Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier: QPu4l6azROA/yFPQipsIcYW8BabBuFggOd4NmqCQkz0=
Subject key identifier: 87:34:FD:92:8F:60:8A:FA:4E:56:65:9E:63:16:D2:30:7B:F7:B8:19
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial: 019A71B8E00D78B0D4BE93441D166AD2261D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number: 09B7
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: B5V7VxRsYIv1H4XMQcn9YXixNWl6/RiXVQkLZAnAfU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e0:0d:78:b0:d4:be:93:44:1d:16:6a:d2:26:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=8734fd928f608afa4e56659e6316d2307bf7b819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:5b:ca:6b:d5:20:b5:68:da:77:1a:58:0f:
b2:e5:ad:8f:9a:ec:05:43:7e:aa:2e:0f:22:ca:c7:
d0:f6:41:8b:f1:fa:c7:d6:fc:b4:ab:56:ed:f4:ef:
3e:ba:27:0c:bb:4d:9d:cc:87:8a:88:c4:fc:9c:8a:
81:73:01:ac:6e:ce:3d:68:c9:e0:b7:29:6b:c4:e9:
6d:24:c8:f0:52:65:a6:4e:44:1c:b4:c6:2e:cb:1f:
f0:ea:54:6e:ad:db:a7:f0:79:e9:5d:38:25:d0:f1:
e6:3f:5b:aa:2c:f2:ea:f9:35:37:69:cf:a9:38:24:
79:35:66:77:53:cf:a0:f6:13:ef:f7:8e:5c:4e:f1:
bb:ef:72:05:fd:68:5f:85:98:1f:31:af:49:84:53:
fa:3a:56:95:69:8c:30:ce:1e:62:35:03:9c:88:7e:
a6:e9:74:db:21:bd:20:2e:08:e3:cb:1e:15:5d:bf:
23:46:b9:0f:0b:a9:75:08:a0:f0:dd:80:b4:bf:46:
d7:3a:2c:81:4e:71:db:15:43:db:04:2c:19:da:69:
0e:86:42:c3:0e:bc:2d:54:2a:5f:0e:1c:c8:fc:f5:
5c:61:02:33:9f:f2:6d:16:d3:3a:fb:d2:9a:e7:fd:
1e:1f:a0:43:ea:f6:a9:10:7f:c8:23:ac:6d:fa:40:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:34:FD:92:8F:60:8A:FA:4E:56:65:9E:63:16:D2:30:7B:F7:B8:19
X509v3 Authority Key Identifier:
keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c8:13:5a:2a:f4:1a:12:41:ab:35:5d:b1:4f:29:80:70:15:
4b:41:c1:d4:74:53:9f:d8:4a:e2:b0:a6:66:2f:16:76:2f:ec:
b8:ef:33:21:e2:88:3f:68:b9:12:c8:48:5e:09:fb:89:25:8e:
6d:2a:30:a7:f6:8e:13:80:56:74:62:6f:63:2d:b3:1b:80:80:
ce:72:0e:fd:20:fb:7c:83:d7:79:82:04:72:bf:23:53:a8:58:
6e:1b:d0:92:d4:00:85:af:75:bf:49:0e:0d:51:22:e6:1d:bd:
56:24:e6:2b:ce:78:12:67:62:c6:67:e6:8a:99:4f:49:73:a1:
b9:a0:e0:20:f2:d4:ec:5f:d2:86:af:c2:d8:ad:f8:8f:a8:61:
01:1d:71:8f:48:fe:f8:80:e7:80:6e:58:72:82:5b:fb:1e:d6:
30:97:74:60:ee:6b:c5:a4:9f:1a:b7:a5:c3:2c:bd:72:79:08:
60:db:ba:76:e4:19:7f:cb:16:da:23:4a:52:e6:2c:dd:6e:e0:
44:62:7e:4a:c0:c4:86:a8:0f:13:7f:c9:d6:88:50:cc:39:60:
36:3c:7c:4a:e4:99:97:c4:f0:d9:9b:6a:e8:52:43:ed:9a:9f:
0f:ac:49:bd:f5:7e:8f:8f:0d:38:e1:79:11:1b:51:e0:17:c8:
1c:67:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:38 2025 by rpki-client