Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: P7S/OGGV6g9QrE5CG5fqrITkAWCrdf8qQVfxphjKyhM=
Subject key identifier: 06:3E:25:E9:E0:6D:BB:01:C8:5E:49:B6:3D:91:A5:22:6F:9F:28:13
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 019A5187B5D7536BAA999AB32B6754293B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 12DE
Signing time: Wed 05 Nov 2025 01:00:39 +0000
Manifest this update: Wed 05 Nov 2025 01:00:39 +0000
Manifest next update: Thu 06 Nov 2025 01:00:39 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: MYumbVKeeoqZcamiEDzSSCsLKOKBfhO80neO51HpVho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:b5:d7:53:6b:aa:99:9a:b3:2b:67:54:29:3b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: Nov 5 01:00:39 2025 GMT
Not After : Nov 6 01:00:39 2025 GMT
Subject: CN=063e25e9e06dbb01c85e49b63d91a5226f9f2813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:31:a1:71:21:76:ca:f2:02:ed:c1:f2:12:
35:3d:52:eb:55:be:a0:e1:2b:cf:fa:92:28:f7:d1:
67:1b:39:f4:f9:2a:3f:1c:ce:eb:90:32:26:eb:1b:
ab:32:cc:eb:54:4f:c1:7c:cb:5d:fc:b3:3f:55:47:
09:f4:b2:ef:bb:2f:60:5a:2f:c6:cd:3d:8d:ea:78:
ef:98:4e:cb:8e:ca:c3:66:bb:9d:69:e4:14:4c:ca:
75:61:33:01:67:26:b1:f5:e0:e7:2a:0f:31:a5:01:
a1:c5:96:fd:bc:09:51:74:76:68:46:fb:db:33:d5:
43:5f:bb:c5:f3:b7:a9:2d:6d:10:f0:58:ab:b5:8c:
d0:02:cf:3d:a9:f0:d3:47:91:82:5a:6b:22:6b:08:
13:e8:ef:08:86:c4:0c:77:88:d6:58:29:ba:1a:42:
d6:65:56:2a:2b:23:e3:ba:26:0d:c6:e6:8f:ad:32:
c5:00:9f:67:76:a9:2f:d1:5f:4d:19:0b:2a:52:00:
8c:13:a3:cd:43:f3:75:59:87:69:0b:a6:cc:68:01:
6d:fa:78:48:2a:54:f5:73:fa:4d:58:0f:68:da:c9:
64:a6:a9:a8:0c:9f:11:97:c9:41:61:2a:7e:cc:ae:
05:74:c7:ce:a6:96:73:5b:24:ef:f8:f7:64:8d:70:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3E:25:E9:E0:6D:BB:01:C8:5E:49:B6:3D:91:A5:22:6F:9F:28:13
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:56:9d:c7:82:59:47:d0:eb:f2:77:ff:fc:84:36:20:a8:d2:
21:6f:62:e4:0b:0a:71:f0:55:f4:09:e6:46:7e:34:4b:4f:0a:
45:be:07:ea:9f:53:bb:7a:03:4a:d8:17:e3:90:d6:df:7f:60:
dc:2f:bb:e7:18:6d:56:b3:4d:55:2c:eb:63:86:be:05:b7:b6:
96:52:29:be:dc:8e:27:c7:24:75:f6:e1:bc:67:35:d8:d1:bd:
5e:32:e6:00:7a:77:30:8b:84:28:52:cf:b2:8f:91:62:ee:63:
22:05:05:78:54:62:df:71:7d:02:3a:4f:30:78:4d:8b:0d:1f:
cb:ce:55:08:9e:02:10:eb:0c:ce:e1:ad:e1:40:13:76:60:3d:
dc:83:13:67:e6:50:9c:25:0c:4f:b2:11:b7:98:c6:45:1f:16:
16:d7:3f:bf:42:72:59:ba:07:4d:78:da:94:28:7f:e4:2f:4f:
6a:c6:df:31:c6:e3:ba:e9:fb:a7:84:15:f2:81:c3:0d:a6:f0:
18:ca:c7:04:b3:e9:e0:79:fb:3f:af:bf:62:e6:a4:54:da:e8:
04:4f:05:6f:c9:8b:0f:3d:e6:22:d1:bd:8b:66:72:2f:48:9e:
28:90:1f:39:90:d7:10:09:4b:56:dc:87:3d:b1:4d:68:d2:93:
25:7e:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:45 2025 by rpki-client