Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier: VNwwOdECTEtowJReQxY8mVJ7uwa4o3VmdlAlK2RQMqg=
Subject key identifier: FE:FA:9F:8F:D4:82:78:DF:FC:70:86:0B:D9:99:C8:59:8D:9E:20:B0
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 019923A0934B47C7BDACC3C529D6E1EC2518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 10:02:29 +0000
Manifest this update: Sun 07 Sep 2025 10:02:29 +0000
Manifest next update: Mon 08 Sep 2025 10:02:29 +0000
Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: riTnFn9IN1glItsjQjC91SpIMbXTe6Hkf/6GYDgI1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:93:4b:47:c7:bd:ac:c3:c5:29:d6:e1:ec:25:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Sep 7 10:02:29 2025 GMT
Not After : Sep 8 10:02:29 2025 GMT
Subject: CN=fefa9f8fd48278dffc70860bd999c8598d9e20b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:e2:72:6d:8d:07:69:56:b6:a5:90:2f:03:
09:b6:e5:be:ba:cf:46:96:83:50:61:1d:0f:23:dc:
cb:cd:a6:ac:0d:94:59:58:c2:2e:17:3d:67:14:2b:
62:eb:64:c6:94:24:0a:87:c5:bb:da:7e:ec:27:cb:
58:c2:5b:f0:f9:10:af:3f:5f:04:09:92:0e:df:40:
28:25:87:fa:24:3c:2d:1d:55:87:32:ba:40:ed:f0:
91:f0:ee:c8:33:91:e6:40:62:1b:34:63:86:d8:85:
38:83:d4:de:44:b2:42:25:9c:77:6c:94:f6:94:be:
6a:9a:03:bb:fd:9c:67:ee:a6:f3:90:21:2d:a9:cc:
6a:47:40:51:b7:f3:a1:12:78:eb:c2:0f:af:7d:a7:
51:80:9a:1c:bd:0f:84:f0:24:73:58:02:44:e9:ae:
37:62:d2:bc:65:93:20:c3:1a:d5:b6:7f:df:53:87:
67:4f:fe:d9:04:fd:af:68:78:fa:b6:43:8e:54:6b:
59:03:bc:5f:5c:7f:c6:9c:92:c9:31:59:30:c8:45:
04:53:39:29:92:e2:09:cf:2b:17:26:33:23:08:35:
14:e6:b1:ef:6e:5f:7b:5d:6e:d3:9c:ce:d6:0d:02:
78:3b:b0:25:25:cc:d8:b7:b7:3e:d5:1f:2e:e8:97:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:9F:8F:D4:82:78:DF:FC:70:86:0B:D9:99:C8:59:8D:9E:20:B0
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:48:0c:fc:c0:d0:a1:cf:6c:39:78:79:05:2d:d0:ec:95:
4b:03:90:67:60:e0:5a:17:ba:1d:fd:b0:36:3a:c3:2a:73:01:
56:b0:ac:7c:11:88:84:9c:1a:b7:ac:ca:ee:2e:9d:6d:af:ea:
12:99:74:2b:04:d5:82:e1:25:82:c5:f0:b9:cb:92:55:0e:92:
a0:44:19:54:a9:e2:c3:51:7f:db:cf:0a:ed:01:10:f1:08:3f:
d3:ee:60:b9:a5:66:f4:b1:f3:c2:d3:e0:b1:38:5e:ad:3c:cf:
02:cb:6e:50:91:81:13:14:51:1e:da:be:06:2c:d0:0b:1a:5c:
e8:fb:25:a0:04:cf:bb:2d:8e:89:84:66:a3:63:63:25:c6:0b:
f7:78:97:e8:e2:52:7d:53:e2:84:8f:8a:c9:39:e5:e7:a1:65:
62:7e:10:fc:2d:ab:d3:7c:a8:5d:2d:31:05:50:fd:5a:9c:ca:
ca:03:e6:89:c5:c5:3b:0d:51:2a:38:d1:4a:87:b4:cc:4d:4f:
95:f7:aa:fa:81:b6:c9:c9:de:cd:e8:e4:9d:c0:f1:fd:b5:2d:
11:27:41:70:42:b0:2a:89:54:dd:52:d9:e8:0b:e8:bd:54:d1:
54:d0:04:69:66:db:c9:f6:a7:5d:fc:36:4e:cc:fc:a8:5d:20:
51:15:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:45 2025 by rpki-client