
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
File: LC6uaapwrwN7XSx-gSO-pAwpXn4.mft (raw, json)
Hash identifier: q83LjAHmt3QWIpNBUrRzzRvP2HAdR+K/hsBOhAhiDvA=
Subject key identifier: B6:91:12:05:12:6D:BE:FF:CC:79:86:BC:6A:53:6B:CB:37:D5:7E:1B
Authority key identifier: 2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E
Certificate issuer: /CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e
Certificate serial: 019A50E302051AD75EFF58760BB138BA8327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
Manifest number: 0B5B
Signing time: Tue 04 Nov 2025 22:00:45 +0000
Manifest this update: Tue 04 Nov 2025 22:00:45 +0000
Manifest next update: Wed 05 Nov 2025 22:00:45 +0000
Files and hashes: 1: LC6uaapwrwN7XSx-gSO-pAwpXn4.crl (hash: RC1swp3AGm365NHuXpYBK5wUYtsXYLH10Gtr4Fv8TR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:02:05:1a:d7:5e:ff:58:76:0b:b1:38:ba:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2eae69aa70af037b5d2c7e8123bea40c295e7e
Validity
Not Before: Nov 4 22:00:45 2025 GMT
Not After : Nov 5 22:00:45 2025 GMT
Subject: CN=b6911205126dbeffcc7986bc6a536bcb37d57e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:2a:e3:61:ce:61:d0:83:b4:c3:8a:49:73:
e0:fd:bf:7d:76:08:0d:2f:dc:2f:8e:a2:41:c1:19:
0f:27:e2:30:01:29:48:09:b5:6a:62:23:c2:66:a6:
ce:c6:5e:e5:92:8d:0f:0a:c9:c3:fb:d3:4a:a6:49:
e4:ff:0d:d5:0f:41:bc:64:9e:92:42:63:6a:8e:69:
d7:5d:0a:0b:c2:7e:38:0e:fd:56:d9:d0:7e:ce:fa:
4f:52:d0:13:e7:37:0f:6c:27:db:a4:0e:9a:65:ac:
bb:57:a1:ec:72:c0:f4:ad:51:6f:c6:64:db:ff:c3:
5c:3d:39:65:32:91:39:0d:df:dd:15:e5:b3:76:47:
79:bc:be:14:b6:fc:a2:44:f2:ee:8b:43:cd:5e:18:
60:b5:18:d0:52:dc:ef:23:bc:37:5b:67:b6:40:b1:
60:c7:c8:96:2d:44:1b:a0:18:be:8e:1b:1b:34:98:
b4:19:be:91:92:70:31:65:5d:a1:08:e6:95:73:1c:
90:d0:84:2d:41:ec:4b:60:76:f0:23:0a:c8:e4:d8:
91:7a:bc:e1:c0:8b:b0:39:5c:5c:93:a6:37:ae:8b:
8d:a4:70:6d:03:d6:98:fc:07:a4:52:c6:24:d3:92:
62:61:57:85:ca:72:8c:39:99:d5:1d:00:a6:44:1a:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:91:12:05:12:6D:BE:FF:CC:79:86:BC:6A:53:6B:CB:37:D5:7E:1B
X509v3 Authority Key Identifier:
keyid:2C:2E:AE:69:AA:70:AF:03:7B:5D:2C:7E:81:23:BE:A4:0C:29:5E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC6uaapwrwN7XSx-gSO-pAwpXn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40cde9-90c2-4b32-b87c-7235577b6d56/1/LC6uaapwrwN7XSx-gSO-pAwpXn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1e:17:24:c0:67:fe:8e:0d:d0:fb:4d:40:27:ea:90:8f:c7:
c9:69:ec:70:4e:3f:a0:6e:84:4b:24:e0:96:28:d5:e7:d5:be:
25:13:9f:87:92:95:49:3c:97:f0:40:cd:35:11:b5:b7:ed:96:
2a:b6:7e:dc:e0:38:cc:5a:4b:fe:cc:8b:43:17:5f:1d:ba:db:
bd:ff:02:d3:92:1d:ff:7f:b2:ec:21:d5:0f:94:48:0c:a1:b4:
69:bc:71:5c:00:cf:b9:82:be:17:05:46:47:1f:86:12:b7:70:
95:5b:6f:a9:09:46:ff:ac:1c:9d:fb:10:c9:98:a2:1a:1a:9e:
0c:e9:bd:f8:e7:ac:6b:e7:cd:ed:77:b8:ed:21:38:a9:db:70:
35:8b:79:35:33:06:22:2f:55:15:51:af:42:d3:ad:51:83:09:
ae:0f:e2:62:73:72:12:8a:6c:17:fb:d8:8d:49:85:aa:f2:f2:
6d:d4:db:f8:25:2d:8d:91:22:d5:04:d8:51:9b:4f:06:85:3e:
48:60:78:e0:8a:26:60:29:27:c1:e0:74:46:84:db:ff:ef:43:
13:26:d3:39:02:6b:6d:3f:b7:dd:4f:1b:99:14:20:73:8f:7c:
02:9c:6e:a7:8d:68:90:f9:51:c5:92:b1:49:b4:9a:e3:9e:47:
f3:97:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:29:40 2025 by rpki-client