Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
File: lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft (raw, json)
Hash identifier: DoLebfKjSX7SyMk10LGk1LH5FfOntcFBWZ6NDpfEqxo=
Subject key identifier: BB:EC:96:5E:CE:75:7F:78:97:0E:A4:B3:2C:B2:1D:CE:67:E9:47:35
Authority key identifier: 95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
Certificate issuer: /CN=956e316c983804c2501ecc5abea53a2a83b57324
Certificate serial: 019A50E2F0F75442B634ED5391E8EDF6469C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
Manifest number: 16DE
Signing time: Tue 04 Nov 2025 22:00:41 +0000
Manifest this update: Tue 04 Nov 2025 22:00:41 +0000
Manifest next update: Wed 05 Nov 2025 22:00:41 +0000
Files and hashes: 1: lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl (hash: Egdbdu0l4Wzf1X/GucXXG3caVxQ8+iHsg2VBeiF8J0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f0:f7:54:42:b6:34:ed:53:91:e8:ed:f6:46:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956e316c983804c2501ecc5abea53a2a83b57324
Validity
Not Before: Nov 4 22:00:41 2025 GMT
Not After : Nov 5 22:00:41 2025 GMT
Subject: CN=bbec965ece757f78970ea4b32cb21dce67e94735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:57:7e:2b:30:76:e2:32:59:b1:67:9c:c9:
80:86:d5:e2:52:ee:e3:69:14:34:75:c9:dc:9f:b4:
22:69:80:ea:18:93:56:93:c6:d1:83:10:72:60:7c:
45:3b:08:e0:c6:36:d3:e5:35:fb:15:b0:68:09:f6:
a9:99:01:51:e0:64:bf:4a:49:e3:89:88:db:c4:39:
c0:fd:d5:97:be:0e:57:ca:87:1c:d5:8c:87:52:1c:
bb:6f:43:fa:7f:f1:fc:2a:39:c2:91:03:d6:4a:a6:
0a:7b:d0:04:a4:d1:cc:73:ce:99:02:41:81:87:6e:
89:4e:df:0d:7d:27:b5:86:cb:30:9d:e6:2a:ed:4f:
5c:1b:a3:6e:93:43:11:a1:2b:97:f0:a9:2e:e9:4f:
5f:d5:cb:bd:ca:49:b7:78:91:2a:f3:7b:9a:20:de:
b5:86:72:af:05:66:89:39:2f:c5:56:9c:25:49:1e:
da:e0:0b:aa:b9:7d:e8:84:f8:75:70:47:c2:1f:e9:
21:a9:a1:8f:a0:1c:54:47:48:78:51:70:32:d9:f5:
df:00:48:49:d7:f4:7f:0f:78:d7:ff:64:aa:a1:a3:
4f:3f:cd:87:38:af:13:61:a8:a5:94:2c:bc:c5:b9:
00:48:cd:ff:8c:55:c1:ed:a9:44:a4:0f:db:45:64:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:96:5E:CE:75:7F:78:97:0E:A4:B3:2C:B2:1D:CE:67:E9:47:35
X509v3 Authority Key Identifier:
keyid:95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e3:8a:88:25:0d:18:85:62:ee:ab:3b:7f:c4:c2:36:9c:6b:
d0:18:21:32:49:b6:1e:90:25:a1:fe:89:e7:84:f2:98:52:ba:
7b:ec:4b:98:7c:7b:9d:29:a8:05:c6:8d:99:78:e4:b9:1d:33:
48:80:1a:51:ea:ae:48:7c:ac:e3:7f:06:70:54:02:bb:8f:ea:
41:4d:18:9e:ce:5d:0c:0f:86:23:bd:55:e4:67:7e:bd:4c:3a:
a8:59:67:3b:a8:85:d9:08:f9:33:51:d5:4f:ce:84:9e:3a:f0:
8a:2a:ae:b4:ed:c2:b8:af:f5:b1:18:9d:6d:2f:66:a6:45:8e:
26:81:6f:5c:7a:16:36:3e:86:7d:0b:4d:15:b5:16:0e:fc:db:
02:89:c1:3b:67:b7:f4:67:63:04:65:03:dd:79:77:03:4e:16:
cd:78:21:c4:2e:04:e8:09:4c:66:d6:c6:84:5a:e8:31:f2:d6:
0a:0d:5c:85:c9:ee:3f:1b:16:01:a6:9f:2b:32:c8:41:6e:3b:
58:c7:b0:99:94:b1:64:59:f2:73:a6:bf:80:2c:27:af:10:4e:
49:d9:70:28:ea:64:e7:c7:00:f3:8f:24:6d:8e:4e:08:4f:22:
cf:60:c2:3d:6d:5e:df:9f:c0:9d:5d:12:85:18:ab:2a:05:2d:
67:8a:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:22:10 2025 by rpki-client