Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: 0IaDhLjCmw+sGyzY8I30jHDlh0GDASCQ5zJBELEmR+A=
Subject key identifier: 6E:AE:40:D4:78:25:45:88:BE:17:CF:D3:96:78:07:01:FF:86:ED:C3
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 0199FB45D5BC4813A7E78FAD90F36B72E75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 1728
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: twTHK03NKcgyrckiG1tCRkgzgR+YTSGxvcd3xj7kzbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d5:bc:48:13:a7:e7:8f:ad:90:f3:6b:72:e7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=6eae40d478254588be17cfd396780701ff86edc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:04:dd:0e:38:7e:e9:91:2a:5a:53:4d:9c:
37:9e:02:ad:a4:1b:15:94:f2:19:a6:cf:a5:08:0f:
3c:96:35:2e:3e:57:a2:ba:af:1c:f4:8c:0f:8a:83:
3e:09:b7:4f:7d:44:6a:e0:0d:79:94:1a:5a:71:0a:
12:5a:56:be:9a:b0:88:81:e8:12:f7:5b:d4:f5:79:
75:ba:97:a8:5a:e0:d1:6c:6f:7e:01:e1:ab:b3:31:
b8:42:f1:84:b5:8e:3e:53:e1:7f:8f:11:54:87:c5:
dd:4b:0a:ad:30:d9:fd:a3:e1:2b:d5:a7:0d:6e:f3:
20:09:a1:39:30:20:7f:8d:ad:a4:03:be:08:56:b5:
aa:cc:21:84:2f:5d:f0:c4:98:d8:1e:fc:9e:45:a3:
d7:7c:74:e7:c6:40:b2:8d:5d:c7:69:dd:d6:16:cc:
3e:15:70:35:e4:00:fa:13:7d:dc:ea:fb:bf:f8:44:
4d:61:2f:06:f3:bb:96:05:8a:17:04:bd:00:dd:db:
bc:c6:f8:b5:0d:b8:5b:b0:73:58:32:94:34:5a:08:
79:f4:c2:13:26:a7:68:9c:eb:7c:54:c4:73:00:3d:
9c:b6:35:77:14:1a:e1:a8:c9:77:0b:c0:2f:7d:50:
5b:e3:33:ab:9d:51:e6:73:05:58:d6:29:0b:c4:25:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:40:D4:78:25:45:88:BE:17:CF:D3:96:78:07:01:FF:86:ED:C3
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:85:b2:23:fd:40:26:39:65:e0:02:f4:2b:f7:48:7d:ca:9d:
87:05:c6:c6:23:d9:61:13:c3:09:ac:be:2b:5d:0f:57:65:6b:
43:6b:f3:e2:56:b2:d4:7f:bf:74:01:02:bb:20:54:60:75:b1:
4d:bc:40:55:6b:85:75:82:e2:ff:d7:ff:d1:37:17:ca:71:bf:
7f:d4:09:61:34:9c:f6:ac:90:9c:0e:72:1c:1e:bb:6a:60:38:
7d:8f:6e:89:42:8f:39:1f:c8:70:91:cd:d7:7d:bf:e1:bb:58:
5d:35:00:2d:61:52:40:e9:d8:7c:9d:f8:36:8b:4f:78:c6:1d:
96:5a:f8:f8:60:d6:43:b3:57:d9:f6:5a:ab:86:cf:e5:d0:c1:
bd:0b:18:e1:09:96:06:61:1c:b1:3e:3f:e6:04:fe:5b:c5:1d:
59:d1:30:32:7a:1d:8d:2b:fc:39:37:95:b9:d9:45:aa:b9:5b:
6c:e9:d2:fb:56:cd:2e:98:42:30:77:9f:6e:87:4b:9b:c3:4b:
d7:7d:66:31:0b:d0:0c:6c:d1:71:2f:cb:e2:34:5d:51:26:89:
54:8b:7e:b7:ee:aa:f2:b5:52:3b:c1:4a:a0:f4:48:47:7f:70:
e5:58:b2:39:0a:e2:d3:74:f6:ef:bc:99:7e:ef:de:2d:db:eb:
f2:76:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:57 2025 by rpki-client