Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: id3I5H3U49eTpSqg6+D1KWl5UccLQTA6co7NSMBABmU=
Subject key identifier: DA:88:0A:D6:8F:37:5D:AE:56:82:81:F6:D3:45:D7:6C:E3:6A:D7:A0
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 0199FB4607376B8FA4D8DCBA300F51D0B40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 10BE
Signing time: Sun 19 Oct 2025 07:01:34 +0000
Manifest this update: Sun 19 Oct 2025 07:01:34 +0000
Manifest next update: Mon 20 Oct 2025 07:01:34 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: wZpsDdr1LSzCWLUl2K4eNLEbuu/gEdKai8yZB/xGPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:07:37:6b:8f:a4:d8:dc:ba:30:0f:51:d0:b4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Oct 19 07:01:34 2025 GMT
Not After : Oct 20 07:01:34 2025 GMT
Subject: CN=da880ad68f375dae568281f6d345d76ce36ad7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:84:4c:5d:27:5a:94:5c:2c:78:e5:c5:bb:
28:4e:20:dd:3d:bd:c7:5f:0a:19:6b:7c:7f:0e:f7:
5d:4a:a5:cf:ec:2f:66:ad:dd:dc:b6:67:fd:15:c4:
78:80:8d:ba:73:00:b1:6c:1c:40:c6:be:0c:28:54:
e0:73:39:f4:28:15:31:7b:51:f5:24:a1:2f:f6:e7:
e3:97:a7:b3:c8:9a:75:a3:67:c5:e5:bd:6a:fb:a7:
0f:17:c4:97:42:9f:92:ad:22:e6:48:63:2c:c2:ae:
cb:0e:fe:68:e1:9c:34:19:42:ae:ed:f3:73:fa:ee:
d2:48:68:d1:f2:59:1c:e2:35:00:30:4d:b1:d2:f5:
23:7a:59:48:2e:b0:c5:18:76:a5:50:3c:ba:ef:83:
b4:47:75:2b:e2:a4:37:64:1c:f8:e4:ec:c8:86:be:
40:27:f8:6c:4c:ca:72:1c:ec:23:3d:f8:1c:ef:a9:
3e:4e:10:ba:3c:36:4f:99:e6:fe:38:3a:9e:c9:3a:
db:c3:34:73:91:ea:34:7a:96:99:c9:50:0e:0d:17:
1d:44:a4:70:3c:f6:5e:80:9b:0c:4b:ba:8f:81:f9:
55:a7:6e:d2:b0:8f:e1:fb:ec:10:bf:fb:af:de:00:
10:7f:b2:d8:05:af:9d:0d:cf:53:3d:1a:a4:2e:3f:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:88:0A:D6:8F:37:5D:AE:56:82:81:F6:D3:45:D7:6C:E3:6A:D7:A0
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:85:13:74:eb:9d:31:ff:a3:dd:fb:df:31:b3:39:4b:76:a5:
7b:e0:f6:3e:e7:ae:f3:ba:2b:b2:2c:e5:8a:90:56:53:f2:63:
f4:16:35:ab:d7:7e:85:56:d0:0b:d6:14:31:50:1d:b8:9a:ee:
5c:aa:62:1a:16:d7:8f:db:5a:b0:7d:9a:8a:cd:54:85:b6:3c:
b2:0e:56:6c:f4:18:de:67:a9:19:d8:30:9b:64:a2:36:14:a8:
cf:27:a5:25:d4:fe:c6:3e:6e:28:ce:50:e8:02:f5:9d:50:7c:
2b:62:e8:74:11:17:96:3c:c1:ad:20:e9:4d:79:30:da:0a:e5:
ee:e0:98:c4:b2:72:01:cb:c7:13:72:83:b1:ac:fb:58:2d:95:
10:de:e1:47:85:d1:69:6c:48:26:59:65:13:25:f2:8d:ab:9c:
d6:d7:95:7c:a8:76:0c:08:97:b1:50:3e:9b:a1:60:99:c7:02:
94:bb:b1:1f:d8:ef:9b:d5:88:cf:31:4c:5c:88:2a:bd:4f:21:
ef:e5:7f:3e:ae:03:7d:1f:90:26:b4:99:9f:1b:45:5a:24:f0:
34:0c:51:5e:76:55:a9:8e:11:fd:24:ae:43:55:9e:39:e1:db:
42:98:39:45:38:d9:1b:3d:a0:dc:20:a8:8e:10:ec:ef:14:4f:
03:d6:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:00 2025 by rpki-client