Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier: KA4VOZ7MoKX/LECO6Rcdw9I8MJ/E5TVeV7lmStpjGz0=
Subject key identifier: 1D:10:4B:91:F1:63:F5:55:B5:EE:6D:A8:A4:3C:A7:83:D1:37:4D:14
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial: 019A50E2A84FDDEBDD8BC67D19478FDDF17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number: 0435
Signing time: Tue 04 Nov 2025 22:00:22 +0000
Manifest this update: Tue 04 Nov 2025 22:00:22 +0000
Manifest next update: Wed 05 Nov 2025 22:00:22 +0000
Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: 9FYu6KPPtWUaiml7VKOaLpv0xGtkY6Viby8al93nelI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a8:4f:dd:eb:dd:8b:c6:7d:19:47:8f:dd:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Validity
Not Before: Nov 4 22:00:22 2025 GMT
Not After : Nov 5 22:00:22 2025 GMT
Subject: CN=1d104b91f163f555b5ee6da8a43ca783d1374d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:6b:53:57:7c:74:ce:15:18:db:1c:dd:0b:
d8:1d:ff:e3:14:3b:28:a4:8c:cb:08:11:17:1c:c7:
c0:e3:6f:14:5b:0b:fc:0f:aa:7b:d9:61:47:9d:9a:
b7:c3:c0:22:03:69:b1:6a:90:3b:ac:76:c0:42:b3:
3b:fb:a7:de:1e:ce:eb:16:86:ec:33:82:30:09:93:
b7:6c:65:50:17:42:c0:1a:2c:68:d8:f1:cc:8c:44:
87:79:09:87:fc:68:50:bb:62:34:3b:13:f4:00:e3:
84:90:70:6b:6f:e4:12:2b:0d:64:14:33:fe:a3:6a:
45:44:e2:2f:76:0a:5c:54:19:1e:c1:05:91:e0:ea:
04:5a:7f:55:76:90:5a:38:69:4a:4f:23:f4:ab:56:
57:57:01:99:ba:aa:65:74:5d:c6:98:d8:b0:c7:85:
a0:b3:ab:80:eb:09:9c:68:d4:88:cb:67:01:0f:76:
ad:26:fe:c1:4c:39:b6:1b:f8:d6:3f:46:77:4e:71:
a5:9b:b8:0b:c0:07:c7:cf:bb:5a:2a:f6:9d:43:db:
a6:9b:da:7f:bb:1c:cb:03:65:58:9a:14:4d:cb:79:
aa:1d:7c:33:ef:55:6e:9c:37:18:7a:05:59:3a:2a:
24:13:37:61:a4:81:6b:aa:74:3a:38:da:40:f9:ce:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:10:4B:91:F1:63:F5:55:B5:EE:6D:A8:A4:3C:A7:83:D1:37:4D:14
X509v3 Authority Key Identifier:
keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ab:7d:ec:2b:f1:94:f3:a6:99:de:2d:c0:73:cd:4f:40:1a:
cb:d2:18:d4:e5:f1:b8:1b:a2:33:3b:91:ca:48:ce:63:37:89:
a9:e2:76:32:5a:23:ee:96:ef:e5:34:7e:47:74:5a:97:3b:bc:
53:92:1f:9f:c4:df:9c:04:fd:bb:b2:75:ba:6f:66:85:c8:fa:
86:8e:d6:ac:6b:77:74:8a:6b:61:66:8d:96:d5:3c:a8:21:22:
a5:a5:95:8e:f8:0a:da:f2:0c:15:e3:0a:6b:6b:a5:ca:f9:e9:
58:3f:73:30:c8:0b:69:92:2d:c3:37:86:fb:12:2d:e4:fe:cd:
96:44:07:2d:6c:c6:fc:6f:ee:c5:bc:4f:59:34:08:34:96:34:
3d:a4:4c:d1:1c:10:d7:da:c1:71:3e:1a:46:55:59:51:d7:99:
1a:e9:87:87:d6:a0:34:ba:34:e9:8b:0e:69:90:46:b8:9f:3b:
46:65:f6:57:97:cd:a7:cb:36:54:41:c5:f9:5d:18:6a:e3:6d:
10:43:aa:cb:03:52:27:4d:c5:fa:e0:fa:82:33:12:0d:47:bc:
45:a9:74:44:db:42:ea:45:35:c9:5d:a8:3b:ef:0d:8c:c8:65:
ed:3b:05:58:b3:33:25:29:9d:56:12:f4:0b:49:a3:bf:9b:24:
8b:b7:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:38:57 2025 by rpki-client