Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: oLaffFYRWLmqRt4nKodyXdt7+US9D+WgljiCJ8/E3zA=
Subject key identifier: B9:5B:8B:9E:35:D3:45:3D:24:38:BF:A2:E4:AF:B4:E1:D9:A8:DD:86
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 0199FBB35DE0652728AE5755B854C307E27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 056E
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: Z1Np/uxcn/3yf6EXqWdgma1cXbyNiEYYKs8nUbEG4kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5d:e0:65:27:28:ae:57:55:b8:54:c3:07:e2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=b95b8b9e35d3453d2438bfa2e4afb4e1d9a8dd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:99:d5:3a:d7:3c:1c:75:82:e1:d1:83:52:
ec:eb:11:cc:7c:0d:94:3d:ce:b2:aa:53:9a:fa:e0:
28:44:d7:ca:18:68:f1:88:0e:ba:45:40:41:a9:9c:
96:99:68:5a:81:10:f7:8f:54:1b:61:83:d8:bd:7c:
3c:fb:7a:95:81:a5:1e:a3:79:b3:90:80:f1:91:4b:
0f:45:67:3c:24:c7:b1:87:1e:0e:7e:10:98:b6:e5:
4d:aa:36:3e:7c:c1:84:c4:f8:73:3d:cf:14:5c:8d:
76:7b:82:f7:da:6a:17:78:82:44:9c:03:42:ec:12:
93:9c:3e:68:51:d1:23:b6:12:18:4d:e2:c3:69:fb:
3b:42:9a:b3:e8:c2:a2:08:d3:3c:5c:c4:81:6a:0b:
b6:f9:42:86:00:03:f5:22:07:80:e2:6e:fa:9f:62:
33:6c:43:4e:4b:9a:30:54:66:04:9e:3f:26:ee:da:
81:82:db:0d:36:28:d2:de:d0:4f:d3:a2:9e:6e:35:
2a:c7:4a:ff:3f:73:4e:a6:7c:b7:e8:94:82:6c:44:
c4:4d:3c:45:df:5b:d3:52:7e:b0:dc:c9:36:f4:e4:
11:5c:b5:28:90:a4:13:38:18:1e:e6:b6:50:9f:e5:
4b:37:f9:0e:a7:36:38:a0:83:07:b4:d9:ab:c2:a7:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5B:8B:9E:35:D3:45:3D:24:38:BF:A2:E4:AF:B4:E1:D9:A8:DD:86
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:46:2b:e8:a9:b1:b0:32:2d:e3:30:0b:44:60:92:06:bc:79:
9b:f1:96:af:1c:bf:e7:34:79:71:96:cc:21:ba:0a:bb:52:75:
c3:2c:56:07:8c:3a:98:4a:00:fc:19:6d:0f:f3:d0:ea:ab:bf:
a1:ca:24:23:ba:2c:8b:e8:21:d6:a3:72:55:82:5c:2c:69:32:
5b:6e:f7:36:8e:4a:44:cc:e3:65:f1:6b:68:77:57:a2:1e:90:
9f:f7:43:37:50:9a:3f:36:2c:a2:60:7a:40:25:7c:48:4c:b1:
cc:0c:8f:d4:a3:ab:4d:62:33:d2:dc:90:c7:1b:be:24:22:2f:
80:33:eb:18:29:55:01:8b:46:d8:8b:19:9e:63:6e:ef:9a:62:
d4:5e:5e:99:ee:51:47:ae:12:44:da:42:c2:42:ad:09:8f:8b:
56:ca:70:fc:dc:ab:65:fa:bd:d0:e1:94:dd:c0:c5:c6:23:3d:
e0:51:ff:ea:39:d0:40:2f:e6:8e:a6:5e:f4:b4:3f:3e:87:47:
ce:5a:e1:7f:ed:3c:35:f1:27:22:3e:2d:5f:af:59:b8:6c:fb:
e1:c7:9d:bd:8a:8b:26:1a:a4:d5:16:2c:fb:ab:e6:4e:39:4a:
07:b7:05:68:2c:e3:06:c4:9d:da:69:75:44:6c:4d:92:5b:37:
26:ee:31:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s13gZScorldVuFTDB+J7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTBiMWM0ZWEyODQyZGRmOTkyOWVhOGE2NTQ1YjgxN2Ey
ODc2ODAwHhcNMjUxMDE5MDkwMTAwWhcNMjUxMDIwMDkwMTAwWjAzMTEwLwYDVQQD
EyhiOTViOGI5ZTM1ZDM0NTNkMjQzOGJmYTJlNGFmYjRlMWQ5YThkZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTyZ1TrXPBx1guHRg1Ls6xHMfA2U
Pc6yqlOa+uAoRNfKGGjxiA66RUBBqZyWmWhagRD3j1QbYYPYvXw8+3qVgaUeo3mz
kIDxkUsPRWc8JMexhx4OfhCYtuVNqjY+fMGExPhzPc8UXI12e4L32moXeIJEnANC
7BKTnD5oUdEjthIYTeLDafs7Qpqz6MKiCNM8XMSBagu2+UKGAAP1IgeA4m76n2Iz
bENOS5owVGYEnj8m7tqBgtsNNijS3tBP06KebjUqx0r/P3NOpny36JSCbETETTxF
31vTUn6w3Mk29OQRXLUokKQTOBge5rZQn+VLN/kOpzY4oIMHtNmrwqfLYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlbi54100U9JDi/ouSvtOHZqN2GMB8GA1UdIwQY
MBaAFJSQscTqKELd+ZKeqKZUW4F6KHaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUt
MDU2NmY1MTI1MmE5LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUtMDU2NmY1MTI1MmE5
LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUYr6Kmx
sDIt4zALRGCSBrx5m/GWrxy/5zR5cZbMIboKu1J1wyxWB4w6mEoA/BltD/PQ6qu/
ocokI7osi+gh1qNyVYJcLGkyW273No5KRMzjZfFraHdXoh6Qn/dDN1CaPzYsomB6
QCV8SEyxzAyP1KOrTWIz0tyQxxu+JCIvgDPrGClVAYtG2IsZnmNu75pi1F5eme5R
R64SRNpCwkKtCY+LVspw/NyrZfq90OGU3cDFxiM94FH/6jnQQC/mjqZe9LQ/PodH
zlrhf+08NfEnIj4tX69ZuGz74cedvYqLJhqk1RYs+6vmTjlKB7cFaCzjBsSd2ml1
RGxNkls3Ju4xAA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:17 2025 by rpki-client