Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: R2lAQ2MN0+AOSGO4iDXahiRdvUnz3wE2mcjCNsO2wuY=
Subject key identifier: FA:6D:5F:9D:EF:9E:AE:10:15:E9:2F:0B:E7:B3:95:EF:32:46:47:35
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 0199FBEB23A38E45FD3D679348333AEB2678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: p9m4nFDAeZ5Sv8E0BrPZj0gEnuMmVVEj+/uMTG37IAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:23:a3:8e:45:fd:3d:67:93:48:33:3a:eb:26:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=fa6d5f9def9eae1015e92f0be7b395ef32464735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:98:5a:4d:95:c9:61:8b:f2:83:00:d8:9f:
be:dd:1f:c0:5b:60:c6:86:6c:3f:d4:63:2e:6e:0d:
cb:61:eb:b6:78:9a:ff:c1:e6:73:b6:42:73:85:cf:
6d:e7:12:30:b5:e3:1b:6f:16:c6:ce:26:92:27:2e:
f1:1a:ba:ef:ef:2c:06:00:8f:de:0a:de:45:e7:62:
44:50:15:0f:35:0f:d0:34:2a:56:72:08:dd:9d:0c:
ba:61:a1:52:5b:06:a6:36:dd:91:4b:f2:23:7d:b9:
a8:3e:e0:4a:af:53:0a:1b:4e:6e:f2:1b:35:d4:b0:
56:a5:fb:4c:60:48:47:ab:ee:12:93:f5:d6:f2:69:
57:2c:99:37:b3:44:15:77:1e:2e:4e:25:4c:9a:9b:
4e:15:2e:d9:7b:8d:f9:d7:8b:68:9c:8a:c4:4c:6b:
be:42:d9:68:35:64:52:e2:c1:90:5d:05:4c:79:a8:
e4:4d:18:dd:03:f3:f1:6d:2a:73:9b:f2:3e:ec:f2:
32:53:e9:cd:07:a1:ed:26:33:ba:8d:e1:f1:bb:8f:
7c:6e:19:d1:0a:ce:6c:6b:0d:7c:32:40:a7:99:36:
8a:81:e7:4b:11:d0:91:30:45:8e:e6:7b:3b:85:eb:
a3:26:29:19:4d:36:c2:13:af:f9:7a:4d:e3:89:73:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:5F:9D:EF:9E:AE:10:15:E9:2F:0B:E7:B3:95:EF:32:46:47:35
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ec:c1:b4:dc:1f:78:88:89:50:89:56:8d:60:5d:ce:a5:1c:
88:79:1b:e4:56:77:71:e6:ef:1c:4b:43:38:66:82:c5:0f:4a:
ab:80:3e:a7:ad:40:0a:b3:40:83:78:c4:f1:22:ad:e8:47:01:
0c:b6:ec:fa:cd:de:b8:4a:0a:3e:1c:b3:da:25:b3:1b:c7:88:
96:86:02:91:52:5f:31:9b:59:2d:89:01:35:69:d0:67:b0:ae:
f0:f2:23:25:68:06:5e:33:b7:ae:43:bd:d2:29:fc:97:14:a4:
0f:dd:31:8c:f3:7c:0b:c2:f6:0d:c6:2e:b0:7c:5e:8e:01:13:
4a:ab:a3:b5:3c:03:d0:96:f4:b6:f1:0a:8e:08:02:74:49:4e:
bd:c5:fa:ee:28:f3:7f:a4:50:b0:ac:da:23:6a:36:67:40:09:
ef:26:71:a7:c3:ed:cb:e0:6b:65:e8:2b:fd:2d:18:42:bf:04:
d9:08:9b:09:2f:ec:86:f1:8f:94:8b:c0:86:75:b5:55:ea:17:
44:3f:50:5d:f0:32:61:c5:34:c1:57:82:ae:c0:9d:3e:96:06:
59:22:8d:d8:16:69:96:70:69:8e:6c:08:94:04:4b:59:74:a0:
97:4b:87:cc:84:c4:7b:de:55:94:6d:d6:73:57:b5:21:ae:7a:
6c:ce:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:27 2025 by rpki-client