Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: kO6m/vJitwy5bbLOlfTTikzAOHCBm9EePyLaY7vgR38=
Subject key identifier: E7:BF:BF:67:B6:E9:EE:44:AF:B6:BC:E9:51:D7:F0:58:7B:D9:30:35
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 019A4FD079699362CCC62F544FCDF30F0466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 14BB
Signing time: Tue 04 Nov 2025 17:00:53 +0000
Manifest this update: Tue 04 Nov 2025 17:00:53 +0000
Manifest next update: Wed 05 Nov 2025 17:00:53 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: IZ9YdvgxMrMFHriHlgRpSv6i5Op+BPss8UVgdM1/AFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:79:69:93:62:cc:c6:2f:54:4f:cd:f3:0f:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Nov 4 17:00:53 2025 GMT
Not After : Nov 5 17:00:53 2025 GMT
Subject: CN=e7bfbf67b6e9ee44afb6bce951d7f0587bd93035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:81:19:43:68:e0:fa:07:ee:88:3e:db:a0:
67:36:92:62:cf:a7:c4:29:14:7c:bc:38:af:1f:f3:
39:f9:19:ad:9a:70:ed:2c:c5:d3:61:18:14:f5:b3:
64:6e:7a:e8:e0:64:9e:93:68:9c:80:71:32:d7:53:
64:76:06:cb:1c:e8:b4:16:e0:f3:eb:a7:85:57:fb:
72:0f:7b:ce:76:df:b6:7f:f8:c3:37:a1:aa:3f:7e:
2b:9f:a5:5f:e0:ce:47:75:91:58:2e:a1:e4:71:0f:
aa:e4:0f:03:44:29:9c:82:18:b3:c3:ff:91:38:9e:
14:d5:0b:e2:5c:b1:68:f0:b5:0b:4d:95:77:21:0b:
d3:03:65:67:a3:7d:4c:1c:b6:7c:ce:62:43:66:4f:
4a:87:b4:92:b8:6d:50:1f:91:12:00:98:fd:8c:98:
37:6f:75:84:fd:dc:53:e9:09:16:17:66:14:73:ce:
c7:c0:03:21:5d:82:f9:ce:3e:a1:39:12:3a:63:66:
c5:4a:df:65:bb:25:f0:6e:ce:4f:fa:6e:0b:6e:e1:
bc:5a:1b:0a:38:39:9d:89:9e:e4:f3:9a:8e:9c:dd:
05:93:c9:32:96:7d:84:f7:b0:e8:31:26:8f:0b:ab:
ba:84:02:3f:1b:65:5d:21:62:8d:a0:69:77:fd:39:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BF:BF:67:B6:E9:EE:44:AF:B6:BC:E9:51:D7:F0:58:7B:D9:30:35
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b9:08:f4:a8:b9:6f:1a:79:2b:21:c7:c6:4e:62:55:26:10:
a3:4c:b5:61:0e:07:1b:c7:65:2b:7e:53:17:1b:0f:30:0f:d0:
90:4c:03:eb:5d:aa:9f:ce:cb:62:8e:ac:54:db:49:8f:a2:9d:
f2:0d:f9:dd:cf:20:be:75:d6:b7:06:35:8c:b4:a3:de:4e:88:
77:af:7e:74:f1:28:2a:e6:f5:d3:66:3e:0b:59:ec:ac:77:2d:
2a:d2:48:98:ae:92:2d:28:c6:e6:a4:61:29:66:0d:73:35:7c:
cd:5a:fa:1d:54:37:1c:5d:1f:ed:ea:df:ae:c1:ac:93:4d:2c:
7c:4c:56:c1:02:28:50:03:23:8a:77:55:c0:a6:a7:dc:03:bc:
4a:9c:72:62:2f:ee:fa:f1:f7:68:72:b8:fa:af:bf:82:45:70:
76:bc:9d:11:64:f5:f6:d2:2e:25:80:05:b2:aa:29:9f:15:ac:
29:e5:f1:4a:ff:57:b7:c6:9d:45:aa:0d:b1:d7:df:57:e6:91:
4b:6e:a6:b8:eb:20:84:bb:15:6b:7d:1b:00:39:fb:a1:cb:08:
62:d1:67:91:64:e7:9c:9b:f7:a8:b3:88:0c:af:d3:79:93:75:
e1:2b:f1:b0:34:6c:8c:c0:9d:5f:bd:91:87:bd:35:27:be:2b:
79:9e:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:10 2025 by rpki-client