Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: 5ZFBtgP5kUUN9XbUNiA0Y94OXluyEWoDi7i7YutY1vo=
Subject key identifier: 60:C6:41:95:52:44:60:93:AD:B8:FD:39:2C:D5:36:75:25:2F:FE:5C
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 019A4D73893F8203E592AFEBA0D30A996F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 102F
Signing time: Tue 04 Nov 2025 06:00:07 +0000
Manifest this update: Tue 04 Nov 2025 06:00:07 +0000
Manifest next update: Wed 05 Nov 2025 06:00:07 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: D4DgHQcz62YJUStSp3ggwTDtlUJqrGUQG7qzFQt4Jow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:89:3f:82:03:e5:92:af:eb:a0:d3:0a:99:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Nov 4 06:00:07 2025 GMT
Not After : Nov 5 06:00:07 2025 GMT
Subject: CN=60c6419552446093adb8fd392cd53675252ffe5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:65:b4:a6:b7:3b:08:96:3f:0c:39:73:02:
f1:50:39:ca:75:69:e5:4e:42:5a:b9:ac:42:8e:78:
e9:c1:e1:8f:18:76:bd:fe:f5:63:e4:ce:bd:e5:92:
19:11:18:11:c7:be:ae:e6:e7:72:a3:2c:4c:f0:79:
fa:c5:65:84:3e:73:35:92:11:e8:9f:8f:86:f1:1c:
22:12:66:40:f3:61:e9:e3:2d:80:c5:20:74:c0:7e:
b4:8b:fb:08:2f:24:37:1f:59:73:70:ea:f2:49:47:
d2:0b:46:e5:eb:f1:25:f7:48:6b:35:46:93:3e:6d:
e4:54:29:c9:ce:82:11:d5:31:90:28:69:85:52:ca:
23:40:33:c8:c0:63:ad:30:46:1d:ca:de:b2:a7:04:
1c:09:e3:ca:64:f3:d9:60:0f:76:d2:8b:b8:6f:f2:
9f:99:50:84:8f:40:2d:a5:9d:5d:e5:35:73:dc:e4:
6a:99:63:b3:e8:ed:2d:93:8c:2e:06:5d:28:06:54:
da:6c:96:21:ff:55:23:ca:a4:51:45:0c:4b:ee:6f:
74:5b:76:9d:ec:85:4a:da:c7:22:aa:c7:7d:48:3f:
11:f9:91:a2:42:3d:8f:95:fb:87:b2:2f:65:f4:bf:
7f:48:ee:21:b2:aa:7d:00:6d:75:f9:bd:1f:a4:8b:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C6:41:95:52:44:60:93:AD:B8:FD:39:2C:D5:36:75:25:2F:FE:5C
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:29:f2:f2:f8:0a:a4:71:29:9c:13:1a:76:24:fb:af:b7:18:
1e:d6:c1:33:2c:37:35:f0:aa:b6:f3:4e:90:a1:87:66:1e:10:
06:21:00:a6:23:30:9f:59:dd:0e:09:16:c4:c2:9d:22:25:63:
7b:ac:50:de:21:06:24:a7:72:ba:ac:ed:0a:dc:a3:ba:f2:4c:
a0:35:ef:cf:6a:84:51:0a:59:45:69:a3:ad:f1:9d:ea:2b:cd:
64:21:de:91:4c:63:4c:27:39:82:c9:05:9b:4d:66:9b:32:d1:
bb:c2:a6:13:0c:69:3e:cf:e7:a5:d8:d3:c3:0f:ce:b1:86:61:
a1:c8:f1:a1:c2:dd:a9:d1:a3:2c:c8:50:f2:98:da:bc:7d:63:
16:06:7c:f7:11:10:5f:aa:cb:88:44:cc:07:0e:34:a3:e9:cf:
90:61:9d:92:c3:38:fe:84:d5:36:66:ec:45:af:7a:67:c5:33:
ae:b8:41:d4:04:3d:33:8e:f5:57:82:75:dd:0f:91:4a:62:35:
d8:4f:f8:c2:cc:11:35:5c:d2:7c:f5:cd:73:32:a9:d6:89:d7:
b8:76:da:d4:86:ba:68:72:08:dc:c0:94:7e:ba:76:3b:d4:04:
36:31:63:c7:3d:58:2e:cd:65:74:e2:cb:a9:f7:18:38:f1:76:
ab:57:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:42 2025 by rpki-client