Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: TTpX6ru5KPLuP2heNNAwPD64skwjjHjysoqYI/dNl0U=
Subject key identifier: 01:C1:2B:FE:37:7B:5A:D2:8B:C1:34:5B:25:DD:19:86:42:EC:4D:23
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 019A7293583963C52DBEF19CB12C72852180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 14C1
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: jEMvlFDDnv6BxIzx09cj13uTGQEi1uMR35zuVlC2R1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:58:39:63:c5:2d:be:f1:9c:b1:2c:72:85:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=01c12bfe377b5ad28bc1345b25dd198642ec4d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:4d:d3:2b:98:62:92:2d:59:a3:c2:87:64:
5c:56:fc:b0:15:26:bf:36:75:f2:bb:6b:3c:f8:3f:
e6:21:d7:5b:87:0b:3d:78:11:3b:ee:b8:9b:e2:5f:
cb:96:6b:da:3a:12:0f:06:e2:04:a9:27:58:4e:42:
3d:b2:eb:1b:f8:9a:28:40:dc:d5:ee:c7:64:d7:05:
ac:10:ce:64:c4:3c:8c:3e:6d:3b:3b:fb:98:68:eb:
d1:8e:61:b9:5c:9d:79:31:2e:d7:72:24:2f:88:95:
28:85:bf:c7:7f:37:44:65:c7:8d:64:c9:9a:2b:2d:
57:f0:1b:71:9a:ea:a1:c0:90:c5:d9:37:89:9f:9e:
4c:ac:fa:e5:f9:94:22:b0:eb:b6:87:1e:bb:bc:07:
ce:01:dc:05:81:65:69:df:a9:31:35:14:96:ac:27:
60:9f:ef:88:f7:72:27:4d:c0:cd:28:3d:6a:04:56:
73:f9:7d:68:cb:0e:28:3a:01:7c:a2:c7:fb:ba:65:
cb:cf:09:e1:a9:d5:da:ae:1a:d0:1f:72:d3:cc:24:
d6:9a:34:b0:f4:85:5c:7e:e7:4e:c4:39:ec:e3:8d:
60:eb:be:5c:81:40:8d:13:82:9e:23:10:2d:04:64:
66:69:0f:df:eb:78:d9:4f:62:b5:6e:65:b5:4c:05:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C1:2B:FE:37:7B:5A:D2:8B:C1:34:5B:25:DD:19:86:42:EC:4D:23
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:03:84:ee:ca:6f:d9:41:87:e9:98:90:1d:4c:13:17:24:5c:
c2:b8:d7:ff:1e:d1:4e:a2:11:b0:49:6b:10:16:df:60:ae:6e:
ae:f4:0b:8d:63:a2:2f:aa:77:c6:0f:dc:ae:55:cc:5f:27:98:
55:f5:15:cb:b2:16:e0:38:e9:6b:24:c4:a2:bb:19:1d:02:6f:
22:77:b9:65:9b:a0:b9:cf:7d:09:e5:ab:87:23:0b:13:b9:35:
5e:5c:94:52:31:9f:7a:68:5e:4a:cd:45:f2:07:c2:17:a7:5c:
a4:84:c7:e3:9e:42:78:18:67:ad:ac:6f:37:4f:22:0b:b9:e3:
41:e0:fb:4a:fc:c0:61:8b:2a:19:c2:39:83:5e:c5:41:7c:2e:
70:4d:cf:0e:9e:c7:a7:14:f4:b6:44:62:5f:13:34:25:12:e6:
b2:85:a3:56:31:74:a3:27:4c:4f:08:19:ff:c3:8e:bf:3d:3f:
3e:37:1e:6a:dc:61:91:26:88:bd:be:12:67:8a:cd:6f:1e:65:
6a:89:2b:21:fe:a3:ed:8d:5c:d0:ed:97:71:df:80:9d:df:7e:
a5:e8:0a:84:2b:e2:19:10:04:5d:4f:57:a7:5e:36:55:e5:34:
a9:69:d7:bb:81:c5:07:86:66:6b:a3:e9:b4:96:b5:61:d0:c1:
23:3c:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:51 2025 by rpki-client