Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: srulYQgEoY9KFC6VKyQONlJhfo7SPxBWw+Pmu5RFgfQ=
Subject key identifier: 79:ED:8A:5C:E7:73:DF:B8:A7:AF:7F:FA:10:B2:F3:34:C5:D5:F8:E8
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 01985646041DBECAD6789F87469D46B31ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1611
Signing time: Tue 29 Jul 2025 13:01:25 +0000
Manifest this update: Tue 29 Jul 2025 13:01:25 +0000
Manifest next update: Wed 30 Jul 2025 13:01:25 +0000
Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: RCNb8qEGvW9b01W1Xz9TfyFlFZ71ouXYh3uLk+ziSbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:46:04:1d:be:ca:d6:78:9f:87:46:9d:46:b3:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jul 29 13:01:25 2025 GMT
Not After : Jul 30 13:01:25 2025 GMT
Subject: CN=79ed8a5ce773dfb8a7af7ffa10b2f334c5d5f8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:e6:d7:c6:30:8d:cc:ab:48:c6:bb:bb:17:
65:58:c5:2a:b0:96:4a:03:09:5d:10:8b:25:8c:8a:
f5:85:1d:d8:d7:01:a7:4e:e5:b5:e6:f9:51:27:31:
57:46:8c:5c:0e:84:db:73:b6:cc:f4:54:26:a5:d0:
9d:d0:fd:5e:d2:94:79:26:3d:3d:1d:ff:35:68:74:
95:59:ce:49:a3:c2:1f:2b:1e:40:fc:fb:68:ed:96:
b0:97:f5:ca:40:9a:76:70:70:5a:1b:69:ac:ee:ac:
15:05:b7:31:83:33:5a:32:a5:a3:c2:c0:79:f7:56:
08:e5:40:5d:f7:ef:d9:7d:f7:56:4a:5b:a5:d1:59:
79:b4:21:8a:04:9a:c3:e2:7a:e4:b9:31:97:96:3f:
d0:fb:c3:29:90:ec:c3:ff:41:ee:22:7c:4c:33:80:
53:bc:bf:8c:31:95:6c:98:76:29:c3:f1:33:cc:5c:
6e:b7:61:65:e1:1f:35:78:2d:e5:19:49:5f:d7:9b:
0e:bc:04:44:2a:9a:79:9e:de:86:51:6a:e3:c8:22:
67:e6:7a:34:27:4f:d3:b3:f1:fb:e1:68:46:29:cf:
29:f9:a1:d4:b6:18:36:d4:7f:1c:31:d0:6f:03:0e:
b4:c9:a7:c1:91:23:cf:32:4a:0d:37:08:58:82:14:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:8A:5C:E7:73:DF:B8:A7:AF:7F:FA:10:B2:F3:34:C5:D5:F8:E8
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:37:65:73:71:6a:db:1e:1d:02:f2:51:f1:2a:97:09:9f:16:
a4:56:57:a0:b7:b5:23:e8:f1:cd:a2:a6:62:cc:98:e5:1e:c1:
56:e6:97:28:6d:a7:b5:f6:ed:0e:23:3d:70:0b:3b:07:05:ec:
cf:f1:e8:fd:0a:78:2d:cf:22:b9:03:02:7f:85:51:0b:40:c4:
86:bd:dd:31:43:48:6f:10:6b:9e:de:bf:00:4c:ef:a9:4e:71:
e1:27:0b:49:06:e6:1d:49:e3:b5:56:e8:9f:ed:2e:c3:85:76:
5e:bc:34:8f:6d:6d:18:cf:b0:db:2c:62:58:f4:b0:75:65:57:
72:f6:08:1f:eb:5b:70:c8:d1:e7:8c:21:5d:e2:42:90:d4:15:
fe:ff:42:49:de:7a:f7:70:a2:22:b6:7e:89:db:f9:34:23:3a:
a2:f7:4a:08:31:e8:d0:41:1a:76:4c:69:bb:b7:c6:0a:36:3b:
87:21:c0:73:8f:bd:00:a4:84:10:2e:26:29:5f:62:59:31:ff:
3e:2e:bc:20:5f:e5:93:f8:c1:65:5b:a9:f5:6e:ad:59:d8:d4:
33:2d:c9:60:c9:f4:09:42:a6:33:c0:04:30:dc:ad:c4:76:23:
06:ce:cb:88:73:1a:7c:65:cb:cd:c0:39:37:f9:5c:8c:18:4b:
a1:7d:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:20 2025 by rpki-client