Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
File: lM53iNLj_vf8ANXOEz19bcAPhik.mft (raw, json)
Hash identifier: v0YlrMhSp4DJQ0DHyq1qwMtQ3832WLzidaO58ZLqDFg=
Subject key identifier: BC:E7:0E:38:EE:D9:33:BD:65:78:D4:EF:1B:EF:96:AD:DC:2E:20:68
Authority key identifier: 94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
Certificate issuer: /CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Certificate serial: 019A7225A70C6CC95883F88BA38E50083A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
Manifest number: 0E95
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: lM53iNLj_vf8ANXOEz19bcAPhik.crl (hash: LEmu2LFA9PAX14QJU2Wdrv9HYABZOpXInO+3HOHqRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a7:0c:6c:c9:58:83:f8:8b:a3:8e:50:08:3a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=bce70e38eed933bd6578d4ef1bef96addc2e2068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:ff:fa:db:e3:15:2a:de:73:fa:45:e2:ec:
e5:29:ec:ce:03:f2:22:9f:7c:9f:d3:70:6c:b2:c3:
8b:4e:39:e9:9c:97:74:e5:ce:2d:d7:22:32:27:ff:
bb:db:5e:9d:3e:8b:3b:0e:13:ef:cf:01:f0:55:47:
53:fc:14:18:f0:65:d3:64:33:63:ec:5e:3b:6c:91:
04:7c:35:12:59:33:a2:c4:f8:fe:ea:af:b9:39:9d:
8e:4d:2e:08:c1:57:eb:fa:35:b2:93:db:b8:8f:a0:
26:45:8c:bd:81:ab:fe:a0:ef:6a:c4:92:86:47:5c:
d2:6c:f1:ac:00:d4:ba:cc:38:52:8f:cd:aa:f0:73:
c6:51:1a:23:c8:76:f5:8c:98:4e:59:e6:81:95:b0:
3c:8c:76:53:98:5e:4d:ae:e3:82:54:33:fd:9f:ff:
18:32:df:68:88:82:33:49:74:27:d9:53:fb:b3:75:
ce:85:49:0b:15:fa:14:dd:76:81:14:b1:04:81:3f:
e0:59:d7:ce:6d:e7:a6:ef:1e:f1:33:a3:13:eb:9a:
be:66:77:49:be:5a:24:ec:bc:ee:d8:fc:56:c8:95:
b5:e6:40:48:e8:96:64:a5:d3:8f:45:09:dd:3e:ad:
77:55:cb:72:77:97:1d:40:74:d4:5f:65:f6:92:0b:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:0E:38:EE:D9:33:BD:65:78:D4:EF:1B:EF:96:AD:DC:2E:20:68
X509v3 Authority Key Identifier:
keyid:94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6a:e3:11:07:28:47:fc:db:d3:b2:45:52:ae:ff:9a:88:1b:
90:a9:94:7a:f7:b8:4f:13:36:5b:f0:4f:74:77:5b:4e:09:1a:
64:27:ee:f3:47:10:44:21:a8:93:e6:ab:2d:70:d4:21:0e:25:
08:ac:08:59:4d:02:12:55:a9:28:6e:73:5f:a3:e3:06:d8:f6:
d7:e1:88:89:f6:5a:02:48:88:2c:71:96:de:0b:0e:fd:83:1c:
f4:dd:3f:05:23:46:22:1e:8d:c6:34:7d:56:a6:7f:b0:60:b2:
74:5e:f1:f8:d6:bf:f5:51:6a:fc:df:2f:03:f8:c5:87:0b:d9:
62:42:64:0b:cc:ad:ee:77:65:08:cc:46:b6:fe:3b:3a:44:05:
13:30:c9:1a:84:3f:51:9e:34:b5:59:76:55:71:42:e3:3b:5b:
c9:fa:2e:ff:ee:4a:e9:97:f4:6d:85:20:d8:bd:eb:bf:d2:02:
ed:6a:f8:1d:a4:0d:d8:b1:e6:63:22:5a:16:a7:a8:98:66:e8:
af:99:d1:69:1c:2f:a1:d7:79:78:87:df:a7:2a:58:bf:9c:37:
6b:4b:b6:8c:2c:56:47:07:29:da:62:58:a4:23:fa:13:db:21:
46:7b:87:92:61:37:27:51:52:4c:31:d1:e0:3e:8b:7a:f2:31:
4b:fa:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:52 2025 by rpki-client