Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: 9VQmH63/YEQi2BykkA8hndkla0W+Eo0cOoapA408iEA=
Subject key identifier: FB:27:62:E8:2F:B4:2E:4C:F7:10:2A:EA:77:0A:75:3F:62:B2:96:06
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 019A4E4F4EEC274E0E5E2E2D66678B5FA023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 114B
Signing time: Tue 04 Nov 2025 10:00:11 +0000
Manifest this update: Tue 04 Nov 2025 10:00:11 +0000
Manifest next update: Wed 05 Nov 2025 10:00:11 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: pn0Q1K11ukaHOeDgFNuyLMeTjzmebvJ34feeBTwCafU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4e:ec:27:4e:0e:5e:2e:2d:66:67:8b:5f:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Nov 4 10:00:11 2025 GMT
Not After : Nov 5 10:00:11 2025 GMT
Subject: CN=fb2762e82fb42e4cf7102aea770a753f62b29606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:52:8a:03:35:54:47:d6:76:20:a0:74:e8:
66:49:d1:01:2f:39:ee:56:7e:33:3c:36:5d:92:89:
37:70:0f:2e:2c:d2:e1:92:bf:ef:47:0f:ec:b0:0d:
e9:20:59:85:4b:2d:55:4e:e9:d3:9c:1d:0e:3b:ee:
9d:41:c6:cc:b7:c8:10:65:d0:a6:6c:db:e7:20:6b:
89:b1:19:5e:45:29:e0:ad:a3:fe:3e:fb:70:22:80:
8c:d2:2e:e4:58:39:50:ce:d1:87:69:29:91:a4:48:
b9:85:40:52:cb:c1:92:e4:aa:37:49:39:53:ff:c5:
0b:d3:c2:d0:cd:b3:f8:fb:5e:61:c8:45:c9:02:fa:
84:12:7e:05:e0:97:0e:54:92:ce:c8:ee:b1:0e:c2:
12:03:e5:0f:aa:eb:ec:31:47:4e:31:6f:87:48:72:
a0:f6:c2:88:5d:24:d9:c2:42:bc:c2:03:4c:bb:16:
fc:c6:7f:75:0a:89:c6:07:a4:a6:8f:3d:2b:77:a3:
2a:a3:47:26:6d:81:ed:d2:6f:91:ae:29:5f:da:73:
bc:8c:50:46:b3:8b:48:45:24:47:98:89:25:ec:86:
4f:47:ab:4f:60:1c:0c:aa:ef:53:a2:1d:98:c3:e9:
1f:47:6f:51:75:5a:ac:c0:45:ce:69:ce:32:80:fd:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:27:62:E8:2F:B4:2E:4C:F7:10:2A:EA:77:0A:75:3F:62:B2:96:06
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5f:2b:29:af:d0:48:ed:40:78:cf:43:5d:80:4d:37:1d:92:
5b:df:57:3a:0c:05:00:25:58:e3:f3:6c:57:87:70:24:1f:d8:
82:f3:40:2a:7e:b5:03:44:e8:dc:75:22:2d:6d:03:9b:f8:b8:
52:84:b9:e8:98:0e:98:46:66:65:dc:90:ad:eb:c4:0b:bd:7f:
16:b8:cc:f5:ab:cd:3a:47:fe:b8:fc:0a:ea:38:c1:83:5d:1f:
e3:f4:50:75:89:3c:cf:87:3b:3a:14:d3:bd:ae:31:ba:dd:9d:
29:e2:ea:f1:00:66:5a:7e:27:49:62:b5:f8:04:51:b5:fc:d4:
f0:4f:ee:ea:4d:23:b2:91:2b:cb:8a:8e:5a:4b:c2:93:aa:ed:
08:4c:35:07:c9:16:e3:e9:bb:1b:a6:0d:ef:7d:9e:c3:df:89:
ac:e0:28:1d:2c:a3:05:b9:d3:e9:1b:9c:11:9a:8b:c5:15:2a:
ce:54:c3:9c:be:d7:ae:2d:ee:ba:3c:7a:56:33:9d:9f:ab:13:
68:7f:58:70:e3:81:74:b8:ad:13:ca:c9:6c:9a:5a:f2:26:67:
7c:cd:e1:5b:9e:73:6c:89:9f:b8:20:a1:0e:9f:13:18:7c:e2:
2a:92:ae:b8:de:07:93:01:b3:e8:9a:07:31:46:39:80:c8:b6:
08:99:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:15 2025 by rpki-client