
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: pDCMRSU5pKCHQN2ih8/IQyv2tdLMCScg2Q1qYP0Uz34=
Subject key identifier: 29:DE:82:8B:42:E3:8D:77:1B:DF:41:DA:DF:03:1D:4A:B9:34:F6:CB
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 0199FBEAE6598EA78C6E1785DB068C26C210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 11AE
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: A6xaadgMsX+xXWYRBbXGwK/7J3u4BxJXZqkV2VE3dgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e6:59:8e:a7:8c:6e:17:85:db:06:8c:26:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=29de828b42e38d771bdf41dadf031d4ab934f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:b1:ed:42:07:44:1e:03:01:26:82:78:6f:
24:11:f2:1b:00:2b:f5:53:1b:bf:3f:07:89:f8:70:
91:dc:86:79:fa:64:ac:e4:05:a7:09:41:45:fa:c1:
3f:24:70:fa:c5:e4:3d:6d:fa:07:7f:e0:78:d4:3c:
e6:ca:e8:27:89:d3:80:1c:79:74:20:63:a1:8f:89:
89:16:ec:a1:d4:ad:bd:37:a3:9a:b6:71:bd:a0:1a:
55:3b:e7:50:ca:6a:b9:a2:4c:85:7f:74:d9:34:54:
d5:67:13:57:53:ee:88:e0:22:d0:22:87:a5:75:20:
d6:9e:4e:07:6c:7f:3e:fe:db:8e:09:54:09:6e:55:
1a:17:df:11:d6:98:61:8c:75:82:ac:b7:b7:9e:0b:
9c:ef:e8:95:16:ec:5e:95:18:e6:56:e3:ab:db:5f:
dd:27:fc:25:52:fe:c6:f0:de:f5:6f:66:14:cb:fb:
d6:dd:b4:12:42:d0:61:95:7b:d3:ca:05:1c:d6:8e:
a0:fa:38:97:96:8e:94:0a:93:7e:47:4e:6c:88:46:
d7:56:10:60:46:a7:2e:3c:d3:30:d6:af:04:24:13:
bf:5e:7a:8f:62:b9:4b:6b:b0:f9:80:31:43:30:33:
90:2e:24:6c:88:e8:ea:d4:ed:7e:0f:4e:0b:9e:01:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:82:8B:42:E3:8D:77:1B:DF:41:DA:DF:03:1D:4A:B9:34:F6:CB
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:d3:a5:ef:b9:15:82:e8:06:50:25:6f:66:9b:da:8b:16:
1e:f2:6f:f9:41:54:aa:29:66:f3:4b:4a:b2:ed:cb:94:ed:b8:
0a:ac:bd:7c:9e:13:dc:d3:a9:30:d1:94:4c:30:98:52:95:ba:
71:76:85:cd:00:a8:48:6f:6a:f8:da:74:02:83:70:c4:ec:52:
a9:bb:fd:c1:9e:dc:df:37:63:5d:a9:b5:aa:f1:c6:0b:cc:4b:
ae:99:4d:f6:e8:0f:be:72:f8:6e:42:9e:15:9b:4b:e4:25:09:
a6:94:62:8c:fb:4a:6b:a5:d4:d8:6c:f6:1d:b4:84:ac:e8:7e:
9d:9f:94:c5:8b:a2:a5:41:2a:6a:f8:4c:e5:12:c5:54:2b:09:
f9:9a:10:93:a8:08:71:a7:13:b6:d4:5b:35:82:71:2a:16:75:
75:20:a0:11:c4:87:c3:d0:ab:6d:bd:64:c4:0c:e1:06:13:76:
20:dc:c9:19:38:35:47:f1:d8:e8:a7:4b:f5:2c:29:de:ab:84:
08:cd:fc:7a:b9:e7:65:db:35:6f:da:17:24:f3:42:bf:b9:9f:
78:83:06:8a:32:da:82:f0:e0:e6:2a:eb:1d:04:f8:60:d5:9d:
b8:20:24:0c:24:50:05:5b:f4:58:fe:c8:a2:e2:d8:a3:95:cc:
ca:4b:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:35 2025 by rpki-client