Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: 1P/DnUsnfsCaTEYQjBK9cpIHIbJacjfmotoc1IHI5Cg=
Subject key identifier: 59:F6:D3:70:6B:05:31:AC:E0:88:C4:6A:FD:84:FA:45:BB:2E:71:95
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 019A2B1F3537CF254AD969D83A62CA6A9398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 057C
Signing time: Tue 28 Oct 2025 14:00:56 +0000
Manifest this update: Tue 28 Oct 2025 14:00:56 +0000
Manifest next update: Wed 29 Oct 2025 14:00:56 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: LPavkSMaKX4tHzUQ/IermAMwShHaC533cRq89MVL0RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:35:37:cf:25:4a:d9:69:d8:3a:62:ca:6a:93:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Oct 28 14:00:56 2025 GMT
Not After : Oct 29 14:00:56 2025 GMT
Subject: CN=59f6d3706b0531ace088c46afd84fa45bb2e7195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:9f:b8:a6:4e:1b:2c:b9:c1:db:f6:98:36:
25:58:81:4d:6a:2f:be:9c:7d:2e:dd:c8:71:e9:7d:
ef:31:51:44:09:42:7a:08:83:ca:11:0e:b8:d5:63:
ad:0c:d5:5e:5a:c1:f1:c3:57:3c:83:68:9e:05:c5:
60:ad:a5:b9:47:19:c3:4a:59:9e:94:35:54:83:23:
9d:ff:e0:a6:f7:0e:5e:9b:6b:43:39:44:a5:9c:48:
63:ca:82:f9:76:0f:9f:cd:a2:aa:30:b5:32:3d:c2:
87:c0:60:26:35:00:17:78:94:28:ff:17:f8:4e:46:
f9:d5:ee:26:08:6a:4f:ee:1d:0a:e3:85:5e:bb:2b:
e0:a6:d3:e7:21:23:51:0d:e5:f8:a0:50:aa:90:8b:
d5:0e:a3:3d:a5:00:9c:1a:ab:7b:ad:c4:98:9a:34:
d5:32:cc:0a:32:80:e9:aa:17:05:55:ba:41:b8:38:
5e:09:37:bd:84:4d:c2:0b:8a:72:a0:c4:e7:2b:d8:
4b:e1:9e:6c:0e:1c:3d:a6:c6:f0:df:1b:d9:a9:37:
5f:78:60:3c:7b:2d:6c:7a:af:8c:7b:ce:58:1c:d1:
9f:d7:b1:de:a4:46:b5:39:85:a7:25:10:85:c7:2a:
d6:12:8d:31:3b:66:0d:e9:8d:d8:39:1b:2f:1f:2a:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:D3:70:6B:05:31:AC:E0:88:C4:6A:FD:84:FA:45:BB:2E:71:95
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2d:55:cc:03:a0:55:e2:5c:63:e0:9e:71:0b:da:f0:9c:d5:
be:33:6b:08:8b:19:98:af:5f:32:e2:92:da:5f:aa:97:1e:ee:
f2:88:98:71:7b:7e:39:34:ed:25:89:c4:7d:ac:f8:c2:c2:0c:
23:8e:f4:bc:8a:00:7b:76:1f:e7:7a:b7:b7:d5:96:49:15:9e:
0c:06:58:8c:22:56:3e:17:1f:0b:e1:48:0a:59:93:cd:22:4c:
71:1e:8c:a0:d3:d0:88:09:33:9f:30:6f:e8:96:6f:5e:52:1f:
b5:97:30:9e:22:a9:6c:39:13:6e:b9:30:d3:93:4e:7b:13:a2:
b9:a4:7f:4c:3e:b9:a8:be:3b:69:d2:f8:47:55:7d:4e:01:c7:
60:0a:64:d6:34:27:2b:ee:65:4f:61:f1:5d:e7:d5:9e:4f:05:
b6:05:62:5a:30:fd:59:24:0d:d9:af:c5:8b:d5:86:d8:0d:7c:
34:45:af:19:96:04:dc:42:6a:e1:c3:aa:ec:46:dc:b4:77:24:
ea:b0:57:17:92:8a:47:59:1e:09:1e:43:80:9e:01:6a:11:a5:
88:99:95:c6:a1:91:94:e2:26:1a:24:ba:f8:fe:36:e6:f4:80:
37:1c:a9:da:8d:54:c7:32:ea:dc:3e:d8:60:23:c8:4e:61:70:
76:78:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:20:18 2025 by rpki-client