Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
File: LSdW5QjQEzSbJE4wfX8jliafJwg.mft (raw, json)
Hash identifier: Mx/vvz8Uhh78JDNDz8zl7CvmUZ87UPtREr3Ttqp+BOo=
Subject key identifier: A3:39:E6:D6:BA:B4:80:4C:0F:76:62:6A:41:66:36:DC:A3:BF:35:8E
Authority key identifier: 2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
Certificate issuer: /CN=2d2756e508d013349b244e307d7f2396269f2708
Certificate serial: 0199FB0EE529122A461802CAA0475DE3ED69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
Manifest number: 1372
Signing time: Sun 19 Oct 2025 06:01:21 +0000
Manifest this update: Sun 19 Oct 2025 06:01:21 +0000
Manifest next update: Mon 20 Oct 2025 06:01:21 +0000
Files and hashes: 1: LSdW5QjQEzSbJE4wfX8jliafJwg.crl (hash: zHazb3ldAFe4pUL6yN3n1C9kBqp2Vrooi6CEjijxabE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e5:29:12:2a:46:18:02:ca:a0:47:5d:e3:ed:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2756e508d013349b244e307d7f2396269f2708
Validity
Not Before: Oct 19 06:01:21 2025 GMT
Not After : Oct 20 06:01:21 2025 GMT
Subject: CN=a339e6d6bab4804c0f76626a416636dca3bf358e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:8d:ee:71:e8:31:39:f2:e7:b0:65:47:a9:
78:37:18:fa:62:d3:c5:b8:f6:18:45:f7:75:8d:e5:
80:c8:1f:43:54:51:fd:bd:73:42:9b:69:b7:e6:21:
9f:5f:3d:24:dd:0d:1d:86:a3:ee:07:d8:f0:9b:7e:
b3:df:a1:75:fd:12:7c:d7:a0:d2:94:ce:0d:7a:7a:
6b:1a:ce:ab:95:86:61:0f:49:8a:72:e1:16:c1:be:
76:41:6b:74:ee:e2:af:30:6d:b4:eb:23:ad:c6:a7:
9a:fb:2a:66:90:67:c2:a7:0c:16:d7:35:61:cb:66:
5e:12:1a:76:b1:15:5a:4f:eb:7f:24:a1:17:9d:95:
b4:e7:2b:3c:3e:da:24:b9:fe:82:b9:14:5f:da:c0:
c3:19:83:e4:3f:a8:b3:31:2f:f8:b4:3c:45:31:6b:
da:3d:00:d6:4c:c8:f1:a5:b7:2c:e7:14:5f:87:70:
fc:cc:7f:a1:d5:ca:f4:66:20:e4:35:fa:af:a0:a6:
8f:1a:77:36:03:a1:3b:f0:da:84:24:d1:c9:3b:6f:
fa:56:19:14:68:0f:08:9a:9a:84:b2:b5:87:f2:3a:
76:e3:d1:c1:e9:f7:9b:3a:1a:6e:f0:c0:84:ce:c9:
c0:2a:79:b9:0f:9a:30:7f:65:67:8c:5d:8c:81:6c:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:E6:D6:BA:B4:80:4C:0F:76:62:6A:41:66:36:DC:A3:BF:35:8E
X509v3 Authority Key Identifier:
keyid:2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:f1:25:f6:01:fa:29:42:51:37:1b:54:57:ee:a3:37:72:
bf:90:6a:30:23:c8:37:01:95:2e:b0:af:e4:74:c0:41:13:b1:
0a:78:32:99:4d:bd:87:3f:fe:ee:f9:58:45:45:aa:61:45:e7:
cc:cd:c9:9d:8c:31:71:0c:c8:b6:31:b1:7e:1b:c1:79:26:df:
f6:4c:71:ff:a1:fe:d8:d7:07:61:45:d5:64:0e:36:d8:f4:64:
e6:42:bc:19:75:fe:48:51:11:77:33:44:4a:21:7b:bd:f2:e3:
76:14:5b:4b:d2:22:de:a9:1b:81:61:c2:ad:e0:d5:1f:71:a8:
88:df:cb:55:34:d8:98:23:98:e1:c0:cf:01:46:a7:6b:da:e1:
6a:70:e1:de:d0:ca:03:53:c4:2d:0c:3b:82:08:42:c7:77:ad:
bb:7d:30:15:0f:55:7f:c2:ab:54:75:70:51:f4:59:b9:c0:58:
3d:4c:ca:6e:b4:d5:10:82:19:f6:29:f3:79:b9:9b:08:42:25:
c3:98:bd:bb:7d:70:b6:b8:0e:b3:f4:66:3b:79:46:d9:94:67:
6c:60:82:1b:a2:48:c0:ae:d6:e5:b4:0a:80:c6:73:ca:bb:5d:
02:85:67:8e:de:24:9c:ee:49:d7:32:0e:d1:82:72:38:ff:4c:
01:bc:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:38 2025 by rpki-client