Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier: VXT/4qWbbS+13DH4LGvgemFFdumOACj+oSVxQJnfs4A=
Subject key identifier: 0B:C3:92:A2:37:58:A6:16:F8:AE:83:A0:0F:84:A4:50:BC:BB:14:4D
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer: /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial: 019923D5B78FBACAECE1F4DEEDF3EC22F928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number: 049F
Signing time: Sun 07 Sep 2025 11:00:32 +0000
Manifest this update: Sun 07 Sep 2025 11:00:32 +0000
Manifest next update: Mon 08 Sep 2025 11:00:32 +0000
Files and hashes: 1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: FcSEoAcMsnIAhYMJsgAJjbI0gKxRxpTV99LV4dhrqDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:b7:8f:ba:ca:ec:e1:f4:de:ed:f3:ec:22:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Validity
Not Before: Sep 7 11:00:32 2025 GMT
Not After : Sep 8 11:00:32 2025 GMT
Subject: CN=0bc392a23758a616f8ae83a00f84a450bcbb144d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:9d:a5:3f:e6:e3:3a:60:7e:6c:e9:06:52:
cd:06:13:a6:f6:dc:41:5c:db:7c:1d:97:96:ec:75:
b3:db:96:e6:17:3d:36:db:09:b9:d9:1c:fe:18:11:
dd:8a:1a:91:27:c6:2a:ae:ca:5a:8b:21:0f:27:ec:
33:7b:00:42:47:d5:3b:9b:c9:d1:7a:e9:70:a5:3d:
b0:54:58:76:27:f7:54:f6:48:ef:46:1b:07:af:74:
98:df:e3:93:e6:93:17:32:da:7d:70:a9:3a:92:55:
4c:00:d1:04:a1:05:c6:94:2f:af:49:28:3b:d5:42:
0c:8c:10:bc:51:e9:ca:af:7c:85:bb:ee:d0:7d:94:
7a:f6:f4:41:04:e1:e8:a3:bf:42:39:23:a8:a9:a2:
74:3b:b0:8a:9e:8f:e6:33:7a:ea:e2:9c:6e:0c:2a:
6d:9a:a9:51:7f:c1:12:56:12:48:18:0c:c9:19:d1:
c6:ae:b3:83:e5:69:53:23:ff:eb:21:c9:a2:96:0e:
b6:d5:e6:cc:ae:2f:f1:35:38:14:55:f7:01:c6:ab:
e1:31:57:54:3e:35:63:ba:7f:e3:a4:56:e7:52:bc:
94:90:56:18:63:0e:0b:43:37:4c:f9:65:17:8c:f8:
db:8b:08:bd:79:e6:bd:aa:bf:11:3f:a5:5c:0c:1c:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:92:A2:37:58:A6:16:F8:AE:83:A0:0F:84:A4:50:BC:BB:14:4D
X509v3 Authority Key Identifier:
keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1e:7e:69:9e:92:f1:35:47:89:43:cb:c0:67:af:00:1a:06:
40:06:b0:c5:b6:3b:80:4c:1a:b5:17:ef:41:80:87:5d:e3:b7:
fa:dc:e1:5c:d6:02:e2:b7:81:c4:79:fa:9d:ba:51:c1:57:a5:
81:8a:a3:53:ee:0f:40:40:87:ba:06:af:e0:eb:ad:97:d1:53:
a2:5b:71:22:05:03:ae:ef:af:c0:4c:7b:42:d4:86:e5:c3:7b:
ba:20:1c:2a:9c:a9:66:d6:05:e7:a3:0b:8c:31:0b:44:b3:50:
9b:e6:79:a5:fa:8e:c8:a7:f8:5f:eb:13:96:32:ec:34:1f:39:
e9:14:8a:99:80:a5:fd:6e:b0:03:ed:b8:75:8e:e4:56:49:73:
23:4e:e3:99:89:d1:20:8d:c8:69:6a:ff:73:68:9f:66:e3:16:
9b:38:88:5a:29:e1:41:43:df:f5:b4:64:6b:ef:c4:9e:20:34:
6a:79:a9:ce:37:f8:4b:69:ad:03:41:db:4f:4f:70:c9:66:2e:
77:18:53:43:0b:a9:c9:02:a5:af:2e:be:49:a0:ec:10:f5:17:
56:76:5d:7b:b5:59:ad:80:5c:03:04:26:64:ca:66:32:60:fd:
9d:f6:4b:e1:72:47:68:3d:a3:4f:49:32:83:4e:0e:72:86:69:
f4:58:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:45 2025 by rpki-client