Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: 1pD92VLcWYlDmg0v4I14kPBApQJOFsck1dgQUlhOgbE=
Subject key identifier: DC:0E:FE:1F:97:26:77:20:5C:4B:4C:4A:FA:B1:F9:39:AD:0B:15:02
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 019A71808EA194D026F0762EEAA57FFF8C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 05AB
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: jiTS3YFKLFUmzkJXm1v1/Im8wSDzPiNNvS+DWUuxWHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8e:a1:94:d0:26:f0:76:2e:ea:a5:7f:ff:8c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=dc0efe1f972677205c4b4c4afab1f939ad0b1502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:00:cc:18:21:f8:44:90:0b:4d:d9:83:a6:
56:9e:06:9e:24:24:2b:41:c4:b9:04:cf:07:50:8b:
d4:34:81:16:7c:1b:1f:ab:82:88:77:52:69:bf:3d:
d3:af:f4:09:00:77:e5:d5:40:b0:d6:fe:29:48:4d:
42:3d:68:a3:fa:bb:00:a3:26:77:8e:03:8c:3d:34:
25:94:b7:4e:39:a3:5e:2f:ec:9a:0b:5f:6a:d4:2b:
16:16:63:3b:db:9a:3f:a6:49:53:5f:94:c5:f0:e6:
d7:79:f4:77:93:87:38:6f:cf:88:d6:ca:9c:92:07:
77:6e:9a:74:13:a7:4b:27:44:50:fe:3c:1d:df:22:
cd:b0:85:d9:9a:e6:03:74:96:57:c2:03:21:d2:e9:
6c:b7:33:b5:2a:d2:f9:56:5d:19:f7:58:50:a3:c4:
e6:4d:b9:28:58:7d:8a:3c:c5:b1:a4:77:63:85:67:
c1:cc:6a:be:26:b1:ee:4c:96:15:f7:53:24:ba:4a:
21:29:ab:41:1d:1e:d7:86:89:32:39:1f:21:bd:69:
3e:ee:91:c5:ad:e8:c8:b7:a9:51:60:ab:49:b5:83:
2e:5d:3a:a4:17:53:e2:d2:f3:52:5e:a8:2d:1e:03:
ff:02:b3:03:6c:eb:ec:66:d0:b3:ae:52:0d:c4:08:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0E:FE:1F:97:26:77:20:5C:4B:4C:4A:FA:B1:F9:39:AD:0B:15:02
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e4:f1:fe:03:e8:30:41:36:b3:da:0f:60:55:3e:4f:f7:2a:
e4:fa:d6:87:71:57:0e:29:41:83:d0:01:fa:42:39:06:c9:a5:
5f:a2:23:9a:93:d8:53:9a:46:48:d0:7d:23:38:4b:9d:39:d2:
cc:34:a8:52:e8:39:f0:4a:f6:4c:52:f1:49:aa:3f:71:35:eb:
1f:f7:98:2f:d4:7c:d2:f2:2b:73:60:4a:07:03:a1:d9:1a:4a:
5f:e6:ef:a8:88:b9:5d:cc:25:31:3d:fe:a1:ec:38:95:f8:a2:
89:ec:1b:9d:25:26:a8:06:8d:92:3f:14:f5:b8:29:20:46:d7:
49:75:db:a3:3b:d7:fb:5d:9f:24:a5:42:a1:90:93:36:1b:20:
85:d2:17:0e:dc:52:71:93:91:97:ff:dd:cb:b7:3c:87:31:13:
1e:65:f1:e4:80:2c:d2:77:e6:0c:89:30:5e:76:cb:9d:fe:3b:
94:4e:fe:f4:1c:ff:9a:c5:08:48:9c:26:eb:1a:56:d2:1c:29:
14:e6:77:26:f7:c0:ba:cf:99:a5:15:cd:6a:a5:f5:36:a5:c3:
8c:de:33:d9:2c:34:9d:1e:76:d0:47:f0:48:82:3d:0e:7d:cc:
8c:e0:2d:e1:6a:13:7f:2a:13:34:ae:02:0c:8f:d8:47:55:ad:
24:03:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client