:9A:10:CE:61:5F:DA:6E:5F:03:44:F2:89:2E:AB:55:68:43:3A:00
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 0199FCC61647B4CF04E8BC36BA783798DD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 1484
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: +bF8Wm2ZcB0E7PlcrxuZSlbKreyHyoqwewr+qt1fQa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:16:47:b4:cf:04:e8:bc:36:ba:78:37:98:dd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=a09a10ce615fda6e5f0344f2892eab5568433a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:19:29:90:4f:6f:55:7b:0c:a6:3d:b5:23:
e5:03:cb:d9:ae:e9:0c:00:89:72:a9:e4:22:d9:f7:
14:6d:01:21:b5:ed:66:66:27:47:67:60:2a:e5:a2:
8c:36:d1:9b:3f:3a:2f:e8:82:68:3b:3e:62:5c:90:
89:64:e2:ec:ea:c4:39:dc:a5:2f:ce:f4:47:7e:fe:
de:ba:a9:9a:38:46:82:35:84:f2:7d:07:37:0c:2e:
ed:91:a4:77:04:83:bb:91:b9:bb:80:ec:6f:79:c3:
71:f7:a1:8b:61:b4:fb:2a:00:08:4f:18:2a:31:d7:
fe:df:f2:3e:a8:c1:de:cf:d3:55:22:7a:c9:2c:c0:
a6:47:3a:b9:b6:8a:85:da:24:2d:df:a9:3a:76:4f:
2b:85:2f:a4:d6:e9:46:51:13:5d:b0:5e:4c:ae:73:
6b:f0:8d:de:a9:8e:86:20:e4:3c:72:67:8a:01:8f:
cd:63:b6:fc:8c:35:c5:97:09:17:8e:b2:a6:63:ec:
e3:20:10:ac:fa:47:50:e2:c7:76:b8:00:b4:d1:1c:
24:2d:2b:ea:17:15:68:51:1b:ed:f3:5b:10:cb:f8:
f4:a4:2e:8e:82:18:24:12:95:80:58:33:b0:29:9f:
d2:ac:62:d8:59:39:8d:16:e9:64:69:f7:6e:f3:d6:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:10:CE:61:5F:DA:6E:5F:03:44:F2:89:2E:AB:55:68:43:3A:00
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:16:62:b4:da:d2:56:cc:55:6c:e7:62:40:10:05:0e:f2:a0:
41:94:dd:5e:d8:a2:1c:f0:e5:05:9f:fc:17:18:2e:c3:cf:ac:
a3:08:20:b4:82:3b:a8:42:34:7c:5d:03:2a:b9:f6:09:92:56:
1f:a4:e5:a6:d3:50:ff:67:e2:73:87:36:a5:93:9e:b2:1b:8a:
5c:9e:55:a9:05:de:8f:af:e8:0b:2c:2c:75:f3:6c:73:c3:d8:
09:f3:29:2a:8a:10:db:8d:7e:86:b8:2a:a6:07:e0:08:e3:a1:
2d:a9:7f:97:63:26:32:b2:05:24:aa:a2:90:b5:93:a1:68:e3:
45:a4:36:a7:97:35:80:dc:d9:4b:22:21:0f:f6:c1:06:fd:27:
25:47:fc:01:85:7a:bd:21:6d:fd:67:90:da:19:90:8e:3d:63:
2c:1c:07:8b:fe:bc:74:b8:58:b8:c0:0f:0e:cc:12:29:bd:c6:
df:df:ed:be:60:37:aa:05:f1:f5:4d:2a:c2:88:61:10:c3:21:
1c:ba:0f:34:d6:27:1c:af:ff:ae:c3:eb:d0:84:a5:c2:83:a2:
2b:1f:14:7c:8f:4d:c6:55:4a:44:4f:25:fe:69:32:a9:71:86:
d5:01:23:4c:2d:56:72:b0:bc:c6:38:38:0d:c7:20:06:10:ed:
53:e4:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:05 2025 by rpki-client