Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
File: lkptHqRrxAuqMavE9ByQZn7-Nu0.mft (raw, json)
Hash identifier: CfNzv3/1tQa9apEVLfq+HzANr8E0fw+Sb5lQCGmA8vE=
Subject key identifier: A0:90:9E:20:FD:F8:EC:A9:48:89:DD:2B:1D:2A:FB:78:5F:27:E2:32
Authority key identifier: 96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
Certificate issuer: /CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Certificate serial: 019A71B7B47B01CB7D5B1C73612ABD5F1103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
Manifest number: 07EB
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: lkptHqRrxAuqMavE9ByQZn7-Nu0.crl (hash: xzAthnOLDaERAl2QRSPKllrVFUeADhWEHdp6M+Fk/yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b4:7b:01:cb:7d:5b:1c:73:61:2a:bd:5f:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=a0909e20fdf8eca94889dd2b1d2afb785f27e232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:4a:84:b0:8a:49:0b:b6:77:d0:d5:ab:2c:
f8:3a:c5:7c:74:0f:13:6b:5e:8d:03:32:ee:f8:9c:
84:d9:e9:0b:9a:ac:05:de:1a:0a:ea:ab:38:47:93:
e7:ac:4f:b7:df:46:dd:87:5c:43:d3:3d:e8:d5:a9:
38:67:bd:72:26:b8:19:d7:a5:2f:68:8a:0b:e1:e9:
00:bd:37:51:ea:7b:93:40:85:0f:94:bb:c7:6d:c0:
e3:0a:a2:8f:ed:bc:24:b7:d5:4f:e4:b0:f6:75:1d:
a3:6e:d8:68:2a:8e:39:36:3b:39:4b:7b:6f:07:f9:
57:61:ea:e8:14:43:8e:93:c6:68:ac:ee:4e:42:30:
a2:e2:0e:e7:47:8d:16:ac:3c:0c:78:67:25:d1:ce:
89:67:aa:3e:dd:c4:90:05:03:87:37:4d:b0:c5:1d:
17:5d:ed:eb:d4:23:38:d2:fa:d9:25:e2:1a:fd:d0:
90:6c:a4:87:88:53:86:20:c2:1e:f9:d7:96:06:02:
49:f0:6a:dd:b9:e5:f8:25:d8:bf:01:0e:2d:9a:62:
2b:bc:bd:8e:69:c9:01:26:19:21:ea:b5:48:15:c7:
0c:b1:4e:c1:7b:2a:de:82:d3:78:b9:10:8e:25:85:
96:77:d0:79:0f:55:ad:88:a2:5a:50:59:a1:e4:53:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:9E:20:FD:F8:EC:A9:48:89:DD:2B:1D:2A:FB:78:5F:27:E2:32
X509v3 Authority Key Identifier:
keyid:96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:69:b7:21:08:f2:d4:16:9f:55:c9:98:1e:23:72:81:44:de:
d3:b8:99:f2:f8:dc:e8:68:67:44:d9:19:74:3a:57:6e:77:21:
86:da:02:66:b3:a7:b2:41:dc:30:14:0f:c1:86:70:bc:7e:e2:
54:15:be:be:43:92:4c:d9:e5:db:61:28:bc:be:6b:4d:ed:a9:
25:31:38:94:38:2e:5b:1e:f1:ed:68:28:4c:be:cb:4c:66:32:
18:23:40:bd:ed:0b:09:2c:ff:af:f3:c9:90:e2:27:16:85:84:
91:6e:fa:87:5a:86:2b:6f:12:0f:4c:60:29:4d:ea:f4:15:e6:
b7:5a:de:66:1d:14:b8:80:64:7e:b0:10:76:a7:1d:41:ae:8d:
38:60:34:e8:3a:b2:1f:de:9b:23:d3:28:e1:f3:4b:c3:0a:47:
86:7d:12:32:a2:dc:29:5d:2e:e5:dd:db:75:b4:fc:0a:19:f0:
f1:d1:1d:b4:68:63:ae:97:b7:bc:7a:e9:3b:10:ca:4f:8e:2b:
09:81:bc:2e:02:3b:22:a9:ac:46:96:6a:c2:5e:81:6c:68:f9:
f2:d6:dc:97:39:9f:2a:8f:cf:92:c4:d0:ff:ab:65:57:15:3b:
2b:fd:a6:93:64:88:cf:8e:0d:09:e2:17:d3:1e:bb:05:24:04:
59:27:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:34 2025 by rpki-client