Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: r2I0Cy1y+eFzcOrgZKWwdqBfZj1Bg+IjjhnqIWMgR/4=
Subject key identifier: 6E:7D:B0:CE:DC:F2:D6:F9:A7:63:9C:45:45:91:63:4B:1F:10:6D:08
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 0199FCC61F5CC289AD017AE50E81F0EDEBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 0564
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: /BcXT6m8VeZXjFaRvlPXsDJKTI2GimR0PoDz0r3Hou0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1f:5c:c2:89:ad:01:7a:e5:0e:81:f0:ed:eb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=6e7db0cedcf2d6f9a7639c454591634b1f106d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:f4:c8:b2:44:d1:0e:eb:0d:86:4b:1d:da:
6a:b7:27:26:18:c4:d6:25:0c:42:f8:4f:7b:d7:97:
29:a9:32:14:31:93:06:2c:04:d0:6c:f0:4c:c0:04:
92:fc:04:58:f3:47:57:6d:ef:f2:cd:47:4a:6e:c4:
35:ba:af:48:45:eb:ff:86:8f:43:6f:81:fe:0c:2e:
4c:8a:79:d3:12:76:8f:2c:64:9c:6b:a2:f3:77:b2:
13:5a:9c:77:89:13:b2:47:db:9b:45:b0:1c:9c:77:
eb:4a:52:09:c1:8f:71:40:0b:d1:bb:ac:44:9d:23:
4e:6e:d0:1a:c1:0c:a2:64:b9:9c:4f:a8:06:6e:84:
14:45:60:1f:6f:fc:85:12:d5:4f:2c:fa:e9:b4:36:
0b:80:e0:fe:03:73:4a:33:72:53:5a:75:ed:0b:43:
a5:ca:d4:6c:bc:7a:6f:77:8e:ae:c3:10:5b:c1:0b:
05:67:8d:6b:3c:c8:92:87:03:81:1c:aa:b9:72:4c:
ff:03:13:06:c0:1c:03:1f:ad:5c:b4:12:59:d2:58:
a0:64:36:4b:54:79:cc:e0:04:50:08:32:97:57:d4:
4f:dd:9f:d7:ab:8d:f3:eb:99:54:f0:29:e2:8f:c7:
69:dd:11:02:e6:86:ca:46:78:78:07:95:75:8a:e9:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7D:B0:CE:DC:F2:D6:F9:A7:63:9C:45:45:91:63:4B:1F:10:6D:08
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:24:5a:52:cf:8e:62:d1:63:b1:ac:7a:d0:2a:a5:fd:3d:20:
40:4b:f3:f2:21:f5:9b:0e:e9:29:50:0e:26:20:80:8c:16:57:
e2:99:9e:dc:8b:ba:f8:24:bc:23:ae:e9:73:82:04:01:c2:ac:
cd:38:6f:0f:e7:e8:3d:d1:0f:c9:e6:06:89:cd:f3:82:52:b4:
4b:08:39:ea:45:f7:c0:23:67:9b:46:bb:61:cc:3e:dd:47:34:
c1:17:51:fc:90:28:42:e8:04:04:e0:f7:e1:c1:0a:b8:47:3e:
20:b5:c0:b3:06:77:08:9c:6d:3e:74:c6:88:b6:8b:80:d8:f4:
39:67:e7:43:aa:48:22:78:e1:04:34:94:b4:9f:31:2d:6a:e6:
47:d1:f4:a2:20:0d:a5:73:49:34:1d:6b:cc:61:5b:cf:bb:34:
59:69:8e:fc:7b:25:7b:e8:20:79:c8:cd:c2:c7:13:af:44:4a:
a9:4f:54:2e:07:58:1f:0d:43:fd:09:42:85:3d:94:26:55:1d:
f0:7d:29:11:9a:8c:98:7c:44:ae:76:48:01:35:42:fb:8d:8d:
2f:05:c4:ba:03:71:14:bf:70:49:dc:f6:63:ed:ce:d2:0c:d7:
48:fd:97:ce:b2:30:bb:0f:2e:61:2a:21:d4:e6:0b:42:35:ef:
68:f7:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:15 2025 by rpki-client