Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json)
Hash identifier: hQjERTQ7bjOKVj472iZVWuLDUbtqQ4BcoqjjmwKEW6s=
Subject key identifier: 68:60:CF:C6:2C:79:2E:9F:77:DC:5E:50:DC:90:BF:E6:09:11:B3:6B
Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Certificate serial: 0199FE470D5FF41FEF3092F8E0439011D552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
Manifest number: 0448
Signing time: Sun 19 Oct 2025 21:01:33 +0000
Manifest this update: Sun 19 Oct 2025 21:01:33 +0000
Manifest next update: Mon 20 Oct 2025 21:01:33 +0000
Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: hiblQWLZ2NJtHJeMcNDesxM4Bv1S3r0g4+Q9YmsHexo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:0d:5f:f4:1f:ef:30:92:f8:e0:43:90:11:d5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Validity
Not Before: Oct 19 21:01:33 2025 GMT
Not After : Oct 20 21:01:33 2025 GMT
Subject: CN=6860cfc62c792e9f77dc5e50dc90bfe60911b36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:68:f5:ed:0f:1e:cc:4f:ba:9e:33:a8:67:
b4:f9:ae:a0:d6:ec:83:03:cb:6f:de:de:14:dc:8a:
7e:b9:ca:64:fe:de:b4:b7:1a:00:2d:84:6a:65:74:
5d:f4:d1:5b:3a:4d:9f:0c:9b:72:1e:33:23:51:cb:
25:88:01:74:83:4e:45:24:03:d9:aa:07:3a:20:1b:
c6:55:e7:fe:7d:7a:a1:b6:79:3b:85:0f:ee:57:90:
4a:d0:08:ca:f9:f9:dd:44:cf:63:05:66:9e:4e:c3:
0d:03:6d:90:01:d0:33:34:c7:42:5b:0b:62:4b:84:
89:65:a6:3c:12:a9:be:30:c8:09:7a:fd:d0:c0:32:
b1:b0:ed:f6:b0:79:ab:d6:bc:74:67:d5:da:f7:57:
ae:a4:ae:d0:1a:d2:a0:2a:53:bb:8a:1c:90:c1:3d:
c0:07:06:4a:7f:84:39:f3:f6:5b:95:ea:af:12:55:
20:a0:da:4a:37:52:27:f2:f5:1b:b0:d9:7f:27:f0:
37:8d:40:0a:c2:d7:45:ea:20:b6:a1:8a:3e:b3:81:
30:83:eb:91:e7:b4:3c:8c:fc:9d:04:c6:f3:fa:95:
ab:4a:f0:c0:58:c0:79:62:2e:18:f3:7b:7e:1a:d9:
d2:a3:e2:10:d2:93:20:1a:ba:a6:b5:4c:04:1f:00:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:60:CF:C6:2C:79:2E:9F:77:DC:5E:50:DC:90:BF:E6:09:11:B3:6B
X509v3 Authority Key Identifier:
keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ca:88:25:19:a3:41:a6:a9:6f:a2:7b:8a:45:ee:05:d9:15:
c8:f6:bf:ce:9d:a7:7e:ea:8b:bf:47:e9:ad:98:db:d2:9e:0e:
26:78:76:3a:28:c0:ee:b3:0e:b3:93:8e:15:be:15:5f:68:62:
1c:de:6a:1b:9b:a3:e2:3a:f5:c3:4c:67:a1:00:66:e0:6c:ff:
e8:5a:dd:91:b5:e0:a2:8f:34:86:d9:c5:7a:e4:4e:62:9e:7c:
57:9a:10:b2:97:23:eb:54:4d:68:a2:f4:ef:3a:fc:22:57:be:
25:54:3f:7c:4b:df:b0:32:6b:f5:84:52:cb:d7:b2:2c:7b:86:
63:e5:91:07:c7:b2:89:1f:ae:9c:33:47:e5:72:0a:b5:ac:ac:
47:5d:be:6a:f9:5f:a5:fa:fe:a8:3a:e2:08:34:b6:21:ad:75:
28:a5:60:f5:30:55:11:1b:d6:ae:6c:45:ce:a0:43:2a:71:da:
18:6b:82:e8:7c:eb:73:88:34:f6:77:e3:d3:f0:1a:6b:38:24:
92:e8:ff:3f:03:55:e4:6e:5d:bc:c8:e2:33:90:77:a4:a0:8f:
06:19:71:ee:e3:fc:76:4d:1b:3c:a1:1b:1b:a8:40:b5:23:e5:
9a:19:f9:6a:8b:a0:dd:a3:53:b5:77:2e:cb:65:81:02:70:b0:
3b:5d:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:21 2025 by rpki-client