Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft (raw, json)
Hash identifier: DBiFyhfSs6Zn7upqRnnSDbfgIq7m6ttQyuJvUhrLrD4=
Subject key identifier: C6:D5:80:F7:8D:95:88:C0:60:7B:47:32:AC:48:E3:8D:1A:CA:D4:37
Authority key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Certificate issuer: /CN=954cf721c08c8e9bc5242d56196677217350455c
Certificate serial: 019A71B90E8057E4197E3F2BE2A0B4161974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
Manifest number: 073E
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl (hash: bFse1laogE5F8/QZGAtbNiDM/LK8EKQCbXAeAJk0cfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0e:80:57:e4:19:7e:3f:2b:e2:a0:b4:16:19:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954cf721c08c8e9bc5242d56196677217350455c
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=c6d580f78d9588c0607b4732ac48e38d1acad437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:c0:0b:9a:25:fb:4f:7d:c8:a1:a6:63:ac:
ca:c4:b0:fb:2e:c7:6f:6a:20:fa:d5:0d:ba:02:71:
34:07:66:a0:3a:2e:cf:a5:e6:66:ef:1f:fd:c4:19:
aa:f6:dd:4b:8e:72:04:41:5b:99:2a:0e:20:71:3d:
ae:07:6d:dd:24:88:d0:16:44:cf:d3:54:a3:97:c2:
5f:52:b8:e0:eb:15:a3:01:96:ab:91:84:df:bd:2d:
f5:98:87:4d:c0:09:01:af:e5:4b:b3:e1:d0:6b:70:
57:fa:57:dd:4e:1d:b0:0c:d2:d8:bb:34:89:58:2b:
b0:7b:b1:df:13:35:72:90:b0:98:b9:be:87:41:f2:
6f:a5:8c:a3:8c:0e:16:f9:e2:a5:cb:ca:75:44:ae:
85:50:9a:2f:f7:8e:5a:ee:2f:16:a8:6a:60:21:b6:
8b:9d:12:d6:f8:a0:4f:5a:36:d9:e1:dd:84:85:19:
d7:dc:f8:0a:91:df:07:74:40:e1:c0:5e:c4:8b:cd:
93:11:45:8d:00:ce:9c:23:0e:41:ae:8e:d2:e5:17:
32:48:c3:4a:2b:5c:78:ff:c9:50:14:6f:4d:33:08:
c5:54:ed:90:b4:d3:b7:be:a2:c0:aa:89:a4:bf:02:
db:5c:f3:25:f7:57:f4:fc:0d:9c:c5:75:37:4a:cc:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:80:F7:8D:95:88:C0:60:7B:47:32:AC:48:E3:8D:1A:CA:D4:37
X509v3 Authority Key Identifier:
keyid:95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:47:7f:14:ab:ce:cf:12:cc:8a:31:2b:66:af:1d:b4:16:6a:
aa:85:a6:0c:28:f9:88:10:6d:4b:24:2f:f6:37:0a:d8:20:1b:
50:4e:6d:82:cc:e1:bf:08:d6:84:a2:be:db:05:81:ad:da:74:
fe:3d:c0:05:b8:c8:76:2b:09:04:0b:32:9a:bb:23:31:46:f9:
05:9e:ca:f8:e6:64:b2:06:e4:9c:dd:4f:b4:a2:f4:78:e5:59:
33:fe:bf:6b:74:b4:22:c2:2f:e3:6a:c3:f0:b2:25:21:ed:36:
ca:1e:85:cc:59:79:47:b3:a7:2e:87:e7:49:6f:1d:9a:02:0a:
b5:fa:8a:96:dc:0a:bc:f9:2d:eb:66:29:44:aa:36:00:d5:64:
eb:66:92:cc:66:6c:ec:d8:14:89:53:3c:8e:e1:a1:db:c4:30:
d4:97:ce:d1:90:f4:50:21:a2:1e:e4:4c:64:94:0d:2b:f4:1c:
50:ef:18:87:d6:3a:1f:ef:37:b1:3b:35:6e:72:65:a3:35:f5:
2e:ad:5d:bf:64:1b:87:ad:d0:b7:23:71:13:da:51:5d:96:66:
fc:dd:90:98:bb:e0:13:84:30:37:c4:4e:86:95:a0:bb:cb:30:
12:8f:27:7a:4e:3d:70:47:3c:06:b2:d2:2f:a3:f4:cf:2f:be:
25:c3:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:44 2025 by rpki-client