Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: xNN2ytzkpDe92XV2vKLPQDTVObv1RJMvV3Q+YLSUY8Y=
Subject key identifier: B9:9A:01:D8:75:B4:C5:E2:2C:DF:63:71:96:62:BB:F2:2F:9C:B9:41
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 019A71133DF2E4EAF4938842E4B9A55FC423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 10FB
Signing time: Tue 11 Nov 2025 04:01:17 +0000
Manifest this update: Tue 11 Nov 2025 04:01:17 +0000
Manifest next update: Wed 12 Nov 2025 04:01:17 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: BXuFqDapjonZhdXUUgUzfobr/XxdUJlPJBeW0uZnh8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3d:f2:e4:ea:f4:93:88:42:e4:b9:a5:5f:c4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Nov 11 04:01:17 2025 GMT
Not After : Nov 12 04:01:17 2025 GMT
Subject: CN=b99a01d875b4c5e22cdf63719662bbf22f9cb941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:c7:6c:84:af:34:7d:f8:16:dc:a9:4e:87:
ca:8e:82:9b:df:3d:08:09:91:18:c4:a2:2d:32:e4:
24:73:d7:bb:a9:22:de:e6:54:f7:04:8e:64:b7:d2:
39:55:39:f7:8f:da:48:20:73:05:ad:18:e4:f1:76:
5b:02:91:e9:9d:76:21:e8:77:c4:2d:c5:0f:09:11:
3e:cb:7c:39:6b:99:ee:2b:3b:a3:be:43:c5:f0:7f:
76:c6:a3:8e:01:6e:dc:65:7e:ba:c3:62:bd:23:b8:
e5:d2:c4:c0:9e:85:5e:21:c8:3c:40:f2:bf:c7:45:
8a:2a:99:fe:13:dd:46:2b:93:a4:2b:83:0b:27:12:
c7:da:66:5b:b5:c3:36:89:2d:09:ad:a2:25:45:db:
17:c1:81:bc:73:20:b1:26:88:05:40:02:4f:79:44:
f2:4c:ef:05:6d:b7:38:01:b7:bc:50:6f:a9:bb:5d:
45:92:5a:a2:18:71:16:5a:d6:5e:b3:91:80:2e:b4:
03:1c:e7:bb:37:f2:11:5c:93:b6:50:5d:87:20:ab:
35:24:fa:01:fb:f9:55:3b:b7:8c:24:25:5c:b9:9e:
83:75:a2:dd:eb:c3:b7:8d:65:70:a8:bc:b2:b3:20:
fb:b8:c7:78:57:5d:a4:ca:1f:43:da:d3:89:bb:11:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9A:01:D8:75:B4:C5:E2:2C:DF:63:71:96:62:BB:F2:2F:9C:B9:41
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:76:92:43:b2:98:48:05:82:86:38:35:80:4b:0e:7b:67:db:
cb:d3:8f:da:9b:a5:ce:14:67:e2:46:36:cf:4a:fe:61:2f:65:
b5:f7:62:54:99:c3:c0:be:5c:ea:22:99:64:3f:d1:d8:d6:70:
89:0b:46:89:2f:ab:7a:3e:5e:cc:7c:50:d1:d0:86:a0:90:ab:
94:c1:a8:30:d9:75:d4:d4:29:2a:bf:95:1c:68:6f:60:4e:10:
fc:10:53:d1:12:9d:56:e2:a1:5d:8c:55:48:3b:c1:cb:04:8e:
d3:7a:ad:64:98:20:1d:84:3a:62:3c:ed:11:bf:14:af:fc:a9:
ed:bc:04:cd:11:99:2e:b1:c4:c6:d3:cc:d2:d8:10:3b:73:d9:
29:12:17:db:66:ad:b6:23:ad:13:f0:74:91:d7:8e:f2:70:b8:
64:35:ac:84:44:19:b3:e5:9c:9c:02:60:2f:67:92:2f:41:ea:
dd:64:25:0f:38:4b:02:5c:1a:00:71:ed:f0:dc:3b:9a:50:aa:
85:04:d9:f3:49:a8:74:1e:ef:76:4e:57:c8:90:09:1f:da:f4:
c1:34:c1:ef:a8:b9:41:b4:2d:e0:31:93:35:53:70:35:a2:3f:
da:f9:41:52:27:93:4c:19:ab:05:1c:ba:7a:aa:bd:a2:16:a9:
ab:3a:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:31:15 2025 by rpki-client