Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: A+1MktAlDQjQediwK+QmwkmNRScYtIbca2Ho4ZkHR0Y=
Subject key identifier: D2:78:1C:55:76:24:86:83:EF:CF:64:D3:69:6D:0B:A2:C5:B6:79:5F
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 019A50AB8CFB1E3811FD22FCFF0C5915349B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 059A
Signing time: Tue 04 Nov 2025 21:00:11 +0000
Manifest this update: Tue 04 Nov 2025 21:00:11 +0000
Manifest next update: Wed 05 Nov 2025 21:00:11 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: arpohvrJcYGOlY9P+TfLr/Fi3qFVcy3nmtGAWNfiRQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:8c:fb:1e:38:11:fd:22:fc:ff:0c:59:15:34:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Nov 4 21:00:11 2025 GMT
Not After : Nov 5 21:00:11 2025 GMT
Subject: CN=d2781c5576248683efcf64d3696d0ba2c5b6795f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:91:10:76:84:38:d5:2f:b7:b3:4b:a5:cf:
8a:99:10:32:b9:d5:5c:51:bd:a6:32:0f:4b:e3:64:
b9:88:86:df:7f:5c:91:fc:3c:69:c2:98:dc:39:09:
07:c1:89:17:ce:54:c1:2b:7a:a4:aa:b8:7b:66:00:
5e:7a:a3:7f:0d:7a:94:63:b2:4e:98:0a:40:c4:99:
7d:3d:e2:34:d6:da:f8:61:ae:1d:62:4f:b7:80:14:
04:be:d0:3f:a8:5f:24:f3:ed:67:e2:50:d6:b4:3f:
04:33:b0:9c:5d:56:36:c1:ff:1b:16:43:76:fc:ac:
e5:4f:60:00:65:5b:63:31:c8:7c:22:ad:30:46:3d:
3f:78:52:38:a1:0f:e4:22:c9:7c:95:37:41:6b:50:
0c:8d:3f:09:b1:04:bb:9f:31:4f:cc:fe:2f:8c:5d:
0f:37:73:11:b6:9c:fb:9c:bf:d1:d6:5c:86:73:a5:
d0:9c:53:da:0b:57:74:c6:88:39:03:3e:aa:2b:c1:
8b:24:3f:19:42:64:37:5d:63:24:ac:67:bb:88:78:
94:28:92:ee:6f:61:4d:ac:f8:4d:54:f1:55:4f:4d:
f5:df:a1:46:8b:92:a6:04:8b:60:1d:96:b7:d2:db:
f6:fb:be:59:9e:b8:ea:91:92:73:f0:a6:96:81:af:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:78:1C:55:76:24:86:83:EF:CF:64:D3:69:6D:0B:A2:C5:B6:79:5F
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e0:00:f7:d0:f4:fd:c2:9a:a1:47:b3:5b:be:ee:0a:00:bd:
64:c5:ca:f3:1d:b4:ec:d6:4e:67:1e:39:b4:eb:6b:c1:56:1f:
30:72:ca:bb:45:47:09:2e:c0:a8:44:06:a9:27:33:40:8f:0d:
61:e1:f3:ce:67:e6:2c:f9:51:7b:9a:5d:50:38:85:9f:28:6a:
ee:14:cd:ee:b6:d7:4c:a4:83:47:50:71:ff:36:72:65:e6:aa:
79:ef:5e:ce:f8:38:e5:42:37:db:2f:da:ca:28:dd:03:ff:26:
4d:3b:a2:60:e0:bb:6c:3d:9a:47:6e:eb:91:f3:04:78:e9:cc:
a1:b8:07:3d:0c:70:5f:d3:c1:79:13:28:c9:a9:37:03:6f:f3:
dd:04:b0:de:19:91:86:2c:be:e0:8e:04:91:16:e1:26:8a:82:
b3:f0:88:ef:58:00:97:d5:b6:dd:9c:69:a0:22:f0:76:9f:4c:
6c:dd:8e:3d:42:4b:99:43:f6:63:b7:7e:87:2f:9c:a6:d1:5c:
e3:5e:09:99:d0:64:d8:5f:f3:22:c2:24:ad:b8:84:81:7c:93:
dc:f7:aa:70:e2:e7:23:0b:b3:39:98:df:ad:9e:14:fe:98:16:
86:a7:0d:ae:13:7b:89:fc:27:3c:aa:f8:9d:0b:d4:e2:0a:64:
7c:1b:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:45:39 2025 by rpki-client