Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: WEV1MCFDmNtK2mUaY21xKqeJu2PS5GXbS3TCBC9HOPM=
Subject key identifier: 05:A9:00:82:94:FC:42:86:C7:5A:6F:57:76:C7:E8:F5:5C:F3:EA:07
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 019A71B7C1F3D4AB6532083B4887238D2FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 0EDE
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: OZqT/TLYc/rxvMA7wuMbz+Y1fztTyQ4ssR/Lbmj09wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c1:f3:d4:ab:65:32:08:3b:48:87:23:8d:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=05a9008294fc4286c75a6f5776c7e8f55cf3ea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:13:ac:51:ad:2a:3a:28:ad:c2:5d:a6:1f:
ef:27:63:49:a5:90:72:7c:1c:6a:de:5e:39:c4:6b:
9a:44:00:39:4f:df:7a:38:c9:b6:15:98:5c:6f:3f:
5e:22:c4:51:15:49:e7:42:f2:74:b6:2c:b7:2b:39:
e1:b0:fa:ac:e2:fd:87:dd:d2:4f:5a:1c:1e:ec:4f:
c1:b0:6e:e8:be:6c:c3:60:ef:32:49:d1:2d:d6:83:
e9:3f:0d:47:37:cf:a4:85:27:4c:fe:1b:7b:7c:21:
a7:c5:ed:b4:c0:1f:ba:97:b2:03:6d:3e:06:85:c3:
18:b7:08:61:79:5a:d9:0e:a0:f9:31:a1:18:2e:9d:
5c:42:17:c0:76:18:38:06:aa:1d:16:52:f0:3b:ed:
34:de:6c:f4:1e:9c:91:72:e9:8d:f8:fc:bd:9e:12:
32:da:7f:03:ae:65:da:84:57:85:60:e2:a8:fa:47:
8a:08:52:41:78:3b:34:32:57:40:44:0e:f4:31:74:
9e:cc:a8:1f:56:4c:e5:33:2e:56:75:eb:9e:68:5f:
ca:ac:f8:e8:9b:07:dd:01:bc:9b:87:00:c8:b4:8d:
67:0c:01:16:23:1f:51:ce:74:d8:8d:e5:d4:fe:78:
2b:6d:37:73:77:82:c3:db:ba:af:a2:e3:7b:2f:d4:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:00:82:94:FC:42:86:C7:5A:6F:57:76:C7:E8:F5:5C:F3:EA:07
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ec:6c:43:c4:59:e6:0c:ab:7b:3b:64:25:13:20:ae:2b:3c:
91:75:14:55:ee:8b:a4:37:76:12:99:31:53:bf:e6:99:40:fa:
a5:d8:84:91:e2:29:03:5b:a5:09:ab:de:57:ed:ca:04:f8:58:
4f:ab:1f:14:b1:9a:4e:f6:ba:33:ba:61:d8:76:e7:7c:02:83:
3e:b8:ff:c2:01:f2:91:d4:1f:64:b4:dc:03:20:2c:98:21:c6:
65:3b:2f:66:1e:5c:14:7c:e8:c0:0b:47:74:1b:1b:cf:71:3f:
74:10:db:57:0a:14:bd:f7:a9:11:97:e4:84:72:57:5c:b5:0e:
01:95:c1:84:ea:36:e5:ca:34:5a:b9:1c:ec:f2:8c:ae:fd:55:
62:b5:90:ef:23:1d:6a:db:66:da:7e:c6:c7:3c:ec:ee:7b:f9:
73:51:9f:59:e9:56:dd:1d:6d:bb:cd:81:01:a5:8d:4b:15:c2:
c6:00:5e:65:64:e8:00:e7:e0:27:5c:9f:e1:f3:0b:40:00:b9:
29:72:ce:60:6a:71:b7:50:43:05:20:3a:b5:0e:8b:50:c3:ae:
dc:49:e7:7b:55:e1:f0:c7:85:4c:68:43:5b:a4:6b:00:be:9e:
75:6a:1a:58:44:c0:4f:fa:df:1b:5e:2c:be:07:d0:38:69:2b:
1b:e6:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:28 2025 by rpki-client