Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: kUsWGd1o0BKFU3H4In50SuWeBcFuvxVIDRuJnUkt6DY=
Subject key identifier: 01:13:19:3C:7A:F7:99:F1:B8:C1:97:2D:62:4B:5F:0D:B6:7B:46:92
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 019A70DC19C8C73FE41026F5AD137736DBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 0668
Signing time: Tue 11 Nov 2025 03:01:03 +0000
Manifest this update: Tue 11 Nov 2025 03:01:03 +0000
Manifest next update: Wed 12 Nov 2025 03:01:03 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: dsdPt8IqAK5XoP20ecLoIiAQBszLSjcmJ9rkbLIPeoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:19:c8:c7:3f:e4:10:26:f5:ad:13:77:36:db:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Nov 11 03:01:03 2025 GMT
Not After : Nov 12 03:01:03 2025 GMT
Subject: CN=0113193c7af799f1b8c1972d624b5f0db67b4692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:d4:91:dc:10:17:61:95:75:77:39:4b:42:
8a:ed:96:e3:ae:66:bb:5f:16:c5:6d:8c:a1:b4:a7:
a1:0a:d0:55:7f:a6:af:43:63:dd:34:6b:13:3a:66:
15:46:74:87:5a:96:70:4f:cb:74:86:5e:ba:9f:74:
8a:da:42:4b:5e:aa:83:a4:42:6a:8e:a5:40:d6:c9:
18:b8:1d:e1:bf:d6:81:d8:f6:5d:d9:19:68:e0:ba:
78:5c:a3:f7:bf:f5:fb:5e:58:18:31:8b:21:09:93:
ee:19:1e:7b:9f:ef:27:c0:27:ec:58:42:b1:c8:b4:
69:86:3c:5d:2d:7a:16:6f:46:fa:97:f7:5f:6c:53:
d6:57:e7:40:a4:a8:68:58:b0:b7:8e:93:57:46:48:
bb:f9:6b:c5:ab:0a:05:c6:45:8a:d7:80:39:ba:96:
28:a0:59:90:24:65:cf:66:1d:1b:46:c7:1c:90:13:
9f:3e:68:d4:1b:f6:90:f6:76:ce:96:55:97:09:04:
33:67:52:5c:74:1d:78:c0:c2:84:c5:6e:67:8d:75:
08:89:99:e2:47:c5:85:91:e8:3e:d5:4c:0d:a6:ad:
bb:9b:7b:83:08:86:8d:44:da:b6:f4:a6:53:d0:42:
70:3e:f4:bb:9f:82:58:63:ec:17:1f:13:a3:35:26:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:19:3C:7A:F7:99:F1:B8:C1:97:2D:62:4B:5F:0D:B6:7B:46:92
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:23:94:4d:f3:45:de:e5:9d:40:27:3e:7b:96:d1:82:3f:b9:
20:61:e0:84:34:89:e0:88:eb:ba:62:15:2e:ca:0a:eb:0a:51:
21:e8:d8:aa:8e:81:7c:ca:41:20:ba:53:39:8d:7f:17:87:58:
70:f7:45:fd:79:4c:28:f0:8b:dc:00:85:13:c7:0d:10:17:3b:
32:94:f2:42:d4:19:7f:1d:23:64:c7:09:ba:f1:26:6a:8d:08:
a6:d5:38:b4:ae:fe:60:c1:14:61:eb:4b:26:cf:d1:95:34:a5:
47:d1:01:eb:ee:43:06:58:6b:a4:3b:13:ed:e4:38:96:e6:7e:
d2:4b:c8:5b:0d:b2:ba:0a:b4:3a:0c:4d:2a:4f:06:c5:04:f2:
c2:33:d0:2e:05:9e:ca:1e:e9:eb:2c:33:e0:1a:db:07:e9:bc:
8b:5f:00:c7:e5:88:3b:ae:09:fe:a4:cf:7b:0c:80:cf:6a:a0:
43:76:de:c3:e3:81:22:86:f5:0e:ad:04:d9:63:6f:2d:bc:5c:
2c:d4:d0:90:2c:a3:92:b2:12:1b:44:11:b7:ca:ea:e9:ae:b6:
3f:d9:19:c6:b2:01:c0:72:7c:4b:4d:ea:48:a2:94:17:45:95:
0a:91:02:62:06:c0:f5:4d:b6:4a:67:e3:f2:5c:65:d3:c5:55:
45:36:59:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:01 2025 by rpki-client