Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
File: LsJnz2xrO4jpahG_KemnOlWMXkA.mft (raw, json)
Hash identifier: KAeG5qVh+j9eo5LlhtFUAp+N6Cl9YtKyDvX6lIujg/c=
Subject key identifier: E7:37:43:B3:6B:67:AD:D7:7F:42:B1:44:1E:58:95:E2:C3:72:E9:E8
Authority key identifier: 2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40
Certificate issuer: /CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40
Certificate serial: 019A4F2B1D7A7ADF565432284E93386820A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
Manifest number: 169C
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: LsJnz2xrO4jpahG_KemnOlWMXkA.crl (hash: YMdupzxaaBybq/a2j4Ruv6IXgolHC+frDO4O9lPVQHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1d:7a:7a:df:56:54:32:28:4e:93:38:68:20:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec267cf6c6b3b88e96a11bf29e9a73a558c5e40
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=e73743b36b67add77f42b1441e5895e2c372e9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:4b:a3:91:f8:62:27:af:61:0b:74:b7:85:
02:3b:cc:4a:40:ef:73:a5:17:86:cf:fc:5b:0b:e9:
12:6c:56:91:b7:a9:a0:ec:e5:72:86:df:62:52:e8:
8e:12:d0:43:b1:ff:55:3a:4d:9e:4d:dd:e1:2e:d4:
8f:86:e2:ef:76:19:87:42:6f:45:51:ec:0d:a6:60:
2d:e5:3d:4c:14:1c:a6:c0:80:1a:2e:0d:8a:c7:fd:
8b:2f:be:f8:76:42:30:5e:b7:10:85:5e:fb:40:e7:
bc:9f:46:db:3b:d3:1a:9b:24:c3:5f:72:bc:69:24:
4d:e9:aa:20:b6:ac:d8:5b:f4:bc:b2:4f:ad:36:d2:
e5:54:11:6a:68:65:31:2a:bf:98:33:23:b3:dd:bf:
71:36:ed:48:d6:48:dd:54:72:10:50:38:47:18:bd:
9f:b0:6f:53:d9:81:4c:4f:a3:c0:58:10:92:98:06:
71:9a:74:6f:00:6d:66:7a:75:0b:36:47:83:b7:96:
e1:dd:1d:1e:23:8d:98:e3:ef:85:b1:5d:72:7a:d1:
ae:08:76:92:0c:1d:43:fb:26:a6:ac:da:fe:68:d3:
23:89:b0:1e:9e:9e:27:83:14:29:cc:5d:5b:b5:11:
be:e0:13:41:ee:14:62:b5:d6:36:d7:d3:91:27:2c:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:43:B3:6B:67:AD:D7:7F:42:B1:44:1E:58:95:E2:C3:72:E9:E8
X509v3 Authority Key Identifier:
keyid:2E:C2:67:CF:6C:6B:3B:88:E9:6A:11:BF:29:E9:A7:3A:55:8C:5E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsJnz2xrO4jpahG_KemnOlWMXkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cea01b-ee94-4a02-8d62-0dc01fc88141/1/LsJnz2xrO4jpahG_KemnOlWMXkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fc:15:dc:cb:49:b9:f5:2b:14:1a:b4:a0:08:f1:b0:c3:94:
1f:3a:c0:aa:12:2f:dd:bf:a5:8e:15:6b:6c:52:49:97:9f:72:
d0:b0:fd:62:29:0b:b4:4f:2c:8f:65:57:9f:33:ba:51:9c:fa:
24:b5:cb:56:96:27:c7:e2:85:23:98:de:42:94:ef:51:c2:a0:
9a:76:15:ff:8c:a0:a7:c8:26:ae:46:a4:fa:2a:bd:78:b2:05:
8e:f9:3f:06:df:30:88:fc:e1:fb:20:d1:a2:ee:f8:55:ed:88:
8b:d8:5e:6a:a6:3a:82:3a:85:18:e0:b1:2a:38:07:00:7d:57:
c5:ec:51:7b:69:cc:2d:bd:9e:75:38:c8:be:d7:17:23:48:7a:
33:ae:e2:22:02:51:6a:a5:d4:0a:17:3f:0b:fd:2f:37:58:4e:
97:2f:a8:e0:f9:df:8f:7a:5d:33:19:83:bb:c2:59:6a:9e:83:
85:d0:b3:09:88:53:85:76:f0:40:87:18:5b:04:66:68:aa:80:
ba:70:fe:e5:ff:18:c0:e5:0c:76:05:32:05:ce:72:b3:e5:75:
22:99:5c:68:57:d3:95:3f:2e:ee:9c:4c:95:78:f3:2d:2e:82:
e3:15:3c:e1:5a:b7:56:e0:d5:e5:01:b9:e8:e9:59:71:5b:b0:
ec:fa:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:44 2025 by rpki-client