Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: QIK/J2kRldtL7GZP2B2Gtiw1tO3pxhU2eRrs76i7sKI=
Subject key identifier: 54:E8:6D:43:87:66:BF:B9:F6:A6:99:07:84:5F:02:1C:E1:E2:E6:1C
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 0199FC8FAEACF200CE31D91F8EE97C88379C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 12B2
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: eyczI25/vIY9FjDMxWpRQxdVTQdIoAN/4KsFCOqUHNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ae:ac:f2:00:ce:31:d9:1f:8e:e9:7c:88:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=54e86d438766bfb9f6a69907845f021ce1e2e61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:13:f9:58:c6:17:44:4e:a9:4d:94:c8:bd:
03:8d:03:b2:6f:2b:21:fd:3a:11:8a:1b:ea:0a:c8:
fa:4b:0e:35:d0:06:6a:ed:00:d8:6b:de:03:ab:89:
06:b0:ff:5e:98:58:a0:04:64:90:a3:45:37:4f:82:
31:d1:2c:95:26:29:df:3f:a2:4f:a3:cb:52:d1:1a:
13:cf:9c:13:56:8c:ce:f1:23:ec:85:97:84:6f:88:
c8:3e:98:eb:4a:a5:64:f7:ae:db:0a:e3:26:05:97:
6b:de:ac:24:e2:2d:93:4a:fb:9f:77:71:bd:3d:ea:
50:51:f2:f5:02:88:35:6f:e2:4a:da:11:c2:f8:b4:
98:70:5c:3c:e2:9e:87:a8:95:89:bd:ad:81:b8:ee:
93:9a:09:d2:93:43:38:46:89:43:58:bd:7b:df:c3:
ac:c2:1d:c0:d2:94:e7:af:d3:8a:ca:eb:86:e3:9c:
95:4a:28:5d:82:cf:55:cc:6a:f9:dd:03:1c:fb:0d:
a2:54:c7:c4:7d:73:75:ec:02:8f:3b:af:40:23:06:
af:36:ee:92:2c:1d:85:0f:30:69:da:d1:43:a8:d6:
74:fe:20:19:e6:db:22:67:b5:67:f2:d0:90:51:01:
94:92:c4:53:60:76:39:75:13:04:5c:ed:8d:8c:cd:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E8:6D:43:87:66:BF:B9:F6:A6:99:07:84:5F:02:1C:E1:E2:E6:1C
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:03:be:51:31:61:f1:c7:41:18:0f:f5:94:53:85:1e:1f:57:
d9:ac:ff:d0:db:c8:1e:0e:1d:92:09:5f:da:10:b2:10:49:64:
00:70:4e:08:a1:0a:ec:fb:13:37:f7:52:48:23:34:d7:da:50:
ed:ff:2a:83:52:da:d7:b1:4d:0f:96:7d:fe:e9:f1:0c:f0:93:
75:df:0c:ae:d2:58:ac:8e:41:17:6f:85:9c:e4:5d:25:e4:2e:
51:02:36:83:b1:2e:4e:bf:43:4f:df:21:f8:a4:db:ea:2a:61:
45:3b:ff:a3:1a:22:95:48:de:f9:12:43:b6:ae:ba:ba:cd:72:
e6:89:09:e8:59:c3:71:3b:8d:b6:cc:88:9c:00:43:2d:51:e1:
94:14:a2:03:2f:9a:56:cb:63:b1:63:4e:2a:fd:f5:dd:64:22:
6c:ca:8d:b9:e7:2a:a4:62:e4:dd:9d:8c:ec:a7:8d:b0:64:6f:
f3:70:f6:b9:1b:8b:6b:e3:4c:27:32:8b:38:8a:13:50:59:ff:
46:07:6b:2a:e2:69:30:23:10:f6:e9:27:29:0f:57:37:5e:81:
13:42:07:f4:f2:16:f6:93:0d:b3:5e:53:67:00:6c:67:6d:ab:
cb:c0:de:1a:a1:bb:02:71:cd:b7:ab:99:a0:dc:2b:4e:46:b8:
c9:63:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:59 2025 by rpki-client