Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: OGfJqjEsU+bbyUX3PkFzTe7h3S22akop78WOoR1pZzI=
Subject key identifier: 14:5B:7E:EF:CC:40:3A:3E:8B:2F:30:5F:B5:3F:D8:DA:72:0C:7D:38
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 0199FD34656E4532EEB456D09C6370E1DD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 09A2
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: eAOpshYdfUPCZgU71jgm26z8vdvM01CMjfkTQ89eBew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:65:6e:45:32:ee:b4:56:d0:9c:63:70:e1:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=145b7eefcc403a3e8b2f305fb53fd8da720c7d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:10:2d:e0:00:17:e4:73:37:9f:c7:00:d2:
8c:58:d1:0d:ed:e6:c3:99:23:e5:57:98:c6:55:15:
3b:9c:57:00:38:c2:70:c1:0f:09:63:ac:29:01:0f:
8c:68:fe:6e:52:e9:20:ce:05:4b:02:9d:cc:b4:12:
7c:c6:0e:20:27:c4:c8:0f:a9:85:e1:30:c4:e3:c5:
89:fc:ee:25:74:4d:59:89:e9:0c:c6:48:b3:85:41:
b6:9c:47:30:fe:25:b2:8f:d8:bc:20:8d:80:3d:d1:
a3:a0:5c:ed:e2:32:4b:ff:99:53:71:05:96:60:2d:
84:5b:1b:db:c2:c6:97:fa:ab:3d:d5:83:f9:22:54:
ea:b2:cb:bf:6f:38:22:cb:f3:84:4d:7f:ff:02:a5:
5a:fd:e3:e3:6d:82:a8:76:f8:3f:27:4f:1c:e1:a2:
ae:10:b7:36:2b:8e:35:ec:8c:41:48:28:6c:8c:92:
68:c4:84:b5:44:bc:bd:64:84:83:f1:46:16:87:88:
fc:0e:7f:82:f7:06:75:b2:ae:80:8d:a1:19:1e:86:
b0:4c:39:3f:91:1b:81:63:45:56:30:54:9a:f0:68:
97:cb:27:bc:39:56:23:50:4c:f3:63:36:6f:13:9c:
21:78:ce:ec:89:e2:c4:5f:f9:43:d1:df:bf:65:55:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:7E:EF:CC:40:3A:3E:8B:2F:30:5F:B5:3F:D8:DA:72:0C:7D:38
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5b:54:d4:7e:6d:00:36:5d:d7:97:0e:00:ba:82:fb:34:bf:
9a:0c:82:08:d8:0f:43:eb:82:10:4b:05:06:52:30:b2:83:4b:
d2:fa:e7:8b:ba:56:72:36:7a:6d:5e:5f:00:93:de:92:ba:48:
8a:5d:76:68:a4:ce:5a:24:b6:f3:9b:e6:aa:18:ff:15:84:cd:
3a:92:55:52:53:09:0b:50:11:05:f1:22:27:db:b4:a2:a2:40:
dc:2f:7e:48:34:88:e5:70:e2:57:76:8f:97:47:19:d5:e2:fd:
4b:b5:e1:5c:78:1f:f3:ad:f6:4d:da:52:6d:ee:b4:1a:be:f8:
d4:a2:08:6e:5e:a0:4d:1e:65:34:e7:23:26:3f:e3:c2:cd:e9:
8e:52:4a:1e:60:03:f9:51:7a:59:79:33:1a:f2:a5:42:a0:bc:
fc:30:c6:e5:d1:6c:40:d2:40:12:0e:b7:a2:89:39:d0:8e:d4:
ee:b3:cb:51:69:bd:a7:19:88:aa:ed:10:ec:df:32:5c:be:55:
5d:47:c2:0d:b0:9c:63:89:b5:24:1c:4d:6b:e3:63:69:14:c5:
8a:a9:ec:39:0b:ae:3a:eb:e3:ff:15:93:09:06:3d:fe:d9:9b:
3e:07:f5:8b:8f:c1:a2:f7:22:3a:1c:c9:36:23:02:34:0f:a4:
d4:62:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:52 2025 by rpki-client