Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier: x3wpvrW0YrVbwtLJr0AWUt2GgKXp+MZLt7WP0hwEOhM=
Subject key identifier: D7:B6:A5:05:9C:47:34:99:17:3B:09:EB:03:69:07:DA:FF:FD:E4:C6
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial: 019A71B80288F9436A24F932C5A26BBF2D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number: 0446
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: 1haDQDoZaJM6YxxUuwzJPnHySnEzBYYVHE8WKrCzEAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:02:88:f9:43:6a:24:f9:32:c5:a2:6b:bf:2d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=d7b6a5059c473499173b09eb036907dafffde4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:26:70:31:d1:72:84:6d:d9:6b:23:d2:5a:
93:f2:44:6e:fc:08:34:3b:6d:27:b0:0a:4f:27:e4:
35:ac:40:ec:e6:21:ac:8c:80:45:be:a2:c9:c8:51:
65:56:f3:17:95:c7:dd:9f:67:23:7c:0e:a4:85:97:
10:3c:ef:72:6c:dc:fc:6d:6f:a2:b1:be:7a:87:64:
83:09:2b:f2:8b:f6:8e:d6:25:1f:35:57:9f:b1:04:
10:04:3f:1a:d8:90:8e:b5:56:46:98:31:db:e7:af:
fe:e7:a6:00:cb:f6:21:7c:ea:33:8e:6a:f0:03:76:
e5:58:44:d9:5f:bf:f0:00:3a:cd:7f:bd:c1:bb:5f:
34:35:9a:89:df:30:cb:e4:19:d3:a0:76:43:d3:2e:
2c:0a:a1:c7:d5:11:24:64:d7:1e:3c:6d:7d:7d:7e:
8d:f5:ec:b9:ac:31:6b:3d:04:34:10:90:6c:6a:08:
4d:a2:f7:8e:ec:0a:e0:01:70:66:f6:09:c7:fc:4a:
37:57:c0:8c:a8:d5:39:9a:30:ac:d0:af:4f:f2:0a:
67:9e:1a:e7:17:03:50:20:5b:78:9c:62:30:4f:41:
47:e9:be:bf:8e:2f:df:63:c3:ac:7e:54:07:9c:63:
ff:24:59:5f:49:c1:c3:b7:01:58:34:ba:bc:87:b6:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:A5:05:9C:47:34:99:17:3B:09:EB:03:69:07:DA:FF:FD:E4:C6
X509v3 Authority Key Identifier:
keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fa:9f:f9:fd:ca:f5:35:48:ca:ac:bd:4c:f5:c2:86:45:8a:
64:cd:31:94:48:e3:ea:2d:46:93:e5:16:c0:08:fe:cf:14:c7:
63:dc:32:81:c2:7d:47:33:60:64:57:c6:44:21:0a:b2:c6:66:
08:84:b5:c9:e7:1a:53:77:41:4f:01:31:9c:50:07:af:54:bf:
62:e0:67:75:08:05:a5:b2:82:35:95:7e:6f:10:f8:a9:c1:73:
d9:d5:62:2a:ff:a9:49:2a:2c:88:f2:f3:b6:cf:02:f3:44:55:
b6:37:b6:70:2e:8b:40:2f:24:b6:f2:72:f1:c5:1e:2d:e8:ff:
99:fd:24:ab:1d:f6:45:1f:06:e3:e4:20:9a:29:7d:75:0e:95:
e4:ac:6e:c6:cc:66:fa:34:ce:54:40:f5:79:ae:16:e4:35:05:
59:4f:85:8b:5d:4d:ee:5a:51:86:f7:e5:26:ab:3a:d0:e9:5e:
dc:5e:2c:0f:02:ed:5f:8b:1b:55:75:9e:ad:0b:9d:e1:2e:a8:
21:a6:c3:86:df:e5:fc:f1:fc:6c:3a:12:7e:9b:e7:51:82:70:
b7:eb:9c:53:2b:11:1b:f9:b6:32:35:65:8d:d4:d4:2b:17:7e:
be:71:31:8f:64:f6:f1:ce:05:1b:45:15:4f:8e:a3:82:f1:4d:
a1:15:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:12 2025 by rpki-client