Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier: ZqyYTwx9LA386CxQFX8Uj9gQ4oHxtq/QdpLcrlf65Mo=
Subject key identifier: 06:57:C0:75:30:9E:35:D4:BF:D1:E4:8C:49:91:DE:19:7E:4C:C9:8A
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial: 0199FBEB7111A38BC4C578FBADE3D7C44D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number: 097A
Signing time: Sun 19 Oct 2025 10:02:15 +0000
Manifest this update: Sun 19 Oct 2025 10:02:15 +0000
Manifest next update: Mon 20 Oct 2025 10:02:15 +0000
Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: 20daUEJc5oAy8I1fxfQePDm2apABVY1aRIDmWdnZQNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:71:11:a3:8b:c4:c5:78:fb:ad:e3:d7:c4:4d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Validity
Not Before: Oct 19 10:02:15 2025 GMT
Not After : Oct 20 10:02:15 2025 GMT
Subject: CN=0657c075309e35d4bfd1e48c4991de197e4cc98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:0d:1a:e7:fe:90:b8:6a:c5:56:14:4c:df:
d1:1e:bc:35:25:a1:e0:b2:40:a5:db:01:7d:80:04:
e6:b2:1d:ac:ac:c2:32:8c:87:1b:c0:85:58:7d:b4:
07:7a:96:a5:38:66:6e:ba:e9:7e:a5:42:73:ca:97:
0a:19:1c:de:5f:a1:fb:a3:2e:43:04:66:01:21:3c:
94:4f:bf:73:42:e0:8f:ce:17:2e:47:85:f2:f9:d9:
bd:de:5e:6c:12:9e:6d:e3:38:9e:69:c2:d0:9c:cf:
a4:b6:81:97:93:5e:92:52:e6:9d:d0:b7:45:c6:b0:
1e:41:64:e8:3f:4f:ae:0f:a4:0d:3b:b9:49:c3:a1:
25:e5:0d:df:f7:a5:44:4e:73:0b:f7:09:88:83:ac:
c2:73:46:d3:0a:b5:ff:fa:7f:f3:99:44:03:c1:07:
ae:46:5c:e7:a4:b6:c0:89:19:6f:82:2e:e2:7c:22:
49:cc:44:f8:99:ad:75:3d:44:33:9e:25:56:19:bf:
bb:ea:2b:37:99:8c:91:38:56:ed:2d:bb:ae:75:01:
5a:4c:1a:7c:38:ba:da:30:3a:5c:6e:56:f5:f8:ee:
2f:c3:f6:f6:93:79:6f:03:2a:af:b2:4f:db:e9:b8:
5e:68:2f:cf:5b:7b:c8:35:1c:8e:df:0c:f4:1e:cd:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:C0:75:30:9E:35:D4:BF:D1:E4:8C:49:91:DE:19:7E:4C:C9:8A
X509v3 Authority Key Identifier:
keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:13:ec:95:39:72:ec:90:cf:44:87:1e:01:4c:1f:5e:33:26:
55:5e:fb:fe:e1:59:65:49:a6:c2:7d:16:a3:bc:dc:29:e1:12:
a5:a9:60:82:ef:c9:10:82:89:aa:3c:dc:b4:75:7e:67:c6:4b:
5c:7a:e5:2f:9e:44:b9:0c:51:92:c8:50:f6:1f:73:7a:30:21:
2b:af:18:f3:39:c1:04:80:58:51:36:1c:92:40:0e:f7:73:fb:
38:d2:b2:43:1f:b2:ad:cc:6e:23:d1:59:26:f6:8d:aa:4f:4a:
bd:1c:cb:c7:78:c6:f6:05:e9:7e:81:49:91:40:a3:ab:fa:7a:
72:99:05:bc:83:d8:2a:3c:7d:ef:f4:9c:60:5b:b2:e2:7c:ca:
97:e4:9b:68:ab:d2:86:b5:a2:6d:98:70:66:1d:a2:7e:16:03:
30:22:a2:51:83:b7:b4:fc:d5:2b:d5:b8:90:4f:40:e9:5f:49:
48:24:d9:45:4a:f3:57:d0:02:18:17:bd:dc:f8:d9:0d:c7:29:
10:a5:88:96:af:dc:1e:76:05:72:78:df:92:59:fa:6f:38:f1:
16:1d:97:3e:82:76:aa:a6:25:f7:a7:c2:aa:f0:25:31:6a:3b:
34:82:8b:c9:22:38:12:61:fe:30:9b:65:d4:e1:a0:bb:94:9e:
4d:ed:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:42 2025 by rpki-client