Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json)
Hash identifier: HgoI2K3UE8EWE7307qFMXnmuXgwyuQutK32Skra6OEY=
Subject key identifier: 0F:17:85:C4:99:6B:BD:59:27:AE:D6:06:64:AE:AF:AF:3C:0C:CA:6A
Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Certificate serial: 019A7225BCE0DBAA231DE9B7EC1CC4BA7FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
Manifest number: 0484
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: kmWNTDcY0hsu9fHJ2mVGfZxTVVhKjJ+pCHqL4B49C8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bc:e0:db:aa:23:1d:e9:b7:ec:1c:c4:ba:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=0f1785c4996bbd5927aed60664aeafaf3c0cca6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:05:cd:6e:31:a3:6e:dc:f0:e8:77:d2:d9:
78:09:c5:4b:40:ef:53:e5:53:b1:da:7a:37:25:d3:
4d:8d:14:9b:db:c7:42:b5:1d:00:fe:bf:bb:37:70:
88:0b:fc:26:63:04:df:2c:3e:5a:41:5f:6e:ac:43:
89:2d:4d:b5:04:1f:5d:4b:84:cd:9b:59:71:1e:36:
c7:46:e7:33:34:34:a1:39:09:2e:26:28:0e:70:99:
5f:a5:7b:34:2b:d1:b4:b7:4c:2e:12:0d:aa:6c:c0:
90:1f:cb:b7:0c:49:1f:96:27:11:7b:25:74:8b:c2:
42:cf:a9:6e:09:8b:26:bf:0e:0a:dc:3b:f1:89:e5:
f9:ec:bf:d1:d0:84:68:dd:b1:5a:f6:14:de:89:53:
bb:3b:39:b0:28:1b:aa:10:8f:1d:e2:b6:a2:a9:4a:
c6:5d:ed:9c:f7:4e:cb:2e:91:49:65:ec:b4:71:66:
67:e9:c2:ec:df:2b:3e:e9:cf:59:cb:90:21:47:b9:
47:44:40:ed:43:6b:c5:a6:75:8c:ee:1c:e3:01:46:
0e:a7:cf:c3:8c:03:19:af:4b:a8:17:08:ae:2f:28:
32:dc:37:f0:22:15:f0:d3:a3:5f:d9:1b:12:c0:45:
49:8e:c4:cb:8f:57:95:4b:c2:ba:46:d7:92:89:b9:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:17:85:C4:99:6B:BD:59:27:AE:D6:06:64:AE:AF:AF:3C:0C:CA:6A
X509v3 Authority Key Identifier:
keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a0:b1:1a:4f:2c:4f:45:d4:6b:b9:0d:5d:82:30:27:b1:09:
60:65:46:84:fe:02:db:00:cd:be:d4:29:77:0b:9a:a2:d3:50:
f1:d6:55:34:70:ba:53:58:c6:96:4e:fc:5d:b1:bd:15:87:cf:
de:1e:0c:55:02:57:f1:8c:76:38:77:14:59:20:60:0a:e1:3e:
7f:7e:3c:c4:d7:af:ab:5b:05:63:43:ee:0f:c7:3e:ad:54:a9:
e1:67:f6:ff:6f:71:a3:64:32:1e:18:33:48:48:97:f3:f3:86:
07:f2:27:01:86:e1:82:2a:3b:df:51:81:0e:4b:c7:bb:ee:58:
83:f1:0d:a6:cd:8e:ea:13:01:fc:80:ee:b4:42:98:72:99:c8:
4a:eb:ab:30:91:0b:7b:3d:89:a4:d7:41:20:c2:f1:20:5d:d4:
15:b6:ce:04:39:56:3b:f6:ac:3c:04:88:b3:1c:51:df:fa:b5:
12:a8:22:9d:01:7e:6c:83:25:c6:b6:89:63:0d:96:32:99:5f:
77:86:97:0e:2c:a8:67:42:0d:d7:1f:16:72:cd:6c:21:1c:a1:
85:3e:2c:2c:df:d8:1c:52:bf:22:12:a6:1b:1d:a9:79:43:53:
1e:92:5b:16:9d:d6:11:f5:9c:90:15:d2:5b:f0:47:1c:52:c1:
9f:be:f6:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJbzg26ojHem37BzEun/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZGUwMjk3M2RjMDVlYzNjNmJiZjZlNTdiN2Q2YTRjZWVm
ODE4NWUwHhcNMjUxMTExMDkwMTA2WhcNMjUxMTEyMDkwMTA2WjAzMTEwLwYDVQQD
EygwZjE3ODVjNDk5NmJiZDU5MjdhZWQ2MDY2NGFlYWZhZjNjMGNjYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2wFzW4xo27c8Oh30tl4CcVLQO9T
5VOx2no3JdNNjRSb28dCtR0A/r+7N3CIC/wmYwTfLD5aQV9urEOJLU21BB9dS4TN
m1lxHjbHRuczNDShOQkuJigOcJlfpXs0K9G0t0wuEg2qbMCQH8u3DEkflicReyV0
i8JCz6luCYsmvw4K3DvxieX57L/R0IRo3bFa9hTeiVO7OzmwKBuqEI8d4raiqUrG
Xe2c907LLpFJZey0cWZn6cLs3ys+6c9Zy5AhR7lHREDtQ2vFpnWM7hzjAUYOp8/D
jAMZr0uoFwiuLygy3DfwIhXw06Nf2RsSwEVJjsTLj1eVS8K6RteSibkuxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8XhcSZa71ZJ67WBmSur688DMpqMB8GA1UdIwQY
MBaAFJTeApc9wF7Dxrv25Xt9akzu+BheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2Qt
ZDQ5ZDFmNTczOWVkLzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wYjM5MGYtZDZkOC00NGM5LWFmY2QtZDQ5ZDFmNTczOWVk
LzEvbE40Q2x6M0FYc1BHdV9ibGUzMXFUTzc0R0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKCxGk8s
T0XUa7kNXYIwJ7EJYGVGhP4C2wDNvtQpdwuaotNQ8dZVNHC6U1jGlk78XbG9FYfP
3h4MVQJX8Yx2OHcUWSBgCuE+f348xNevq1sFY0PuD8c+rVSp4Wf2/29xo2QyHhgz
SEiX8/OGB/InAYbhgio731GBDkvHu+5Yg/ENps2O6hMB/IDutEKYcpnISuurMJEL
ez2JpNdBIMLxIF3UFbbOBDlWO/asPASIsxxR3/q1EqginQF+bIMlxraJYw2WMplf
d4aXDiyoZ0IN1x8Wcs1sIRyhhT4sLN/YHFK/IhKmGx2peUNTHpJbFp3WEfWckBXS
W/BHHFLBn772tA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:25 2025 by rpki-client