Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: lidQA29dBtdRfbH7QB7rGaAJuA0MSyW4Gyx0BYV2t+E=
Subject key identifier: E5:5C:29:B7:5F:88:37:A3:12:B6:AC:5C:A6:16:E8:39:0C:80:EB:1A
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 0199FDD98E587555B23AF8BF67F6AE17C530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 166F
Signing time: Sun 19 Oct 2025 19:01:57 +0000
Manifest this update: Sun 19 Oct 2025 19:01:57 +0000
Manifest next update: Mon 20 Oct 2025 19:01:57 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: LjnIGIZOBC570hcUuuAhS+HyP1VcbH1jg1XYHsWKGVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:8e:58:75:55:b2:3a:f8:bf:67:f6:ae:17:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Oct 19 19:01:57 2025 GMT
Not After : Oct 20 19:01:57 2025 GMT
Subject: CN=e55c29b75f8837a312b6ac5ca616e8390c80eb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:74:5b:c9:20:f8:f8:7a:58:d4:8c:b7:5b:
ff:0f:c8:aa:6c:5a:2e:7d:af:69:45:be:4a:f5:24:
e6:bb:0a:d9:ad:e7:01:e2:8d:5c:1e:4a:5e:c0:3f:
05:c0:af:35:e7:72:e9:2e:8e:5a:f9:cc:04:0a:8f:
40:49:04:b6:2a:4a:3f:23:1f:04:e3:43:ab:9d:ed:
13:5e:84:b8:40:cc:ae:59:8b:cb:ae:73:5a:0b:5f:
12:12:7c:3f:94:bc:00:62:04:cc:4b:d9:50:ae:a6:
c4:bd:59:d1:8c:e0:ed:a3:2c:3a:97:c0:5c:27:dd:
70:98:13:c3:65:3b:cb:0b:46:9d:0b:b9:61:7c:e4:
cc:cd:c7:b8:60:1e:0c:f4:bb:96:d8:50:10:6c:5d:
2e:2c:2c:ce:fd:b5:34:ec:28:6b:dd:90:94:15:d5:
ab:5c:8c:67:b9:ea:25:e9:43:49:be:f9:c8:24:da:
bf:03:0e:0e:c4:54:04:62:71:43:77:4a:97:d0:49:
d7:70:2f:67:61:e2:a2:05:de:a9:0a:6b:46:2d:bd:
c5:ea:7d:3a:32:1c:7e:5e:48:c1:a1:23:d3:c2:1d:
9c:58:39:ca:0f:d1:64:c6:78:67:a4:bd:ee:f2:d3:
76:a6:3d:2c:66:fc:ba:f2:a3:cf:9b:1b:97:04:b0:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:29:B7:5F:88:37:A3:12:B6:AC:5C:A6:16:E8:39:0C:80:EB:1A
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:40:ad:6c:fd:c4:cb:14:60:c9:b9:0f:92:81:98:81:42:2a:
fe:c0:e4:9b:16:23:0a:b7:43:0c:79:29:34:44:69:e0:e9:f1:
33:b1:3c:c3:e4:3b:5e:bb:33:14:aa:24:a6:a8:2b:b0:02:f5:
9a:98:54:90:78:56:3c:3b:7e:15:bc:9d:e7:73:f5:5c:7e:a6:
a2:67:80:b0:e2:4b:8f:2e:52:e8:64:c8:e6:b1:f0:e0:58:48:
ca:5b:fb:75:95:a4:03:ba:23:47:32:87:34:6c:db:2a:1f:ad:
be:6e:bf:aa:3d:48:3f:8b:28:64:73:57:39:b7:84:b7:81:ad:
58:56:59:58:77:24:3c:60:4a:3b:f6:0d:4e:cf:4e:70:fa:38:
dc:1b:67:41:68:d3:88:04:09:9a:0c:d7:1f:d9:c0:30:fa:40:
db:10:f6:9a:97:01:3e:66:06:19:0e:63:4a:f0:07:53:9d:4e:
67:b9:c6:58:e5:3d:6d:6f:97:9c:cd:8a:6f:56:2f:ed:5f:74:
f9:97:5d:2d:f4:1f:fe:37:e2:e2:45:ea:30:26:a4:7e:d0:a1:
d5:f5:63:4c:8d:e5:8c:67:30:48:11:40:a8:ba:38:cf:2e:93:
66:3f:28:da:e9:35:2c:4e:a8:05:a4:61:27:91:e5:ad:c8:f4:
d6:e3:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:48 2025 by rpki-client