Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier: RKL38N8RTbmnEP3l6DwpaY7vnkdFzjph9emCVjTE+B8=
Subject key identifier: E9:11:92:49:61:FF:4D:1B:22:C0:6A:B6:D8:68:14:1B:99:87:94:06
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial: 0199FBEAD40B8452FD130C7819EAD8C234B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: /JdLA3Sbd8cnHGkKrClUC8NAFrHEiZDmDOy2M5NiON0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d4:0b:84:52:fd:13:0c:78:19:ea:d8:c2:34:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=e911924961ff4d1b22c06ab6d868141b99879406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:ec:54:ed:29:1e:76:5f:af:5c:10:b5:bf:
83:62:55:00:d0:2d:6f:5b:19:d4:f6:e0:48:8a:df:
7c:be:f6:11:86:91:4f:18:2d:16:10:c5:74:04:ae:
1f:c3:00:4c:62:60:62:25:ae:31:f7:86:94:c7:a8:
4f:d8:4d:90:28:aa:4c:10:3e:e2:8c:5b:78:db:49:
a0:82:3b:c0:c1:5e:dc:72:a5:5a:cc:0a:17:0c:80:
28:b4:6c:a0:3a:11:17:5c:2d:65:46:23:8a:87:35:
ee:1e:6b:a0:84:78:93:37:b1:f8:62:55:d8:62:dc:
62:86:9d:d1:03:79:f1:44:ce:0a:91:6b:a6:2c:25:
27:12:dc:2b:1b:81:4c:3d:6b:af:d2:0e:b2:cf:f2:
9e:19:54:94:03:b3:5e:e1:a4:d0:ed:e6:77:87:8f:
71:07:47:21:87:4c:ea:6b:40:f7:cb:65:21:6e:8e:
2a:ba:33:f9:6e:bf:f1:84:d9:f7:d1:8c:39:16:be:
15:89:3f:bf:b7:17:74:d7:89:4f:50:7f:8f:45:27:
33:ac:56:2c:13:bc:96:de:1b:e9:a1:73:3d:ba:9f:
db:42:48:49:3e:29:7d:80:af:3b:13:1c:d0:21:27:
62:44:4a:cc:81:eb:2c:5a:c8:1b:ca:d4:7a:64:4d:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:11:92:49:61:FF:4D:1B:22:C0:6A:B6:D8:68:14:1B:99:87:94:06
X509v3 Authority Key Identifier:
keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:8a:cc:91:a9:ac:f4:34:2f:38:dd:97:1b:00:da:cb:86:
83:ef:40:fb:a0:67:20:ea:e3:84:08:50:95:19:c5:4f:5d:9a:
ad:aa:ab:9b:5a:b9:1d:4e:5f:9a:00:50:14:b9:e9:9d:a2:0d:
75:7a:ea:37:47:56:91:37:11:65:d7:46:54:ac:bf:29:0b:99:
f1:f5:6a:bd:3d:9b:43:67:58:5c:81:ca:38:1a:61:ad:a4:20:
62:7f:1c:2e:b7:86:5f:6a:be:fe:83:21:a0:d9:36:d1:6d:bf:
22:0b:5b:d2:c2:f6:06:aa:2f:5e:7e:bb:ae:f7:09:53:9e:27:
19:9f:fa:4b:7f:39:79:c9:23:05:61:82:71:93:9e:5a:c2:c2:
eb:41:48:70:94:94:c2:3b:22:b0:93:c2:6d:1c:4a:c4:34:a8:
8f:29:55:dc:c0:29:cd:34:5b:49:f1:68:ac:07:bc:8e:73:b8:
ed:0e:dc:4e:82:64:db:8a:67:ec:00:da:11:4d:d4:ec:da:75:
38:27:f8:ec:c5:a8:d4:b2:1d:c9:b5:2c:b9:39:b6:61:33:a1:
74:ba:37:b0:fe:ee:e5:dd:9c:58:72:fa:be:cb:59:d8:ba:34:
2c:2d:28:8c:1e:17:4c:6b:e9:c5:9e:0c:02:ad:57:d4:f6:b7:
15:78:78:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:30 2025 by rpki-client