Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: EQD8J3owQYg7bPvjJSm0i7V1YCmupyNRDPubynR3V2Q=
Subject key identifier: 45:67:D4:65:BB:44:81:5D:6B:89:CC:2C:F6:8C:9D:EA:13:88:15:AC
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 019A00DA66BC033F748EC5F8407ED01CAD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 0666
Signing time: Mon 20 Oct 2025 09:01:44 +0000
Manifest this update: Mon 20 Oct 2025 09:01:44 +0000
Manifest next update: Tue 21 Oct 2025 09:01:44 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: 25Dof82v130dQv2uwLBCvFtFT4/rx0oxbtii6kAJleQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:66:bc:03:3f:74:8e:c5:f8:40:7e:d0:1c:ad:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Oct 20 09:01:44 2025 GMT
Not After : Oct 21 09:01:44 2025 GMT
Subject: CN=4567d465bb44815d6b89cc2cf68c9dea138815ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:55:73:72:e7:ae:25:a9:88:a2:54:7b:de:
09:36:a4:e6:a4:02:c0:5c:3e:22:55:b9:ac:d4:27:
bc:f1:bf:7b:c8:d3:53:38:21:04:cd:e4:71:74:a8:
f7:77:08:ee:97:45:4a:14:2f:be:08:a1:31:15:05:
22:f1:8c:b4:8c:39:8e:a7:61:e9:ba:e8:22:07:7d:
65:02:4b:4a:e6:bd:9f:e8:5d:2a:13:42:68:08:02:
ac:0f:be:33:6a:52:21:f5:22:6e:12:e1:f1:12:9c:
b4:a3:0c:d2:79:93:54:de:53:cb:f9:c1:29:c8:33:
82:80:8d:a8:22:1a:54:2e:e2:db:26:4a:69:fc:fc:
9a:4f:da:22:f6:bc:86:67:34:cf:7e:93:55:12:1d:
cf:3a:34:54:26:96:1d:1d:21:c2:24:65:33:1d:1a:
77:72:e1:66:42:27:9e:e0:9c:a9:ca:0e:c3:8e:50:
0f:ac:ac:fd:a1:35:aa:98:33:5d:eb:07:aa:76:c1:
c3:61:d9:51:bf:5a:d5:a7:89:07:91:e2:f0:79:20:
87:68:ef:a2:e7:b3:68:69:70:21:81:24:a3:55:3b:
88:c5:a5:61:19:15:ce:a7:45:68:0f:ab:38:42:f4:
e1:75:b7:d6:68:7c:04:a0:9f:f7:0f:38:ba:17:0f:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:D4:65:BB:44:81:5D:6B:89:CC:2C:F6:8C:9D:EA:13:88:15:AC
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:3b:1d:52:07:a5:b3:5a:9b:f3:8a:94:6b:21:a2:ca:07:
b3:6b:0f:2d:19:74:76:0d:05:6b:be:2c:f6:e4:06:dc:7d:34:
35:e9:14:e4:44:7e:57:60:c4:d2:90:4d:f8:79:24:79:ee:81:
47:2c:17:66:e1:f2:72:0c:62:e5:08:8d:46:a9:ed:76:66:4c:
bc:0a:2f:4d:f8:9d:c4:b7:5a:a1:3a:96:1d:4f:8d:21:5e:2c:
88:97:ab:60:11:65:08:d2:6b:83:ad:a7:ae:1c:10:0a:6d:80:
04:59:9c:8c:d5:ed:78:b2:a6:e9:d9:14:80:e2:68:48:f0:54:
92:ba:d9:f9:b0:96:ac:aa:bc:0f:30:87:48:96:b4:80:32:ba:
df:6c:06:ea:3b:15:2d:d6:60:c5:ea:da:0c:79:c2:2a:c8:fd:
62:c1:51:ce:09:94:51:7d:3b:11:69:b2:d5:4f:31:e7:46:cd:
1c:cd:67:1a:97:e0:8f:d8:3b:35:92:d3:09:0f:10:0d:36:47:
17:49:84:ec:71:74:a7:31:a2:52:92:09:bd:be:45:23:c3:bd:
a0:59:93:9d:49:b7:af:8c:9d:f5:bc:bd:f1:17:f8:8f:38:7b:
a5:f7:7c:60:87:4c:cc:42:f5:65:9f:d6:e8:0a:f9:ad:90:87:
71:8a:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:39:59 2025 by rpki-client