Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File: _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier: DOJQab3eFWo6xf4mhNknj9xWpZdOm4PmdmLMLDphcA4=
Subject key identifier: 25:A4:02:D1:2C:A7:C0:25:F8:69:1F:BE:C2:3D:86:E6:55:CE:59:79
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer: /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial: 019955D61371FE8864B78D66579D79549564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number: 04A7
Signing time: Wed 17 Sep 2025 04:01:56 +0000
Manifest this update: Wed 17 Sep 2025 04:01:56 +0000
Manifest next update: Thu 18 Sep 2025 04:01:56 +0000
Files and hashes: 1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: A/rmQraueDlb/ReKQHk98HiGusCi9iC7GEpKbUcHwDU=)
2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:d6:13:71:fe:88:64:b7:8d:66:57:9d:79:54:95:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Validity
Not Before: Sep 17 04:01:56 2025 GMT
Not After : Sep 18 04:01:56 2025 GMT
Subject: CN=25a402d12ca7c025f8691fbec23d86e655ce5979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:37:f1:06:20:01:20:23:85:ac:ce:67:96:
52:d1:a7:ff:b7:b9:f7:f0:ce:e7:a6:ee:ec:d1:64:
fc:a8:4d:41:2d:87:9a:30:fe:45:d0:6d:03:f9:f6:
53:9b:22:a5:d1:88:54:a2:98:da:69:2e:ae:d8:c6:
63:42:f9:dc:41:8f:3c:d6:43:d6:a9:44:5b:94:e3:
6b:0b:4c:6f:c5:d6:33:9c:bb:ea:0d:5d:fc:c8:73:
85:37:a3:e0:e1:ac:c8:85:eb:ca:a4:0b:cb:45:6b:
6c:43:71:96:58:11:af:98:d5:26:d6:dd:cc:33:c3:
89:ba:d3:c7:86:94:2f:ed:33:51:6f:60:95:c0:0f:
42:63:33:ab:10:12:cf:b0:59:ca:88:49:6d:08:6a:
23:b5:58:21:ce:d3:d5:e9:f1:91:12:4a:32:8a:5f:
cb:12:22:18:9e:af:d1:bd:f0:ad:03:d6:e4:96:66:
b5:c2:4e:67:31:4e:45:98:2c:38:9c:4e:0b:62:40:
c9:55:28:6f:6e:e9:57:94:8f:12:5d:0c:30:67:5f:
31:48:c8:79:fe:60:4d:5f:f2:9f:cb:a4:18:44:fb:
b9:0d:45:7f:17:88:eb:fa:4e:4f:07:53:ef:98:7e:
58:58:2e:58:2b:1a:16:8f:1f:70:22:94:8c:43:b9:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:02:D1:2C:A7:C0:25:F8:69:1F:BE:C2:3D:86:E6:55:CE:59:79
X509v3 Authority Key Identifier:
keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1e:da:80:b1:8e:75:59:60:ec:79:a2:a8:35:26:45:39:1e:
29:6d:31:74:07:09:1c:86:f6:de:14:50:fc:72:75:74:dd:4b:
73:aa:25:8f:b9:66:32:43:3b:aa:b7:53:0f:2b:2d:a7:85:91:
20:6f:a4:00:76:c8:1f:1b:bf:33:dd:0c:8f:4e:67:cb:84:05:
dd:ee:4a:45:44:6a:e4:52:c2:0a:0f:88:75:fd:fc:ab:90:08:
cd:12:d9:34:33:bc:c1:59:96:d3:85:45:c7:ff:1a:03:5d:86:
72:ee:df:2e:b5:44:fc:44:42:8e:4a:fc:f9:35:5f:d4:ff:70:
11:7a:02:6d:f8:36:07:a0:cb:0e:3e:f8:99:a7:22:53:79:13:
f5:5d:9f:b6:92:4b:30:80:22:7a:70:a3:71:d0:5f:16:b3:a6:
89:dd:86:31:70:52:e3:36:d3:2c:91:3f:72:0e:01:70:9d:43:
78:ba:d2:23:60:19:94:37:bd:11:39:1c:d7:e4:16:f0:0a:3f:
f4:e9:62:7e:93:95:dd:f5:13:13:da:3d:a7:98:3a:ae:69:63:
34:08:33:be:7b:0e:65:83:2d:06:20:bf:9a:bc:44:ed:ee:e1:
28:87:ca:27:27:17:57:ac:f6:9b:89:6f:e9:3d:37:a1:e5:c2:
fc:bf:b0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 09:08:34 2025 by rpki-client