
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: fYZbmhSIi0wzsPE8WGS7IpSOoqOfU/AbU0GTiLhhBAk=
Subject key identifier: F8:29:31:F0:40:F5:B8:C2:46:C8:7A:B0:42:7F:FE:B8:60:84:D6:46
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 0199228C56611E0E1D200EEA9F62788BA55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 1413
Signing time: Sun 07 Sep 2025 05:00:46 +0000
Manifest this update: Sun 07 Sep 2025 05:00:46 +0000
Manifest next update: Mon 08 Sep 2025 05:00:46 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: WDOPJ04ADyVefCxHNnf9QwPn+jLWzP2fAaTrE7xqoj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:56:61:1e:0e:1d:20:0e:ea:9f:62:78:8b:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Sep 7 05:00:46 2025 GMT
Not After : Sep 8 05:00:46 2025 GMT
Subject: CN=f82931f040f5b8c246c87ab0427ffeb86084d646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:b0:11:88:fa:e7:f6:ef:ea:dc:ea:84:03:
e5:2e:9b:21:a3:1d:2e:61:0f:89:f8:6d:aa:1d:97:
ad:76:ac:3a:d9:78:f4:6d:a0:7f:52:64:81:48:d4:
a5:56:bd:4a:d0:03:25:1d:b0:6d:0e:ef:07:72:33:
a2:fb:74:2e:79:25:aa:ec:5b:5c:f8:99:00:5d:c8:
ee:04:1f:fa:ad:14:7b:1f:3a:ac:b2:a0:97:0d:60:
1b:52:98:5f:b6:75:85:50:6d:0f:80:fb:4b:76:77:
cf:bb:b2:3b:c0:4e:19:ee:9e:c7:3f:e2:6a:a2:bc:
b2:cc:10:55:b7:81:d8:e4:19:54:ec:f6:4f:c1:cd:
66:45:25:8f:83:e3:5e:48:40:6b:48:12:6d:70:15:
21:d4:1a:dd:a4:02:a5:c6:7f:69:73:97:75:73:65:
b0:81:90:ce:a1:f8:f5:04:79:c5:f6:34:27:e8:d6:
e1:69:a4:a1:3d:40:50:a9:f6:28:8a:60:70:1b:26:
17:9c:f1:0e:1d:ea:1c:c5:21:92:3c:a9:dd:d8:41:
24:15:5d:2d:7d:7b:31:d2:f0:0a:09:20:4c:f6:3a:
d2:42:92:de:18:08:d8:d1:6d:01:16:e3:32:8d:b3:
9d:43:75:64:06:cd:67:be:e1:b2:f2:63:59:ec:e1:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:29:31:F0:40:F5:B8:C2:46:C8:7A:B0:42:7F:FE:B8:60:84:D6:46
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b6:77:72:47:e0:0d:e7:5b:d6:e8:06:39:37:61:66:6e:7e:
9e:7e:04:da:7a:2d:85:6d:78:bb:68:f3:f9:aa:16:81:86:a3:
87:8d:b2:96:1c:ba:5d:a2:41:6a:03:cc:b0:45:9f:11:7b:5c:
00:07:9d:c3:56:56:10:e2:95:a1:e6:8e:eb:c3:43:ab:d9:bf:
14:a9:c2:a3:4f:7c:6e:52:a0:3b:e6:20:ee:66:55:4c:18:a1:
db:ea:85:7a:a2:7a:46:ad:4a:5b:80:09:d9:0f:3a:17:86:42:
1a:2e:8d:e9:d4:65:33:cc:0a:d6:fd:81:f4:c8:b4:a3:d5:6d:
fc:fc:cb:a1:9c:4d:61:7d:15:2b:39:5b:70:dd:67:e0:12:09:
53:80:e2:a4:8b:e3:05:d8:92:93:8a:ac:82:ff:1d:d7:48:fa:
b0:b8:1e:91:9c:f8:44:4a:64:24:66:de:85:a0:78:85:21:9e:
4d:93:28:fb:1b:da:9e:57:a5:d2:7f:aa:67:98:48:26:72:5e:
1c:40:90:6a:99:b8:eb:5e:dc:b4:a6:55:30:e9:45:1b:27:89:
ba:6e:f5:1c:7f:28:37:e3:66:8f:f4:24:eb:47:a2:92:fe:8d:
7f:74:7c:14:2b:7e:d3:83:73:69:9a:ee:53:96:74:be:6a:81:
7e:6a:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:42 2025 by rpki-client