Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6766fd-72ee-4618-b917-4e12103e3cb0/1/lCsVf2HOX1zeWdXMy-0RQgtBkzk.mft
File: lCsVf2HOX1zeWdXMy-0RQgtBkzk.mft (raw, json)
Hash identifier: /9fdH67BIzMnaFBwC4K2BkCKGh3FaN2f9QCK4V9wPtE=
Subject key identifier: 01:39:EC:8C:34:76:BF:01:85:9C:7E:F8:07:17:91:C1:B1:E4:80:28
Authority key identifier: 94:2B:15:7F:61:CE:5F:5C:DE:59:D5:CC:CB:ED:11:42:0B:41:93:39
Certificate issuer: /CN=942b157f61ce5f5cde59d5cccbed11420b419339
Certificate serial: 0199FBEAFF5A54B98D25FDCE854CF393C74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCsVf2HOX1zeWdXMy-0RQgtBkzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6766fd-72ee-4618-b917-4e12103e3cb0/1/lCsVf2HOX1zeWdXMy-0RQgtBkzk.mft
Manifest number: 1B
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: lCsVf2HOX1zeWdXMy-0RQgtBkzk.crl (hash: MEfsEkrBTpVo8PM3gUEBiElG2yqU0NQrrSiLAQsQGYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6766fd-72ee-4618-b917-4e12103e3cb0/1/lCsVf2HOX1zeWdXMy-0RQgtBkzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/6766fd-72ee-4618-b917-4e12103e3cb0/1/lCsVf2HOX1zeWdXMy-0RQgtBkzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCsVf2HOX1zeWdXMy-0RQgtBkzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ff:5a:54:b9:8d:25:fd:ce:85:4c:f3:93:c7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942b157f61ce5f5cde59d5cccbed11420b419339
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=0139ec8c3476bf01859c7ef8071791c1b1e48028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:b4:c3:f4:bb:b4:50:28:b4:af:1f:b0:f8:
2f:b2:df:8f:84:c0:51:89:91:27:2b:d2:e6:89:1c:
ba:fc:e7:d4:c3:34:55:01:7f:5b:6a:89:01:42:3f:
b8:29:18:6b:8d:b9:4a:18:ef:f1:a5:ea:9e:1e:ee:
4d:62:4c:ec:ed:a1:8e:17:66:2a:89:3b:08:e0:b4:
62:f1:ff:8d:9e:02:b7:aa:69:84:0b:e0:8e:65:ae:
a6:a1:03:01:4d:56:af:57:85:32:15:96:3f:85:ae:
b1:a9:0a:11:66:82:90:2e:67:22:47:57:24:0e:bc:
4b:97:6a:e1:24:97:77:d7:85:57:19:f8:39:c3:d9:
01:e8:4b:16:54:29:ff:b2:d5:5d:b2:43:78:ea:f7:
cd:c8:6f:78:f1:5c:be:d5:56:d5:6a:ba:d4:fb:b1:
7c:59:26:54:1b:c3:bb:1c:55:ae:db:3e:aa:29:bf:
8c:10:71:eb:f4:a2:77:b4:42:b3:a5:3e:af:93:13:
d8:71:10:a2:03:d4:f4:a2:2f:93:1d:68:b4:40:e0:
ca:b9:86:04:fa:e6:e2:81:22:5f:14:80:b6:80:91:
cc:46:03:01:74:71:c9:20:0b:7e:ff:37:c5:98:25:
c6:aa:64:51:96:16:e2:e7:81:66:18:01:bd:3c:42:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:EC:8C:34:76:BF:01:85:9C:7E:F8:07:17:91:C1:B1:E4:80:28
X509v3 Authority Key Identifier:
keyid:94:2B:15:7F:61:CE:5F:5C:DE:59:D5:CC:CB:ED:11:42:0B:41:93:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCsVf2HOX1zeWdXMy-0RQgtBkzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6766fd-72ee-4618-b917-4e12103e3cb0/1/lCsVf2HOX1zeWdXMy-0RQgtBkzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6766fd-72ee-4618-b917-4e12103e3cb0/1/lCsVf2HOX1zeWdXMy-0RQgtBkzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:54:67:45:6d:00:f5:d8:a8:3c:0b:be:da:0e:aa:b6:b0:3b:
ec:69:f9:36:a9:a9:b3:2c:a1:bd:dc:7d:c0:d7:5d:69:f2:a9:
75:18:7a:b4:82:3e:50:1a:c6:74:02:3e:be:fe:78:5b:78:0b:
a0:a8:2f:3d:9c:8c:0e:5e:c7:d0:8f:bf:c1:db:f0:73:be:ca:
07:40:2e:1f:9b:c2:8e:4c:e3:90:48:76:ef:9a:68:8b:d8:3e:
22:df:2f:c4:1e:d9:fd:56:49:5f:9d:e9:9c:4f:16:64:3e:61:
6f:b2:c0:d5:4a:4e:a3:ef:e6:cd:aa:d2:9a:c5:c8:ed:8b:f5:
41:18:f8:de:42:44:ad:cb:b5:dd:e1:0c:ba:d2:b7:24:8b:5a:
3b:cb:c0:ec:41:4b:34:52:52:38:c6:b4:15:dc:b5:15:45:fd:
1d:ae:81:a6:c4:8c:35:1c:8c:14:45:f5:cd:d4:6f:97:00:e4:
45:38:3b:01:86:a3:22:73:f0:05:39:d3:f8:40:6b:5c:5e:7e:
f7:0b:05:9c:75:7e:56:82:65:bd:27:04:21:70:52:bb:54:ee:
be:14:5c:87:b7:d1:97:f1:94:5c:f2:39:bb:f8:5c:0e:8a:46:
cd:79:a5:f6:f2:df:9c:a8:f4:f7:94:91:ee:96:e5:07:bd:ad:
30:3c:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:54 2025 by rpki-client