Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier: NeMTAD2247jFevP97qMNFaM1Cm/xSN/y8EEupvI2rEw=
Subject key identifier: 2E:28:83:CF:C7:B2:66:92:52:67:FD:81:D9:1E:FF:A6:32:C2:51:D8
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 0199FBEB2489086671B37331E6A11B5F7702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: uyreyQM09dF+7p29WRrTFX4LNzf3+7IRdJ7c1td5iuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:24:89:08:66:71:b3:73:31:e6:a1:1b:5f:77:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=2e2883cfc7b266925267fd81d91effa632c251d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7d:30:7a:86:b7:00:d3:e5:37:23:51:6e:ee:
d1:13:18:ab:c3:91:db:21:d0:e4:97:28:bb:a5:ba:
a6:82:b5:c7:e0:da:ef:58:89:e0:32:01:99:23:a6:
7b:e4:d8:a7:d9:aa:c2:e3:d3:97:9a:fe:33:67:18:
c0:e3:5c:38:cc:22:c8:20:2b:0b:8c:ce:45:20:b8:
a0:01:26:03:9e:37:e7:3a:ac:30:66:f6:e2:ab:a4:
c8:d7:cf:7f:5d:35:ac:55:f5:5e:b6:8b:40:0a:2f:
38:17:41:04:17:5a:b3:e5:c4:f8:00:fb:ce:d7:5c:
67:e0:11:a4:c3:94:db:21:39:0b:47:95:27:20:14:
03:94:da:bb:e8:05:cc:49:2e:6c:46:d7:a0:6c:a3:
86:ba:3e:3e:88:a9:f6:ce:18:2d:fc:9c:a4:7a:f8:
94:78:6c:d4:55:c3:97:bc:85:57:cb:b1:d5:ef:2c:
27:0a:75:58:69:8d:a9:03:fd:af:f8:68:69:bc:3f:
44:01:5c:b2:bd:be:42:ee:f0:61:3c:95:e7:42:03:
39:5e:aa:57:bf:d8:fc:18:cf:37:7c:e2:28:a2:af:
88:4d:3b:c6:39:92:02:e0:d2:ab:55:b3:e2:63:ad:
9e:d5:4e:53:16:8b:32:fe:9c:28:3e:22:b9:10:a5:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:83:CF:C7:B2:66:92:52:67:FD:81:D9:1E:FF:A6:32:C2:51:D8
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:00:b0:4f:35:a2:00:51:22:2d:1d:f9:b9:ee:62:c6:ee:0b:
e7:4e:b4:50:94:b6:c4:f4:a4:b7:99:e9:cf:9a:d1:9e:3d:da:
1e:1f:af:e3:06:ef:0c:88:29:88:51:bf:dd:35:92:57:71:90:
e4:ba:e2:ac:d1:c3:ab:59:0b:f3:f4:72:5a:d3:98:c4:db:5e:
57:d9:27:cd:17:bf:7f:29:16:93:6c:c1:63:b3:df:4a:8d:35:
a2:4f:c1:83:1f:85:6e:68:55:ca:07:e0:53:da:ee:09:02:6a:
ee:75:28:a4:74:11:f4:ca:5b:fd:ab:98:b8:8b:2d:52:22:1d:
3e:c2:b3:21:26:2d:24:cf:47:6a:43:37:21:2b:a7:50:44:36:
26:9d:77:58:f6:c9:00:d3:e3:3c:41:17:71:57:79:75:ee:4c:
8a:b4:de:93:d8:62:73:19:e9:fd:f2:8c:81:f7:cc:9b:99:49:
79:46:29:0f:a2:80:95:dd:f3:23:51:0e:7f:9e:17:cf:be:17:
fb:a3:cd:1f:d2:9d:7a:e8:de:74:d8:f4:73:42:8b:d6:80:03:
37:ea:42:7c:5e:b0:7a:77:81:13:e0:45:e4:4f:1c:45:93:13:
44:ff:f6:dd:c9:4e:81:7f:35:4a:96:0c:2a:ab:19:d9:e6:ee:
59:d1:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:46 2025 by rpki-client