Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: Eg4aMkosXyRlAzGzFM16eDcJAquS4o91qyov8CkTwvg=
Subject key identifier: 63:BD:40:BA:76:D9:42:F0:8C:2C:25:D6:D8:BC:D4:83:E7:3A:60:DA
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 0199221E831C61AE6D9CA6A2C79CF8AEC385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 0F94
Signing time: Sun 07 Sep 2025 03:00:48 +0000
Manifest this update: Sun 07 Sep 2025 03:00:48 +0000
Manifest next update: Mon 08 Sep 2025 03:00:48 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: rkiVD/5jsQysEvfdtmUCpuO5HvDesf8DYxlwbBZr8e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:83:1c:61:ae:6d:9c:a6:a2:c7:9c:f8:ae:c3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Sep 7 03:00:48 2025 GMT
Not After : Sep 8 03:00:48 2025 GMT
Subject: CN=63bd40ba76d942f08c2c25d6d8bcd483e73a60da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:ef:6a:59:18:4f:d3:82:96:33:61:77:a2:
94:43:a9:2c:4d:05:5a:67:bf:64:cc:52:40:f9:1f:
e5:a7:a1:92:cd:b1:16:9f:13:d2:11:7b:1a:aa:e0:
80:76:a0:ca:70:a9:64:7f:26:4c:04:0c:5c:b2:6e:
42:89:1a:81:6d:21:ae:17:1b:3d:db:60:7e:42:53:
a6:00:68:c7:79:7a:19:50:49:b1:ff:e3:d6:b5:5b:
ad:83:fa:49:3c:ed:3e:fc:f4:8e:4d:0a:82:05:92:
2c:88:9d:da:73:28:b9:9f:d8:77:56:fc:a5:5e:2e:
92:0b:d7:39:c8:83:5e:b8:f2:af:3b:66:de:33:1a:
f9:d6:07:0f:12:e8:c8:6a:68:e3:fa:68:88:02:24:
01:2a:40:3c:fb:4a:44:31:3f:e9:23:01:4d:d1:07:
b5:be:c9:52:fc:d2:b5:0c:ce:31:87:26:48:ca:95:
46:2a:f2:4e:8e:20:be:7b:a9:f9:be:64:8a:33:b4:
da:be:26:2b:df:47:fa:88:af:6f:e4:ea:7f:da:62:
80:53:a5:d1:55:7e:ec:61:6a:09:70:5c:74:4c:3d:
e5:a6:0b:9e:0e:fe:39:28:5f:26:76:47:00:28:a0:
fb:7f:20:c5:da:69:d8:20:2b:62:e2:fd:4c:4d:bc:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:40:BA:76:D9:42:F0:8C:2C:25:D6:D8:BC:D4:83:E7:3A:60:DA
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ab:fc:67:02:98:91:d0:ce:bb:78:2f:e1:b9:46:96:2b:ba:
42:8e:4b:3c:bd:4c:b9:7e:49:2f:02:51:47:94:28:50:ee:25:
d7:fa:d3:b7:25:0d:ce:7b:4d:1d:fb:bd:44:b1:64:9a:60:7d:
6c:61:29:43:9b:22:a7:52:98:13:d9:f8:a1:6d:3d:10:b1:fb:
ae:97:93:55:39:93:3e:09:ab:b0:c1:d2:8f:18:d5:0b:f4:a5:
ee:b5:c8:1e:b9:72:e1:22:81:74:3b:bc:2b:d4:20:3e:b6:b4:
89:ce:16:9c:4d:f9:88:79:50:64:70:ae:ca:e2:23:b4:4a:19:
5c:fa:5d:d5:d6:29:76:5d:2f:e2:0b:f9:93:7c:0c:62:26:b5:
a1:26:af:48:92:5f:0d:26:fb:08:ed:b2:3c:5d:00:ba:41:91:
d8:ff:bd:c5:63:8a:9d:f3:01:55:3b:6e:7a:3b:6f:89:38:c2:
23:b9:4d:fb:8c:04:61:cc:53:98:80:ef:b3:8b:7d:9e:c6:d6:
b9:34:a9:c2:04:1c:4a:cd:4c:84:1e:de:aa:12:8f:7e:1c:cd:
3f:d0:f7:c8:1f:f5:19:eb:e9:9c:aa:74:86:c3:c8:69:9e:6b:
7d:50:19:84:4c:74:3d:46:18:86:56:1c:ea:78:87:81:1d:c8:
20:60:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:26 2025 by rpki-client