Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier: 9yFSgdr4OeaS9d3GLcAyUK7WXcyRmCY7ejn58tfTZ5c=
Subject key identifier: E7:98:6F:42:48:70:1F:08:2A:36:03:6D:D9:76:87:65:CF:22:72:75
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 019A4E1914ECD4D2A5687404FAF5091BCB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number: 0C01
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: zlxqSvlogKFafZCYq3mlfzvSWHWU7dRI7Y95Uo+frAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:14:ec:d4:d2:a5:68:74:04:fa:f5:09:1b:cb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=e7986f4248701f082a36036dd9768765cf227275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:07:c4:43:dc:fd:46:97:5f:7f:67:90:ef:
04:c6:ab:f3:8a:14:df:3a:ba:2f:9a:37:a2:a2:ac:
e1:f8:20:ac:3d:06:f9:f7:c7:36:0d:f8:ef:34:86:
34:72:dc:87:25:de:82:66:a2:34:bc:bb:d9:aa:ba:
9c:62:f8:04:a3:35:fa:9f:23:a9:0e:4f:e1:3e:46:
7e:0f:03:83:b8:ba:39:0b:aa:52:57:2d:f6:cc:b7:
7e:8d:29:0d:f1:e0:bc:02:83:06:9b:c0:dd:fe:e8:
8c:e9:44:e9:b2:2b:1c:ec:ee:a2:55:f6:7b:b9:1a:
c0:e1:d3:2c:bb:50:e4:9c:2c:25:d3:4d:3d:1a:45:
08:05:74:c4:42:99:57:dd:c5:43:e6:2b:fb:07:fa:
8a:71:24:72:8b:b8:05:f7:6a:16:04:cb:6f:d4:42:
95:74:fe:a4:72:fc:04:cc:f7:0d:3c:a1:0c:11:27:
ad:9c:33:3a:a8:93:ed:d0:4d:1e:c3:ec:6d:3e:c6:
73:80:ee:33:8c:79:d8:f8:9c:48:f0:d5:e5:7f:6d:
ec:86:35:8f:47:d9:66:6b:ae:dd:b7:f0:22:50:35:
2a:bf:ca:48:df:da:63:4c:5f:96:10:e8:c0:a7:d4:
a3:1a:aa:4c:bc:1a:a8:f3:97:37:bd:a7:81:56:26:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:98:6F:42:48:70:1F:08:2A:36:03:6D:D9:76:87:65:CF:22:72:75
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:73:a8:c0:8c:1d:58:ac:65:62:fc:a3:e6:74:af:c3:c9:62:
68:04:a2:07:1f:9f:f8:a4:a6:1f:90:ab:63:08:d7:b4:e5:54:
81:5b:5d:9f:f0:de:6b:4c:7f:55:56:69:fa:50:8b:f6:6e:af:
27:5e:56:0a:f8:97:e9:d6:84:33:5e:0b:0d:0a:00:6f:88:03:
06:7c:b7:9f:2f:1e:e2:29:ff:40:00:c0:b3:60:45:a3:b3:1a:
f3:a9:64:0b:e7:19:de:be:49:43:3f:1d:a0:61:84:f4:e1:bd:
9e:68:1b:d2:69:e2:fa:8a:17:38:89:65:d4:c4:05:8a:94:42:
d0:e8:14:17:ec:4b:87:ed:79:b7:16:a1:c0:a1:53:a1:2e:7a:
76:f8:74:2c:fb:05:1d:9a:22:59:fb:8f:3d:ec:38:24:02:89:
43:22:bf:d3:d6:32:9e:f7:11:44:8f:b5:88:23:e0:75:cb:77:
be:aa:66:fb:3b:70:fe:b3:0b:c6:1b:d9:38:aa:aa:25:af:2e:
af:8e:83:01:6b:dd:1c:69:21:a8:02:2c:04:93:ba:f5:6c:0e:
de:10:11:ea:fe:b8:a5:c0:ad:4a:bf:45:a0:cc:ab:57:e2:aa:
67:53:5f:5e:13:24:55:1b:01:8b:66:e7:6a:86:c5:90:8c:05:
29:00:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:17 2025 by rpki-client