Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: pxs3n/bVg0bv9noyNvuYrUfVpGUMJ7Dgd1hO5157kFw=
Subject key identifier: D8:09:C4:68:5C:CC:B9:A0:60:B3:16:60:86:5F:0A:38:16:6A:49:C4
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 019A71B89F99FABA4674BB90367DC3CD7CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 079E
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: V3IjViS+0xpFzWVemqQ9WDYh84ebq2m6DLIRXsOdxLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9f:99:fa:ba:46:74:bb:90:36:7d:c3:cd:7c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=d809c4685cccb9a060b31660865f0a38166a49c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:6f:cf:2f:84:1d:13:9d:74:92:06:65:96:
7b:fc:60:71:6e:70:c9:2c:53:df:8d:0f:a2:44:25:
27:e6:fc:c8:c6:90:41:11:2b:a1:a4:61:25:d7:fd:
c9:6d:97:a1:85:53:b5:20:2e:13:2f:ed:77:96:33:
50:55:08:0c:aa:d5:2e:d7:e2:4e:de:9c:d0:d0:bc:
a7:d6:2f:03:26:9b:0d:73:21:e3:75:78:f7:7c:64:
56:08:12:cd:df:e2:b5:5f:73:c1:d0:4f:03:e1:2d:
79:55:5a:89:6d:a1:3c:49:76:af:88:2c:1b:f1:78:
69:e2:ce:7c:26:2e:e1:a3:64:a9:6d:0a:8a:72:65:
dd:95:d2:1d:c7:e4:b1:e1:3a:9f:28:9d:0d:d7:0d:
1d:48:0f:65:71:f2:4f:46:81:9e:e6:df:00:56:48:
90:5b:2f:7b:a3:73:b3:b4:90:80:57:69:40:63:5b:
36:3c:9e:5d:47:22:6f:4d:e4:83:8f:d7:4c:f3:4d:
17:04:5c:08:a7:74:50:46:b6:93:b6:69:d8:a0:b8:
d2:9d:2a:92:8a:82:89:a8:24:75:a5:f2:1e:18:e8:
27:85:68:af:ea:df:a9:88:ba:65:ed:69:a4:3b:86:
45:e1:f5:5f:02:18:b4:fa:97:f2:86:ba:ce:bd:91:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:09:C4:68:5C:CC:B9:A0:60:B3:16:60:86:5F:0A:38:16:6A:49:C4
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:36:7f:d2:3f:d8:54:de:ee:a5:bf:8c:47:29:10:5b:40:84:
3a:74:fc:84:7e:bb:04:fd:86:11:6c:39:3c:42:2c:da:31:bd:
64:7e:71:5e:de:a9:e8:8a:49:03:c9:a9:02:1c:d0:0b:b5:1c:
18:28:62:4a:44:1e:c7:36:34:bc:73:82:e5:73:90:bd:58:d6:
f9:7f:45:e8:f8:3e:79:02:c8:2d:b2:a6:b9:80:c9:26:26:e3:
60:56:9c:13:11:b3:c6:ef:fa:07:68:33:dc:16:ee:da:c2:4f:
e9:e8:b0:fb:ad:a5:96:b9:a3:6d:af:57:15:4e:4c:4f:0a:85:
9e:d0:4c:18:e3:e7:fc:4f:69:06:b0:bb:58:4c:d6:bf:73:81:
cb:f3:96:00:73:a5:9c:4e:5f:32:d5:49:e2:70:be:6f:e0:32:
fd:0f:3a:1b:a3:03:5f:45:4b:b7:4d:80:1f:15:f1:2b:53:4f:
c8:52:1d:ba:40:22:6e:a5:89:89:97:16:45:92:4a:42:93:52:
e3:a9:99:35:ef:eb:8d:0d:1e:be:63:6f:0c:ec:ec:7b:47:1a:
1e:85:9d:6f:43:1f:38:b8:a7:ac:5d:9a:ca:48:0c:1e:3c:80:
db:d0:99:ed:11:23:b2:5a:e5:56:2d:7b:eb:d1:8c:f9:1e:2b:
b0:d2:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:32 2025 by rpki-client