Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
File: lN4Clz3AXsPGu_ble31qTO74GF4.mft (raw, json)
Hash identifier: I8hs5pgjk9GCBHHtKECQJ3ofRK695V/wjY12OaThFag=
Subject key identifier: D9:2E:C7:32:93:58:F1:85:AF:40:41:C3:99:8C:2E:CF:E4:99:79:59
Authority key identifier: 94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
Certificate issuer: /CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Certificate serial: 019A4F624B47596B73D14C8A78F8401D1D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
Manifest number: 0472
Signing time: Tue 04 Nov 2025 15:00:33 +0000
Manifest this update: Tue 04 Nov 2025 15:00:33 +0000
Manifest next update: Wed 05 Nov 2025 15:00:33 +0000
Files and hashes: 1: lN4Clz3AXsPGu_ble31qTO74GF4.crl (hash: rTYuE9GYtM5em/EfXHAFr8vKujB32EZXSlS+jmlnrwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4b:47:59:6b:73:d1:4c:8a:78:f8:40:1d:1d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94de02973dc05ec3c6bbf6e57b7d6a4ceef8185e
Validity
Not Before: Nov 4 15:00:33 2025 GMT
Not After : Nov 5 15:00:33 2025 GMT
Subject: CN=d92ec7329358f185af4041c3998c2ecfe4997959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:16:d3:cb:07:eb:41:c1:94:36:3d:47:1e:
d3:2a:a9:12:4c:9c:cb:6e:69:ef:bd:37:16:0b:0c:
a8:f1:44:b1:0c:a1:a9:2b:0f:f7:06:a2:4e:66:1a:
7a:4d:44:9f:1b:4b:6c:8e:28:e1:36:df:19:50:e3:
5f:22:69:5d:31:52:87:be:7f:65:7c:2d:ba:99:5b:
56:d0:fd:2d:62:83:41:a4:15:9f:4a:e7:80:f1:85:
d7:a8:a7:62:40:d5:7b:3e:9d:6c:68:bf:6a:c4:b1:
39:84:a4:03:61:24:81:59:bb:53:60:c7:37:fc:29:
c4:79:4f:e7:2f:f0:ba:16:87:90:74:85:f9:f3:d0:
1d:ea:9c:6e:ca:a6:1c:24:73:8a:64:2a:60:cb:6a:
3e:d9:7d:c6:b9:d1:4b:47:c9:9c:d9:c3:7b:64:d6:
ec:5a:92:04:ec:e8:3d:ab:69:c5:cb:69:a9:f4:9a:
cb:df:a6:87:15:15:8e:2b:4d:65:38:cd:05:5d:aa:
5a:99:01:1e:f6:f3:7d:bb:c4:34:73:00:5f:08:99:
9a:cd:e7:c3:d1:ad:cc:c3:f4:4f:48:e9:f1:f5:fa:
4e:ef:5c:a3:47:ce:ae:e2:36:da:e2:fb:cd:24:45:
1a:36:af:db:3c:a7:22:7a:90:aa:50:02:22:5b:9a:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:C7:32:93:58:F1:85:AF:40:41:C3:99:8C:2E:CF:E4:99:79:59
X509v3 Authority Key Identifier:
keyid:94:DE:02:97:3D:C0:5E:C3:C6:BB:F6:E5:7B:7D:6A:4C:EE:F8:18:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN4Clz3AXsPGu_ble31qTO74GF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0b390f-d6d8-44c9-afcd-d49d1f5739ed/1/lN4Clz3AXsPGu_ble31qTO74GF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:92:38:96:6e:f4:7f:f7:6b:78:3f:ed:c7:1c:9a:d7:d4:61:
14:97:76:56:c4:2d:cf:3c:df:ad:e0:b6:c9:20:a7:9b:d9:a1:
39:c5:92:c3:67:fb:8a:4d:0a:1e:b4:51:5b:f7:58:09:28:50:
e8:5c:d2:50:b2:1e:22:93:1e:03:a4:80:f0:b8:cc:c0:f6:a2:
8f:b9:52:4c:63:d9:10:69:ad:db:1f:60:ec:37:0c:7c:4d:ed:
48:8a:52:ca:1d:a2:e2:72:39:b4:84:ac:dc:de:47:b4:24:b2:
23:f3:93:51:bf:c1:48:37:de:c7:fc:50:2e:8f:88:79:fc:0f:
2e:1b:0c:f6:fb:c9:cf:b8:33:72:6f:8f:86:ed:7b:f8:e1:99:
44:fb:95:e5:aa:76:37:1e:e5:80:51:2b:82:f5:f7:5c:19:0a:
17:30:75:9d:fd:a9:ff:e5:39:1f:5a:57:a4:40:0c:d9:f1:5d:
c7:53:c1:6e:a2:8f:e5:1c:cd:09:97:d6:44:33:4c:ff:4d:9c:
d2:53:bd:9e:25:05:83:a1:e7:98:94:e4:42:3b:1e:d4:c4:8b:
90:c0:a9:a5:48:75:0b:5a:83:ab:24:e4:11:6d:6a:f0:de:4f:
69:ae:f3:cc:ad:6c:5a:21:79:81:af:25:82:d9:b0:b5:d4:fe:
0b:bd:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:14 2025 by rpki-client