Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier: UfrL41cExLU+eyI3JZsq2aAj9xMBt3JclrCT37tReXo=
Subject key identifier: DD:BA:D5:35:C9:CE:7C:5C:E7:04:E1:02:3D:95:2D:54:50:20:89:B0
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial: 0199FC8F18947F026C2FEEDF13C3C790FA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number: 0F64
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: AWAbRzaKqhHcewxv2QMKlWg5pMrqQcMEmaIAD/ISp0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:18:94:7f:02:6c:2f:ee:df:13:c3:c7:90:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=ddbad535c9ce7c5ce704e1023d952d54502089b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:5a:bb:bf:f9:a5:e1:66:68:eb:12:7e:38:
d7:36:fd:43:34:fb:4b:de:ca:4b:ef:25:ec:ee:75:
52:04:75:98:51:59:34:62:3a:ff:0a:3d:c6:71:29:
45:53:54:18:fa:8e:6e:53:63:5a:f2:50:b8:f1:8c:
ba:0f:da:52:2c:9a:cf:27:f1:24:c0:5b:4f:4c:52:
d3:16:6d:97:23:11:ec:2a:fd:c8:64:a3:ad:16:b8:
f7:e4:c9:de:39:f0:78:6f:ed:a4:17:93:7a:2a:02:
83:05:95:48:c5:7f:8c:e7:8b:95:be:8e:12:82:40:
81:ba:bc:fc:07:b3:45:98:5b:f7:2d:1b:b9:17:d9:
74:04:f8:7c:ff:ba:9b:2e:59:6b:ff:ff:63:de:a1:
07:8a:bf:01:b9:07:72:b0:ba:b2:8b:94:56:b2:81:
40:bd:1a:15:31:6c:df:ea:4e:e2:86:71:96:3f:55:
d8:f5:76:ac:db:d4:bc:f3:e0:a6:cb:bd:e2:30:ce:
82:49:9d:a1:11:83:32:49:4c:8a:52:85:f4:e7:db:
7e:27:a7:32:5b:23:b6:43:6c:d6:1d:bb:4d:91:2d:
4e:0c:c3:2b:04:ff:01:fb:d6:0d:f0:cd:7a:e6:0f:
5d:35:c6:47:10:8d:22:cc:f4:46:74:43:06:76:f9:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:D5:35:C9:CE:7C:5C:E7:04:E1:02:3D:95:2D:54:50:20:89:B0
X509v3 Authority Key Identifier:
keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:37:85:17:51:7e:78:8b:ee:e0:0d:ef:0d:ca:84:5a:5f:bb:
c2:de:5c:0c:41:20:9c:5e:86:72:a5:03:21:70:21:9c:21:e7:
10:3f:62:fd:87:cf:f4:c2:86:47:74:82:4e:59:83:ad:1e:1c:
0b:6a:39:5e:f1:3d:5a:33:bb:c2:8f:3f:59:18:f7:25:63:78:
ad:e6:8a:29:7f:de:50:a1:e8:3b:27:0d:de:fd:c9:74:45:4b:
d4:73:4e:47:93:1f:44:e1:74:e7:e9:9b:b1:36:24:82:09:6a:
8a:00:07:23:c8:84:f4:ae:d1:9a:a8:79:ee:f9:db:fd:9f:9b:
01:17:a5:10:8e:af:ae:71:85:91:14:bb:2e:ca:59:89:33:1a:
67:51:f8:32:e6:6b:5e:18:f5:29:1f:18:11:e2:cd:33:70:bd:
9e:cb:39:35:dc:e8:99:81:63:99:f0:2d:52:48:07:28:4a:4a:
77:c5:09:a0:6d:72:5c:84:ee:ce:d3:78:f1:80:9d:5e:26:73:
61:c8:60:c4:48:31:36:f8:c4:78:76:e7:4b:e3:dc:51:b1:cb:
d1:44:a2:e8:40:ad:d8:43:e5:04:92:80:78:5c:8f:36:05:6a:
5a:b2:06:fa:22:41:b4:2f:1d:d7:cf:2c:ec:02:20:4b:24:94:
32:f0:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:56 2025 by rpki-client