Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: Fye3btGjkUlsN26ER0bK4VqahS6wrR+sQHP40+qUX3Y=
Subject key identifier: 28:F4:6A:73:6C:CD:81:EF:11:8B:C5:6D:60:50:EB:47:6D:E0:C9:74
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 019A299E8F18F7BAD110AFD22742C19C5D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 1740
Signing time: Tue 28 Oct 2025 07:00:48 +0000
Manifest this update: Tue 28 Oct 2025 07:00:48 +0000
Manifest next update: Wed 29 Oct 2025 07:00:48 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: N2xlZ/qQ4g7O5T6rgNd8XIKAW8C5KLoKmx6bqIP4r9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:8f:18:f7:ba:d1:10:af:d2:27:42:c1:9c:5d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Oct 28 07:00:48 2025 GMT
Not After : Oct 29 07:00:48 2025 GMT
Subject: CN=28f46a736ccd81ef118bc56d6050eb476de0c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:60:50:ed:34:71:14:45:64:8f:e8:d8:c6:
a3:ac:94:ca:e8:83:c7:6e:11:0e:e4:a0:21:4a:1f:
32:03:c4:b4:da:5d:e3:f6:81:0f:9f:f4:d9:30:09:
8d:d6:4d:87:04:91:8f:1f:a4:08:21:f8:47:7f:41:
53:6a:0e:22:bf:55:e4:bd:ff:53:e2:7b:69:82:17:
d3:f6:02:b4:9a:28:f6:bf:72:8b:89:53:cd:44:aa:
6d:f4:32:28:98:13:db:f2:04:8a:f9:58:b0:70:10:
c5:d7:55:eb:d6:75:ee:86:ae:98:a7:33:8f:3d:fe:
58:ff:70:92:15:e8:55:64:a3:73:97:f1:be:79:8c:
12:61:a6:84:0d:ed:57:02:87:bf:2a:39:e3:b6:87:
22:1d:8c:69:43:02:59:13:8a:bc:0a:1a:49:bc:f6:
ae:d6:70:09:90:b7:c7:17:ab:2d:d2:14:cc:7c:db:
01:d9:26:d4:f4:49:dc:aa:80:5b:cf:03:73:b2:7a:
9b:9f:28:f3:d6:d3:86:2b:e3:04:b9:95:a0:02:b7:
cd:45:17:14:96:42:56:49:87:9d:3e:aa:91:f2:40:
3f:d4:35:84:a1:c9:b7:a0:63:f8:be:f4:95:ba:2c:
e4:5e:24:f9:09:52:13:bb:97:d1:98:e1:80:92:64:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:6A:73:6C:CD:81:EF:11:8B:C5:6D:60:50:EB:47:6D:E0:C9:74
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:31:6c:08:48:40:97:32:22:06:bb:8d:ad:6b:42:19:4d:64:
05:a5:32:4b:5b:f9:23:c6:5a:bf:bc:ac:1a:a4:7c:ee:53:5a:
e1:62:45:a9:b0:52:1e:d4:5f:6e:e2:50:a2:15:31:80:8e:b7:
90:da:b7:a6:21:f8:a0:a8:b9:44:0a:d8:d8:33:3d:e3:71:a6:
d3:26:4d:d5:76:cb:03:ac:09:63:e8:46:c4:35:46:23:77:5e:
bb:7c:da:9d:90:04:86:1b:c6:e9:77:2f:d9:3d:b5:b1:ab:8a:
1c:a9:3c:95:3e:5c:c0:7c:8a:9b:b7:f6:56:15:fe:ee:a6:30:
30:4c:58:10:6b:a4:db:53:a6:24:a1:08:7e:5c:73:a1:d5:d8:
69:0a:81:6f:1e:76:49:3c:51:ea:c3:6e:6c:b5:74:76:df:6d:
20:98:b9:e3:ed:48:5a:90:c8:91:e5:b7:1c:23:97:ff:0d:62:
0b:f1:7f:20:e5:b4:33:85:e9:26:bd:2b:8c:88:1c:f0:48:e1:
83:38:43:36:b2:72:a4:9a:b3:a6:50:20:dd:42:85:20:c3:2c:
0d:35:66:06:5b:02:ed:82:6e:07:dc:fc:0e:32:15:25:ff:c7:
15:d6:cd:48:1a:c3:2d:47:fc:90:6d:ac:2f:ce:b4:e1:35:68:
57:4c:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:14:34 2025 by rpki-client