Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: cO5W2jLzur15wdMDq9nvwijAxBw4OU8iS8jTgWRpGh8=
Subject key identifier: A5:31:0C:BE:1E:FE:8B:7D:0A:6F:64:F9:5F:FE:FF:52:10:25:EB:E4
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 019A70DC243A9EC245B44E24BCDECD16186D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 06A0
Signing time: Tue 11 Nov 2025 03:01:06 +0000
Manifest this update: Tue 11 Nov 2025 03:01:06 +0000
Manifest next update: Wed 12 Nov 2025 03:01:06 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: o7snr16rhi4x8AMUeevDVvbfypZ8vdEa/Lv5tNxzSd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:24:3a:9e:c2:45:b4:4e:24:bc:de:cd:16:18:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Nov 11 03:01:06 2025 GMT
Not After : Nov 12 03:01:06 2025 GMT
Subject: CN=a5310cbe1efe8b7d0a6f64f95ffeff521025ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:ad:13:23:a5:f7:27:07:0e:8c:0e:f7:85:
ce:e1:90:10:15:18:15:55:ff:cc:35:f8:84:69:f9:
46:25:2f:0e:d4:f8:80:08:65:36:af:33:a9:4a:ca:
ca:9f:21:e1:03:41:06:94:70:bd:e9:2d:53:fb:33:
ec:52:9e:ac:3e:df:23:43:1b:40:f0:21:a5:d9:1f:
b9:61:98:a6:05:3d:8e:ac:c5:f1:22:af:55:b7:4a:
34:18:e7:81:e4:79:b0:b3:07:50:11:9a:16:75:0b:
cf:e2:f3:92:a0:44:55:d6:13:04:88:a6:97:64:c9:
64:0c:74:62:ec:0c:7f:a2:32:38:4d:99:70:26:ee:
61:91:2f:12:7d:82:ff:49:d1:1a:0d:13:ed:94:f7:
f3:5a:91:0f:f1:a1:7e:ff:57:3d:50:45:25:f3:c4:
93:7b:bd:bb:26:ae:b4:b1:dc:66:c0:27:9c:c5:de:
56:af:69:95:ed:df:15:68:d1:38:df:4d:67:d8:ac:
13:c2:e3:cb:e2:93:b4:5d:c1:64:41:98:7e:76:ba:
bd:12:30:96:a5:a4:eb:ad:fa:55:ba:09:95:c1:ae:
9b:5f:52:0a:59:b6:4c:bd:7f:01:33:9a:05:12:98:
9f:ce:a1:3d:9d:ce:a6:65:90:9c:68:03:af:00:77:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:31:0C:BE:1E:FE:8B:7D:0A:6F:64:F9:5F:FE:FF:52:10:25:EB:E4
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d8:b2:91:bd:2b:30:07:fd:61:c8:09:cf:4f:81:29:b1:ee:
36:c8:8f:bb:18:3d:76:03:69:e5:89:33:96:29:df:2a:ef:47:
6f:9f:19:3e:81:2f:5c:36:29:d2:02:0b:6c:c2:2d:56:9f:f3:
f9:80:89:90:8c:6c:60:e8:8a:81:b9:39:c9:0d:a3:c3:4d:b4:
fc:49:2b:ee:5d:3b:6d:96:53:cb:97:e8:45:c0:3d:29:fb:ca:
99:68:b2:3e:48:b5:08:f8:a6:5c:32:2f:63:93:ad:2e:76:1f:
1e:29:8e:aa:7a:9e:a4:46:17:41:d6:bf:be:d0:ad:0d:e6:63:
b5:a8:a1:a0:9b:a1:91:8a:46:d5:84:76:a6:87:1f:81:0a:59:
b6:4c:4a:ae:33:02:80:ba:e9:96:2a:83:57:e5:ff:8b:d9:2b:
fe:6e:59:5f:16:0f:7c:bb:0b:9a:a6:9f:21:77:fb:97:cb:7a:
39:17:9e:ad:16:65:ca:f8:48:03:b6:31:90:33:90:a5:91:7f:
87:4a:7f:d4:81:0c:6a:b6:af:87:2a:bf:7d:39:e0:49:11:e1:
27:2e:4a:96:4b:d1:57:8e:b6:30:f1:bb:f2:70:c8:0b:ad:42:
c1:bc:bb:43:76:c4:3a:56:8a:f4:8a:cb:b6:e7:53:53:fd:08:
3e:44:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:38 2025 by rpki-client