Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: iUqwrDu/jiNISi6cA2ceTIHbPyvmM78IrSlNqHVen38=
Subject key identifier: 6A:1F:1F:17:E9:9C:21:A9:EC:F7:3C:90:52:CB:D6:6D:42:F8:66:F5
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 019A4E18AEAAE7C8991E570C69B8C378CF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 0656
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: UdsaVHtpCYD2NnDhLipqr3iGib7fmfF0PXuWJZ6KhWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ae:aa:e7:c8:99:1e:57:0c:69:b8:c3:78:cf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=6a1f1f17e99c21a9ecf73c9052cbd66d42f866f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:5b:23:9b:b3:73:ee:1e:96:91:89:6a:31:
de:ff:27:02:2b:de:bd:b5:cb:ef:0f:5d:75:e6:34:
09:f4:5a:45:b7:be:4c:f1:9a:63:f8:41:24:5a:c8:
4c:b7:d3:72:41:ee:56:72:91:85:b0:01:b9:fe:e2:
b8:96:16:e8:1d:6e:a6:1e:20:38:c1:e6:5f:a1:a8:
01:0b:dd:34:b0:a2:14:5b:a3:83:c2:d2:2e:36:c1:
66:8f:c8:a9:d9:58:88:fb:a7:bf:19:52:5b:27:cd:
58:4a:d4:7d:54:28:2d:47:b6:70:99:76:df:03:2e:
6d:c7:6c:b5:89:b1:51:ec:bf:e4:f5:35:93:a5:a8:
78:8e:d7:54:3e:08:10:85:bf:bc:92:3e:87:ad:98:
2b:e0:c3:f4:2b:51:bd:62:91:4a:ce:06:f0:45:50:
01:10:cc:58:cd:9c:72:b9:e4:04:bc:8d:8c:44:06:
f1:07:ba:fb:de:c2:26:b5:98:1b:64:87:97:18:2e:
02:cc:de:a8:7b:6c:e6:dc:2a:15:4e:a8:72:b1:85:
c8:ac:29:bc:97:96:7d:9e:dc:55:f9:12:85:5b:6d:
e8:5b:a3:bf:fa:25:87:fc:6a:78:b9:e4:ae:9f:2f:
81:49:ad:a3:d2:00:cb:d8:6f:c1:59:cb:9c:eb:d7:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1F:1F:17:E9:9C:21:A9:EC:F7:3C:90:52:CB:D6:6D:42:F8:66:F5
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a1:75:17:ce:2e:87:ba:0e:1b:e5:d8:5a:dc:f8:d8:fb:75:
b0:b3:be:ca:95:f6:5d:38:62:97:a7:ce:fa:a2:7e:b8:bd:c8:
d4:ea:e2:cf:e5:ad:82:31:50:2a:db:23:6e:2a:5b:58:9c:8a:
ce:15:5b:f8:ff:a7:af:83:55:61:ad:a8:bc:e8:6a:27:be:ea:
a5:77:f5:f2:24:28:73:e4:b0:48:8b:32:b7:b0:3d:d3:57:97:
6e:56:a7:e8:4a:a1:e3:71:c6:23:24:d1:48:cc:a4:d7:cc:ce:
92:92:e0:5d:54:4f:0b:82:e1:29:fa:16:74:0a:d5:5a:3f:bd:
fb:2f:fe:c2:d6:79:ed:ac:35:8c:e6:56:a1:ca:5f:d4:22:00:
ac:24:e4:13:f0:45:43:8e:dd:56:df:9f:2c:94:ea:c4:e3:bb:
6c:98:13:5e:af:d1:ac:40:57:44:6e:69:eb:ea:3c:8d:be:4d:
b7:6e:f1:34:1f:cd:71:16:64:f3:78:d9:11:54:5b:61:d1:2f:
89:ce:49:5a:85:05:58:6c:71:2b:47:60:09:a8:87:00:e8:b0:
f6:55:d7:4e:9c:f8:d7:ab:4a:9e:9f:71:78:85:61:cc:4b:36:
d5:e5:6e:0f:bf:6e:f5:ba:3d:f6:5c:bb:c2:88:bd:98:35:69:
96:85:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:49 2025 by rpki-client