Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier: peBEPl9LlpYzAznt8HzrGcAhfwo/F+mJphsIYV6sIok=
Subject key identifier: EE:E5:DE:BE:93:36:36:55:BE:AA:FA:66:DB:20:AF:73:FF:5E:C3:CC
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial: 019A4EF4ED84C3E038925AFD350F47F0F9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number: 09A5
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: 6c8LL5vplfec81OmEeqDKC+HjoiGr4Ljuk5EatnKkAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ed:84:c3:e0:38:92:5a:fd:35:0f:47:f0:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=eee5debe93363655beaafa66db20af73ff5ec3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:ce:3c:72:8f:fc:de:a9:25:e8:b9:c0:81:
71:e4:89:b0:06:f6:a9:34:cf:c9:ef:58:09:fd:d6:
bb:94:00:1d:5e:06:6d:78:06:fc:88:6c:14:b7:40:
de:a0:8e:82:11:8f:0b:fd:a9:6f:1c:0a:b3:b0:48:
51:fd:dd:06:f3:19:9e:e1:01:f7:96:ea:c8:da:1e:
80:14:69:36:3c:a2:ce:e1:2e:71:0f:ed:10:c7:98:
b6:df:7d:2b:4e:65:54:19:6d:f0:45:bb:ba:2f:5e:
78:b2:cc:69:ba:4f:5e:8e:31:9d:e9:78:30:6c:4e:
d9:3d:03:30:60:bc:aa:45:1d:10:a4:02:d5:6c:22:
3e:a1:96:c6:83:ab:74:f4:e1:07:96:42:fc:64:4e:
14:63:2a:c9:46:30:f3:34:91:6f:b4:2f:7b:71:0e:
fc:24:e6:38:fb:4c:3f:78:76:db:c7:35:cd:95:1b:
df:d5:41:91:95:e6:1f:51:25:1d:ae:dc:4a:42:58:
fa:77:9b:08:ea:aa:ef:93:49:a8:07:c6:48:ef:6e:
01:ff:bd:2e:98:c0:0a:88:ae:2c:a4:d3:bf:2f:0d:
40:7d:af:a7:d0:b3:12:71:c1:54:1b:39:6e:85:41:
23:08:61:b6:c5:e3:83:d8:c6:42:09:71:ce:7e:b0:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:DE:BE:93:36:36:55:BE:AA:FA:66:DB:20:AF:73:FF:5E:C3:CC
X509v3 Authority Key Identifier:
keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ba:fa:6f:34:da:9b:96:01:e7:ab:e8:0a:9e:27:3d:74:fa:
f3:9a:b3:cb:2f:c2:f4:96:94:3e:23:8a:f4:a6:8c:5d:df:34:
9b:c3:a6:f3:71:94:fa:f9:7a:fe:98:ee:b1:9a:d4:d1:b4:3d:
ac:83:b9:f8:4a:1c:57:3f:1d:b7:d5:60:22:67:2c:3a:39:8c:
cc:13:f3:0f:54:30:84:14:3e:dd:97:4e:d3:31:b1:ec:71:44:
9c:aa:59:c2:01:71:37:50:47:19:d8:47:45:9d:13:66:75:55:
ca:e4:74:7a:fb:86:ac:dc:ab:ad:07:4e:d3:29:78:79:8b:55:
3b:54:99:84:62:69:3b:3c:6d:b5:11:de:b3:20:22:28:e9:b3:
e4:95:c9:88:70:e8:45:22:2f:c4:04:17:20:7e:95:e7:72:7a:
c9:15:ec:33:8f:78:76:09:40:3f:2a:30:7b:37:ac:eb:a8:22:
6b:f0:3b:a0:61:1a:fb:0a:f7:cc:e1:3f:f1:9d:cf:37:c5:ee:
6f:af:0d:84:28:af:d4:ea:52:66:13:85:15:75:32:c8:a3:47:
37:f6:f7:c2:ce:ea:7b:48:69:40:31:36:e1:bf:ab:2e:bc:fc:
3e:44:6d:28:e6:c2:40:83:b4:60:18:27:7a:e7:ab:b0:08:d3:
02:31:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:45 2025 by rpki-client