Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier: H0smoCEy9sKKCo0RFabC8tngUIlmMazliP4QgTXHSZs=
Subject key identifier: 45:AF:6F:9D:C4:3E:25:DC:76:1B:4A:68:29:29:71:3D:56:70:27:1C
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 0199FCFD9C5CC4897A6A02A68C0AF8C2174F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number: 0BD7
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: 9TYyl+er3MRiXfs13Z7VWkJL0eBX/KeANUC4QqnQ10U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9c:5c:c4:89:7a:6a:02:a6:8c:0a:f8:c2:17:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=45af6f9dc43e25dc761b4a682929713d5670271c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:6b:87:ab:e0:3d:f1:1a:97:14:09:10:a2:
b8:80:ea:a7:0e:58:e1:64:e2:39:12:5c:38:03:71:
56:4f:4d:ae:92:ac:48:0a:bb:f3:fd:cf:3a:14:f4:
19:6b:51:5b:c5:38:da:c4:0a:59:17:c6:30:6a:f0:
7c:2a:71:0e:5b:eb:dc:22:8a:f5:4f:74:4c:c2:94:
d4:9d:86:ad:cb:ec:c5:1f:25:dd:e9:87:e3:95:d4:
51:2d:a4:3a:b3:d2:80:23:e4:05:6a:7a:08:c7:c0:
04:b1:a2:0f:4d:da:f7:03:7c:8e:0c:fd:33:af:7d:
9c:01:82:a8:11:b0:e7:bc:2b:4b:61:df:dd:a1:c1:
a9:4f:85:20:b1:34:01:5a:a3:57:ae:5e:c1:aa:ea:
e6:ec:bc:43:bb:0a:d5:62:f0:f1:d9:18:f9:61:41:
67:36:f9:b0:1a:ed:95:13:b9:64:cc:15:fa:95:4b:
2d:05:ad:5d:10:a1:08:70:de:90:10:fe:76:27:5c:
a3:9c:5f:7d:1b:bb:49:50:ec:20:23:5e:f5:04:39:
b1:0c:ea:60:50:63:21:76:15:00:68:d3:3c:1c:fd:
05:8b:9e:85:b5:fc:8f:39:b3:98:36:36:b1:00:9d:
59:51:f2:f6:08:0e:ee:e3:e9:27:b8:87:36:29:3a:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:6F:9D:C4:3E:25:DC:76:1B:4A:68:29:29:71:3D:56:70:27:1C
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:33:4f:62:68:65:4e:4f:b8:f2:12:f1:44:86:f3:b7:18:ab:
fa:ec:72:27:b1:83:8f:a0:30:20:00:86:1e:a3:b2:f6:80:0e:
ce:ab:af:f6:aa:1b:eb:56:bd:7e:18:bb:73:ce:04:14:b1:8c:
0f:eb:f3:6f:90:bb:d0:4e:7a:11:db:e0:36:2e:4a:9b:7a:c8:
aa:b3:86:c5:8d:ad:76:09:e9:02:aa:d8:8f:a8:13:c3:e7:c4:
c3:17:35:85:73:b0:51:2c:08:1a:5f:56:6c:7d:4d:18:de:6c:
89:95:e7:e3:00:c7:66:91:9f:25:dd:df:ad:63:7c:1e:85:66:
e3:3e:9e:d0:c4:a8:72:94:7e:a5:70:6f:aa:dc:85:3d:84:fe:
36:9f:54:27:69:10:79:c7:7b:5c:d1:58:41:54:bf:0f:f7:3d:
99:00:b9:df:2b:de:1a:09:40:4a:bd:d3:96:f3:d2:5b:5f:55:
23:c2:d3:74:4c:03:4e:8a:2b:33:5c:80:13:47:bb:4a:b1:56:
eb:1b:5d:00:ab:45:6c:75:6c:16:7c:f3:30:ed:1a:f6:30:f6:
79:a7:45:3a:66:9c:a3:f6:cd:d8:25:e2:3f:76:6b:b5:40:d2:
35:34:89:af:6f:6d:e3:cd:83:a8:7d:c1:12:5a:eb:bc:79:3a:
a8:12:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:51 2025 by rpki-client