Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: KDZ4UJgNahQc+QYTRP0YpRFzIQ3wddJyB58UN2RIo0Q=
Subject key identifier: E2:FE:89:89:E2:F3:C8:EA:4A:34:83:4A:98:B2:36:A5:61:EA:2A:EB
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 0199FCC693E1681364C9ECFDE183EDC0962C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 1490
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: AvoLpevXCB0TmLmwinqU4SHBgf/Kipw1BkZzkS3gGhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:93:e1:68:13:64:c9:ec:fd:e1:83:ed:c0:96:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=e2fe8989e2f3c8ea4a34834a98b236a561ea2aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:26:41:fb:d3:4a:b7:9c:6a:22:f3:0d:08:
3d:70:da:c0:dc:56:3d:ef:15:0d:6f:5f:90:4e:fe:
44:72:82:06:03:33:fc:e6:e9:53:33:ae:fa:45:24:
cb:5b:3e:46:e0:e0:90:b5:05:52:23:fa:4f:c9:ce:
07:d6:71:2c:c0:2c:49:c6:c0:aa:dc:9e:84:47:24:
6d:03:c3:c4:b2:f2:96:ec:5c:90:e4:7a:b1:52:8e:
53:ad:eb:9b:10:99:43:fb:b7:2d:54:18:76:4b:10:
f3:da:45:e7:7b:90:0a:57:10:b0:82:49:b8:52:6b:
5c:41:34:f5:49:51:57:15:72:c8:66:4c:3c:9c:f5:
85:8c:59:0f:89:94:6a:3e:2b:18:f6:28:83:6c:3e:
4b:9f:95:2c:5d:07:51:8d:d4:8b:47:63:8d:07:fd:
3c:a0:02:8f:5a:5e:cb:52:0c:84:7b:6a:e0:c9:14:
52:7f:2b:0d:cf:f6:bc:be:22:b8:c7:9b:e7:11:97:
1b:a1:de:1d:37:1b:3a:1d:30:50:f6:5e:6d:24:f8:
ea:d3:b8:61:1e:a7:31:3c:b2:35:7c:6f:47:c2:11:
5a:59:93:e0:f2:f3:ee:3d:b2:22:7f:f3:92:d5:16:
d4:3d:5a:f7:ff:e8:a4:3d:a3:3f:9a:22:7a:ee:d0:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:89:89:E2:F3:C8:EA:4A:34:83:4A:98:B2:36:A5:61:EA:2A:EB
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:de:a6:12:9e:22:b4:fb:de:6c:ff:e2:a9:f9:69:d3:ac:da:
b1:d9:e3:d4:d0:9e:74:e5:f6:71:27:c3:93:d4:4e:95:f8:0b:
2f:e8:09:00:19:64:59:99:2c:4e:0a:b2:7a:c6:92:f9:70:7d:
26:77:e1:42:f9:13:28:df:28:13:67:80:02:c0:53:bf:25:83:
8a:fd:4e:f0:bc:41:cd:40:08:bd:85:ee:6f:72:9f:b7:5a:77:
d3:47:21:16:8f:85:ad:4b:25:4e:b2:eb:79:7a:0b:8a:d8:0f:
48:76:21:a0:17:49:51:82:2e:ec:33:b2:02:50:cc:13:19:fb:
35:f2:ca:ec:d6:14:99:6f:04:ac:7f:97:87:eb:a0:65:df:f9:
4a:25:8e:83:66:ab:e8:64:0c:b4:7a:56:0f:b9:7c:1e:ea:f7:
c6:99:e5:9c:4a:6c:c0:52:b1:4f:8c:8e:ef:77:de:5c:d0:0c:
e5:99:b1:66:cd:e5:0f:2e:ec:28:92:f9:2f:43:18:25:f7:eb:
35:51:6c:1f:d6:db:a5:97:4f:4c:b2:d4:c7:41:ae:8a:fe:dd:
58:a5:2a:83:eb:48:d8:64:bc:85:b5:6b:dd:a4:6a:12:c4:bc:
bf:93:67:08:39:84:96:60:7b:da:85:59:a1:ab:34:67:c4:81:
6c:50:fe:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:05 2025 by rpki-client