Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: 5U94oA1xHElQHM10OPhBgvGyoeBQCTHWV8v4C5Bslh8=
Subject key identifier: 6B:BE:80:1C:67:2A:60:FB:67:8E:1E:B2:12:C2:5E:9F:F0:A2:CA:7E
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 019A70DC6F4300C6E885961BA9A50CA7C065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 066D
Signing time: Tue 11 Nov 2025 03:01:25 +0000
Manifest this update: Tue 11 Nov 2025 03:01:25 +0000
Manifest next update: Wed 12 Nov 2025 03:01:25 +0000
Files and hashes: 1: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: SklH5yift4xHQBi2IS5nowwx5mtmzzuHk8asdheBpQk=)
2: oe97wSbY_88YdH_dfh2cAaxIIGc.roa (hash: rf6pyZdYCbMMLh4GoGVJWNXbBBHbQfaEuZdhu42zCSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6f:43:00:c6:e8:85:96:1b:a9:a5:0c:a7:c0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Nov 11 03:01:25 2025 GMT
Not After : Nov 12 03:01:25 2025 GMT
Subject: CN=6bbe801c672a60fb678e1eb212c25e9ff0a2ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:82:95:87:75:78:86:34:5c:7e:2c:2c:48:
90:89:a6:69:6d:d1:bb:31:2d:67:1d:bc:e4:2b:50:
b6:50:1b:3d:05:fe:e2:66:db:db:b6:81:91:6d:13:
87:c7:29:89:36:a4:ba:66:c1:37:87:b2:8a:bc:8f:
76:71:c8:25:fa:8a:ad:90:13:99:15:f8:da:9a:d7:
ad:5c:67:a2:7e:89:45:89:78:9f:6a:51:6d:e4:5e:
73:8f:47:b2:88:12:87:44:c4:e8:d6:8b:0d:11:e3:
41:ca:50:52:fa:b1:5d:43:89:f5:24:d7:a5:d3:45:
c1:da:5c:1b:d4:df:95:0f:b6:97:fb:b3:cc:de:71:
91:a1:fb:db:96:aa:19:1c:4c:c6:72:fe:49:0c:1c:
a8:07:d9:6e:c9:2c:61:cd:3c:30:f3:7b:d5:1f:b9:
fb:62:f2:57:a4:8b:1e:97:f4:14:2b:af:36:c4:3c:
d3:e8:18:00:d6:98:ac:85:16:c1:a4:61:64:c2:f2:
41:59:0e:51:73:33:45:c9:36:ce:bb:f2:69:21:60:
c2:e2:c8:85:63:bf:ae:41:da:74:30:a7:41:96:a8:
a3:0c:e8:80:c5:e6:eb:2e:6b:57:d9:54:f1:d0:74:
0f:24:d0:9a:f5:db:d0:23:2f:5d:a7:91:8e:91:cb:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BE:80:1C:67:2A:60:FB:67:8E:1E:B2:12:C2:5E:9F:F0:A2:CA:7E
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:29:2a:46:d1:18:da:35:a8:29:a2:00:2f:de:b3:b6:e6:e7:
be:84:50:d1:35:dc:73:5d:11:12:bd:2e:d9:63:62:92:0e:02:
e5:fe:43:31:13:76:59:e6:db:91:68:6b:8e:3e:85:31:de:65:
94:4d:46:d3:cc:e9:0e:a7:bf:9f:8b:31:ed:6f:1c:20:0c:5d:
b3:1d:26:fd:f5:94:dd:d7:a5:e9:3d:fc:fc:4f:3b:9a:20:e7:
14:81:04:e2:bc:67:dd:1e:b2:84:02:75:30:c7:65:52:29:69:
64:be:1b:9c:04:cb:8b:1b:ee:b1:c2:b8:e3:a0:17:ee:41:f5:
ff:b1:4e:b5:c4:bc:7b:c6:c8:9a:bb:2b:38:8b:bb:54:71:b6:
26:0c:82:0d:33:b6:6c:dd:8b:93:2b:76:22:71:80:f1:43:f7:
3a:6e:36:3e:24:54:27:33:f3:be:58:6f:fd:03:d3:b9:ce:59:
29:8a:eb:20:43:70:77:59:e4:4a:74:15:a2:6a:af:dc:d0:f0:
7f:7c:be:11:7a:0b:16:ee:df:13:76:47:2b:e6:58:ec:9d:9d:
f4:35:2a:d6:48:2b:07:2d:79:60:31:80:04:9c:ab:69:34:47:
96:35:e9:5f:f0:56:dc:6a:27:a3:51:fe:79:e3:82:86:52:97:
65:19:0f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:45 2025 by rpki-client