Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier: +aDUW3B0bhnlev8rIOPoJ7ZRdPgDdXVfHhxXhEOf2Sw=
Subject key identifier: 65:44:64:A3:FB:49:A5:95:58:B8:76:F0:0F:B9:EC:09:AD:AB:01:CE
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer: /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial: 019A01EC08CC62C01808E999BD4B18C744B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number: 0512
Signing time: Mon 20 Oct 2025 14:00:36 +0000
Manifest this update: Mon 20 Oct 2025 14:00:36 +0000
Manifest next update: Tue 21 Oct 2025 14:00:36 +0000
Files and hashes: 1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: wIQBbneudbVJmrEclqrlJmKkD0oVmO3sJExkf+0wG5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:08:cc:62:c0:18:08:e9:99:bd:4b:18:c7:44:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Validity
Not Before: Oct 20 14:00:36 2025 GMT
Not After : Oct 21 14:00:36 2025 GMT
Subject: CN=654464a3fb49a59558b876f00fb9ec09adab01ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:98:8d:33:ee:53:08:94:dc:61:3d:e9:e5:
fb:ad:2c:1f:d9:4b:4c:fb:d6:f2:af:14:6c:f9:30:
ea:b1:15:af:81:4c:d8:90:b4:df:23:a2:ff:2b:84:
76:e3:82:fa:a2:92:80:9a:28:90:53:f5:d9:91:e3:
a2:e4:4b:98:73:b2:69:ba:a6:87:84:48:98:e9:70:
5f:da:26:0a:a4:f7:d0:68:b7:fd:c5:20:31:f6:af:
c2:b4:ae:b7:1c:f3:b5:98:02:7b:6f:02:57:e7:3f:
7e:c2:b6:6b:d5:13:c4:68:ef:63:62:d3:96:c4:25:
83:7c:a6:6f:d7:e9:ca:63:5c:c4:93:3d:56:34:be:
f4:e4:b4:43:dd:cc:8f:c3:01:84:45:2c:ab:48:5d:
13:bd:96:01:93:c0:4d:4c:76:05:ff:cd:69:3c:82:
98:66:4c:d5:58:c7:68:9a:7e:ca:26:2c:25:7d:d6:
24:65:52:35:7b:66:1d:63:17:9e:06:49:2f:f8:19:
fd:10:4a:76:7f:59:fe:79:d9:23:4e:ce:41:32:5c:
49:59:53:8c:5a:02:d6:b5:25:be:48:6f:2d:92:84:
eb:f3:d0:1c:f4:87:8e:ef:c8:ec:86:ca:7c:1a:06:
0b:3c:40:30:22:95:bc:c3:ae:10:4f:ad:20:c7:07:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:64:A3:FB:49:A5:95:58:B8:76:F0:0F:B9:EC:09:AD:AB:01:CE
X509v3 Authority Key Identifier:
keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b2:3c:01:80:8d:18:c1:8b:77:33:ce:d1:42:85:15:b7:5e:
88:7e:4c:a8:76:e9:3f:d1:8f:65:0d:73:a9:6c:97:48:cc:c5:
47:c3:5b:b9:bf:c8:38:d6:31:f8:22:86:8b:3f:02:cf:60:18:
57:c0:60:f3:27:36:28:97:3b:00:bb:02:04:64:e3:d6:28:63:
11:ab:1c:9a:bd:ce:14:41:6e:6f:b9:c6:36:ca:38:06:f7:94:
98:f7:81:65:e5:c0:5c:08:58:10:62:d4:58:b9:b7:56:ef:39:
fc:af:f1:ee:f6:f3:d7:7e:63:1f:98:51:1b:0d:7e:a0:35:8c:
6b:da:77:b3:43:f4:b3:d1:a4:30:35:89:4b:ed:d9:05:82:c2:
83:af:8b:b2:8a:ba:1a:d5:e5:e8:cb:4a:2c:0f:90:0b:01:f7:
8b:20:a4:b7:ba:28:8e:f2:6e:d9:6f:54:30:c8:2b:3d:ec:a9:
6f:f3:f5:57:0a:07:c6:e0:1d:ff:b3:b0:0a:e2:de:60:2e:f6:
00:12:43:11:ef:ae:30:bf:be:34:a3:13:44:ec:e2:eb:e1:a2:
37:72:5b:2e:d8:71:63:e7:b5:e4:85:e0:80:f5:9d:d5:bf:01:
cc:8f:3e:92:db:40:08:e7:94:1f:12:20:d9:0a:cc:c7:76:7c:
2c:a7:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:11:55 2025 by rpki-client