Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier: I0uqfbDq0VEa4Dgur0cxPdD4XfY5bwsUHEz7xPH77OE=
Subject key identifier: 6D:D8:05:F4:A8:79:35:D9:3C:7C:3A:40:E8:0B:CA:E6:31:C7:8D:87
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial: 019A71B8FCD0FA8DB497F2D9B5F22DC6EE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: A7eS4pnNYMlHfJVdNgcitwKkwIJYlcYEThcLwJ+VfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fc:d0:fa:8d:b4:97:f2:d9:b5:f2:2d:c6:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=6dd805f4a87935d93c7c3a40e80bcae631c78d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:a8:d5:b4:1d:6d:c7:58:d5:99:24:66:ac:
0d:1c:5a:b1:0e:c6:1c:23:30:71:eb:9c:d6:77:e8:
40:05:e5:22:f8:e8:01:0b:51:85:a5:c3:7d:53:0e:
ad:06:8d:d0:cd:08:f1:1e:d2:20:7d:e1:8b:e3:12:
fa:f1:b2:59:66:32:2b:a4:c7:5c:4b:7b:a2:e9:b1:
b0:71:ee:5d:f1:e3:be:d3:8a:18:75:98:ad:81:77:
ae:be:36:44:4d:17:3a:3b:37:4d:48:74:bd:a0:63:
d6:24:67:a9:d4:1e:82:d6:e3:7c:fb:d1:5f:19:15:
1c:75:41:6b:a7:54:a0:2a:d5:3f:03:66:4f:ea:6c:
4f:e4:c5:c8:73:e7:6b:e9:0c:62:73:74:a0:ec:93:
83:2a:c6:8b:25:ab:17:f1:29:b8:e3:0a:22:d7:34:
23:b9:0d:64:1a:3f:61:8d:64:23:a4:0c:9b:e5:c2:
82:05:7e:30:bb:42:59:15:0e:6f:3e:9e:78:0d:39:
f5:49:e3:ed:d7:bf:0f:0a:66:03:ee:bf:85:2e:3e:
d5:28:c1:f8:b7:fe:ab:75:5c:16:57:f0:d9:69:45:
01:2e:42:17:bc:51:47:11:b6:0f:c8:b7:47:c7:45:
e0:10:9e:8d:90:05:34:79:65:9a:e9:25:44:49:88:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D8:05:F4:A8:79:35:D9:3C:7C:3A:40:E8:0B:CA:E6:31:C7:8D:87
X509v3 Authority Key Identifier:
keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:a8:b4:28:89:f2:27:fa:9d:5a:04:aa:30:d9:c3:3a:56:
d3:4e:24:e3:57:fc:dd:ec:45:9a:c8:dc:ef:32:04:ed:d9:57:
57:ad:31:05:1c:c6:b6:d7:1d:18:fc:4f:33:b6:11:51:eb:b2:
9c:93:60:03:b9:a1:05:a4:84:28:e4:a7:5b:37:60:30:30:6c:
5f:a7:5d:8f:1a:2a:9d:2b:6c:3d:84:73:db:79:7e:db:ca:f5:
1b:9e:8c:fe:b0:c5:2c:c3:40:df:a6:87:c4:b0:25:8b:53:74:
e1:8a:50:1b:23:10:f0:31:a5:95:58:0c:6e:4d:3d:86:17:ce:
14:c0:0f:01:b5:90:cb:f1:b6:2a:9e:5f:34:9f:ef:d1:38:50:
4f:2c:68:95:6d:d7:ed:8d:de:3f:6c:f6:ba:51:d7:04:cc:34:
90:eb:1a:7d:a8:7d:5a:39:dc:cc:ef:e2:30:cf:49:86:39:2d:
15:af:ad:cd:61:ee:e6:1f:d1:58:0c:6c:a0:66:dc:5d:ae:d5:
7d:80:ab:63:ce:c6:9f:c1:e6:1b:8a:16:51:7f:c1:78:3a:53:
7d:6e:03:41:0b:f4:72:ea:f6:45:7d:ae:ca:46:de:a6:55:9f:
07:bc:26:57:9c:d2:90:57:cd:1b:8b:29:80:dd:7b:fa:42:fb:
9d:35:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:41 2025 by rpki-client