Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier: mNxgsHQ4GNJixHXXa5k9xuXMc5iv3n3gVTif4CWdKWI=
Subject key identifier: C5:6B:5A:B1:19:F9:CB:B2:C6:B0:E8:87:4C:A1:80:7E:4C:DC:A8:F9
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial: 019A725CA6996855CDA5B839FC885B88D7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number: 0FA1
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: Vkx0jF4Et7Om99usRvhgtGZeLHZV5ranP15Y9Shd85w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a6:99:68:55:cd:a5:b8:39:fc:88:5b:88:d7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=c56b5ab119f9cbb2c6b0e8874ca1807e4cdca8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:ad:27:c2:6a:0c:0e:17:0a:c4:d7:66:26:
95:53:ac:d7:15:71:4d:4d:8b:27:00:36:f4:b7:ca:
ac:19:e9:0d:7e:77:ee:7c:84:ab:ce:31:0c:57:20:
de:60:79:39:df:c0:3d:1b:88:0c:da:a1:34:8f:bb:
41:d9:5f:21:5c:f4:00:37:9d:8e:b3:87:28:04:d4:
6a:dd:11:90:63:f1:90:7f:c1:3f:1e:d3:a0:8d:6d:
e1:9a:ab:db:e6:ff:73:70:15:4f:46:b9:c6:94:dd:
2b:c6:e6:f7:dc:11:95:8d:f5:24:3f:4d:18:64:5c:
16:e4:a2:89:1a:e6:af:11:73:07:94:07:7a:2f:c7:
00:24:51:26:8c:f3:dd:6f:30:6a:2c:18:64:36:98:
1d:b0:b0:10:89:81:8a:90:3d:69:50:1b:18:45:0c:
fc:c6:be:f7:6e:82:72:78:6a:23:47:55:a8:bc:81:
39:a0:06:7d:3e:e3:77:fa:7f:3d:42:c6:07:e4:35:
a2:04:0f:68:eb:26:b7:a7:1c:8d:1c:16:25:a8:ae:
58:b5:d6:bc:de:5e:13:f5:db:92:57:2d:3a:dd:49:
1c:1f:53:77:94:34:e6:0b:e4:84:49:43:ea:05:08:
0a:9a:1b:cd:9f:1d:2b:61:72:4e:bf:86:60:c5:2a:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:5A:B1:19:F9:CB:B2:C6:B0:E8:87:4C:A1:80:7E:4C:DC:A8:F9
X509v3 Authority Key Identifier:
keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:32:da:6e:8b:e8:48:45:fe:86:7e:aa:a1:b4:9b:21:11:fa:
24:ea:88:00:40:02:49:bd:4f:d7:e9:24:86:24:6b:53:da:22:
fb:b9:60:9d:21:30:09:2e:af:ea:14:db:41:26:70:63:fa:5a:
d4:93:5f:4f:b3:8a:db:ac:e9:01:c5:81:43:98:68:df:3b:94:
9a:44:7e:6b:4c:48:30:83:98:90:32:77:d3:7c:50:9c:b0:89:
42:e9:4e:10:0f:2d:c3:1f:4e:bf:ab:37:0b:57:fd:7a:30:f7:
c5:6f:84:43:9b:79:06:f7:7a:cb:c9:f3:c7:25:e4:eb:d9:c6:
39:0d:80:c2:01:67:6f:b9:38:62:e5:96:fe:10:dc:f1:dd:25:
e7:18:ef:58:83:78:59:ef:d5:cc:ac:27:17:7d:33:2b:58:24:
18:a6:fa:6d:e3:1e:dd:22:a7:48:f0:19:0b:cf:fd:43:54:af:
b6:c9:7f:20:09:23:e7:76:ba:ba:19:67:64:96:65:e4:2b:b1:
81:86:94:e6:0a:8f:1e:4f:9f:a7:29:99:4c:85:28:bb:47:97:
67:74:d9:71:8b:00:ed:12:6b:3e:1c:fb:e0:bf:1a:7d:8b:bf:
7f:32:50:ee:83:8e:fb:22:eb:da:ad:e3:d6:e1:dc:3e:54:37:
3a:56:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:19 2025 by rpki-client