Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File: _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier: HQ1ahtTvU7JSVa2waawUBpdSKJBIfTmgfXMJP18kh58=
Subject key identifier: 9B:DE:FD:92:D2:C7:3E:17:C2:96:66:93:62:7B:EA:6B:7E:2F:87:0C
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer: /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial: 0199FBEA758FCAF29F23FAB6533074479DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number: 04FD
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: 91jq1L7qsL5WC42I+qosOsufgfAnPEwvQzO4sbFHdUU=)
2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:75:8f:ca:f2:9f:23:fa:b6:53:30:74:47:9d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=9bdefd92d2c73e17c2966693627bea6b7e2f870c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:40:eb:fd:4d:cf:79:88:36:81:9d:57:93:
11:b3:aa:3f:79:c7:dc:14:3c:df:ca:1e:5f:df:70:
90:e8:78:30:af:ab:84:aa:2d:88:cd:0d:d9:03:b0:
42:5b:08:1e:43:e3:8a:dd:07:ca:01:3e:a9:2b:dd:
d5:2e:e8:e4:aa:d7:74:0d:2c:0c:98:0b:7b:36:2f:
22:52:97:01:6a:99:a8:d6:08:5f:da:e2:35:b1:32:
be:79:fd:5c:d9:51:8f:97:c0:75:68:70:96:16:6b:
81:32:03:fb:60:7e:9a:41:70:6c:65:43:17:d7:c5:
78:33:cd:8e:e3:92:71:92:7d:31:52:ac:02:08:ad:
80:01:a4:d5:3b:4e:dc:3e:95:a8:1e:ad:50:4f:b1:
d2:4e:48:af:93:70:d9:21:cb:ca:c0:85:42:ed:a0:
02:1f:1f:a1:a5:b5:32:41:2a:53:cd:36:a5:24:29:
77:3b:48:49:eb:69:b3:a9:d0:82:38:e5:33:4e:68:
e7:d3:91:09:a7:27:9f:bb:4d:24:d6:be:ee:bb:16:
7c:f2:89:d5:73:f2:0d:1c:68:d3:ff:a7:56:7c:73:
73:49:f3:5d:4c:aa:b4:6c:46:13:df:16:65:9e:a7:
06:69:08:00:9b:fa:07:30:ea:7f:6b:f8:46:6e:a4:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:FD:92:D2:C7:3E:17:C2:96:66:93:62:7B:EA:6B:7E:2F:87:0C
X509v3 Authority Key Identifier:
keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a9:4a:6b:09:eb:9e:22:5c:7b:62:ef:36:ae:06:0b:42:e0:
10:df:95:34:97:ab:07:e7:39:8a:bc:87:f9:67:e0:92:61:03:
c2:62:d1:b7:b6:b7:ff:37:f1:c5:6f:fe:5c:31:35:56:05:1a:
30:0c:e0:7b:5e:d3:38:57:0e:89:88:0c:c1:19:c2:a0:10:f6:
9d:7f:8e:39:ea:18:d3:1a:25:8e:16:d4:4c:45:d0:b2:b8:bf:
bc:dd:66:a4:67:6d:b3:26:85:fb:f1:79:ad:71:33:6c:f7:f3:
a2:fb:b1:f5:30:a3:82:ba:18:c3:01:86:fc:b5:0c:8f:b4:f7:
80:89:7c:88:43:ae:0b:35:bf:e5:bb:28:1e:35:93:0b:8d:f9:
09:78:41:27:5e:10:b9:2b:ce:23:ff:80:d5:8a:cf:28:84:a0:
7e:90:15:ff:de:7d:fc:1e:d4:de:8c:ca:1a:00:c5:a1:b8:dc:
af:fb:65:8c:e0:c7:a5:1f:eb:17:9f:01:e8:60:75:ca:dd:7e:
46:8d:48:33:21:15:be:24:d6:a8:28:4e:81:fc:fa:fc:08:7f:
cb:7a:d5:53:1b:f0:5f:3c:13:bb:38:ba:95:7e:c2:21:cc:5f:
66:03:b3:1f:2e:bc:26:5d:4a:af:06:e7:b7:4a:a2:00:f2:b3:
7a:e7:df:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:40 2025 by rpki-client