Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: 7ecekY+kXyYUSE5ryt42qopC9V00eGnqsE4Akw13RdU=
Subject key identifier: 5D:56:C7:23:7C:5A:EE:E6:F8:D0:8F:01:2C:0C:86:7F:DD:8F:4F:A1
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 019A7112BF0BD429D0BE6A556B2DD77A4C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 115D
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: aLM1n3GZktCg2l/GzAECALVncEnXDHLV4G09YG+zl90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bf:0b:d4:29:d0:be:6a:55:6b:2d:d7:7a:4c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=5d56c7237c5aeee6f8d08f012c0c867fdd8f4fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:b3:bb:e6:67:ef:31:49:af:79:cf:0c:d9:
6d:9c:59:f6:ee:63:7e:7e:b4:0e:3a:13:bd:63:1e:
e3:3c:b5:7c:85:be:4e:ac:70:70:c9:84:95:e5:f3:
65:22:cf:08:23:57:23:0f:e2:fc:28:33:b0:56:e6:
02:20:f6:6b:69:8e:e3:08:9d:ea:fa:6f:19:98:56:
b1:ae:e2:3b:e7:ec:88:13:5b:5d:22:13:3c:62:cd:
cc:94:1f:10:5e:2c:a4:13:71:af:39:57:aa:e1:c3:
b4:95:f6:7e:a5:5d:de:98:ce:bf:7b:24:5d:41:e5:
17:01:f7:46:21:78:47:91:35:e3:05:54:1a:6d:14:
87:4b:aa:7a:1a:7e:cd:7b:e2:98:bb:29:d7:10:b8:
8d:a6:25:77:c5:fb:24:88:98:96:16:13:2c:ac:3e:
b5:01:68:b3:50:7f:ed:52:09:be:a1:c9:48:2d:a5:
b2:6b:0a:b8:51:58:58:9e:f3:f4:5a:ff:ff:b1:79:
6b:0f:f4:16:fc:66:3a:0c:7d:d5:2a:dc:a9:ef:dc:
5e:2a:55:30:51:f5:56:97:91:6e:cf:93:1c:9a:33:
ac:ef:3f:cf:fc:96:5f:73:43:7b:d3:ae:a9:41:8d:
fa:ec:86:f4:13:36:ab:63:9e:d1:91:b1:2d:98:03:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:C7:23:7C:5A:EE:E6:F8:D0:8F:01:2C:0C:86:7F:DD:8F:4F:A1
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3e:71:0b:6f:f1:51:02:6a:81:4d:17:71:a1:a1:8e:76:27:
19:0e:7b:14:f7:ed:88:b5:29:38:16:de:c6:cb:95:c1:40:d2:
97:5c:b2:3f:07:5d:49:8a:86:6f:e0:83:4b:c1:c2:57:b8:ae:
18:51:59:1f:f9:75:db:2c:59:09:b1:9d:13:7a:27:78:3a:d1:
70:47:6e:0e:81:ab:9e:f4:21:4d:f2:06:9b:38:3f:2b:fe:fc:
9c:98:d1:26:07:20:47:e1:69:71:ea:d1:7f:cd:6c:94:44:76:
98:d7:3f:3d:84:8e:05:e4:c7:51:8b:bc:af:d6:e9:98:a5:d2:
e4:78:b8:a4:14:e0:a4:ab:52:be:73:42:35:d5:a3:b4:00:4d:
26:fb:d0:a9:2b:d2:fe:e6:ea:ec:ee:54:bb:81:96:99:d2:6f:
57:27:24:b8:a7:48:db:1e:f6:e7:4d:fd:45:70:6a:fa:54:8f:
3e:9c:50:5c:93:79:61:51:2b:00:56:95:63:92:98:6a:8e:34:
ec:8e:59:d1:e1:88:90:d4:04:4e:a6:1b:d8:df:35:f2:c0:95:
8e:24:ab:a6:44:e7:67:01:71:0f:1a:d8:1a:1c:a6:c0:77:66:
1a:89:58:f0:be:a0:84:21:b9:24:49:c8:97:1d:d3:6f:ed:01:
e6:a7:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:26 2025 by rpki-client