Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: 9BR5/gkrfHz9WDhcVQby7nGBpnKXQCNt9o3w1qdAjjk=
Subject key identifier: 72:8A:25:E6:12:26:C3:18:5F:24:9F:DB:CB:20:6C:39:35:EE:66:39
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 01984A415198C3E13A14C98DA263A1FD81D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0B3D
Signing time: Sun 27 Jul 2025 05:00:51 +0000
Manifest this update: Sun 27 Jul 2025 05:00:51 +0000
Manifest next update: Mon 28 Jul 2025 05:00:51 +0000
Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: 48yApYrJOX5czt4lo8mdmhxFDmXMzeGakl0rnwaG2hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:51:98:c3:e1:3a:14:c9:8d:a2:63:a1:fd:81:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Jul 27 05:00:51 2025 GMT
Not After : Jul 28 05:00:51 2025 GMT
Subject: CN=728a25e61226c3185f249fdbcb206c3935ee6639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:f9:5a:f6:47:6d:96:e8:26:8b:46:59:e1:
ec:c8:96:4f:00:ec:4e:02:14:b6:80:de:63:fa:63:
ee:0c:da:00:8e:db:bc:de:fa:eb:f3:9d:c4:c8:d2:
3b:21:08:de:c7:68:db:ab:d1:0e:12:20:79:c7:84:
e6:6c:d1:c1:24:e7:7d:06:17:0f:7b:f6:35:74:5d:
01:a1:90:2b:54:6f:68:bf:d9:bf:3e:3f:69:e5:8e:
d8:34:7c:0e:8a:ac:a9:8e:e9:4c:04:cd:3b:ba:d6:
b3:ec:43:56:26:82:5f:7d:28:50:12:12:fd:86:02:
c0:e6:32:d1:8d:c5:67:3d:61:23:65:cb:95:19:da:
4a:ea:d2:bd:67:0e:9c:e4:dc:d1:22:b7:22:27:dd:
32:26:63:20:70:06:fc:d1:50:6d:50:dd:d2:83:4e:
af:72:fc:f7:1d:a9:57:03:2d:51:52:2e:2a:79:84:
3e:77:81:3b:44:44:02:f8:6a:17:cd:11:97:b4:41:
a4:0b:59:6e:56:15:21:c8:93:e3:39:67:54:71:60:
1e:a8:a3:2d:4b:52:2b:1e:66:25:f8:d9:a5:61:61:
7e:cd:97:55:78:c0:68:41:fe:6f:ed:d7:f3:10:83:
fa:18:f2:36:78:26:15:59:84:b0:87:0f:b4:d9:ac:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8A:25:E6:12:26:C3:18:5F:24:9F:DB:CB:20:6C:39:35:EE:66:39
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5c:96:d6:48:43:ae:5d:a0:07:e0:f5:f0:42:6e:89:62:c3:
d7:ec:2e:9a:4b:be:45:2a:e9:34:c1:32:d7:0a:7c:2e:70:2b:
07:1e:28:b3:5b:f6:5b:26:69:7c:79:16:c9:56:6a:33:04:54:
fc:7c:a6:20:fc:a9:23:90:23:65:1e:af:8f:61:34:9b:ac:55:
8b:6b:e4:7f:91:25:cc:cc:1a:25:13:5b:1c:92:5c:37:03:c9:
c6:03:5a:00:c3:16:db:dc:77:e0:3f:09:46:6a:76:43:66:99:
89:80:96:72:ce:34:fe:25:36:0d:91:47:cc:dd:0c:53:fb:60:
7e:0f:d7:2f:fb:f4:08:e7:f2:bd:eb:9c:70:e4:12:1a:9c:6a:
10:79:cf:94:23:83:bc:53:4f:5d:ba:19:c6:0f:59:bd:f9:de:
88:e9:f8:af:ff:69:66:b9:7d:b6:fb:de:ea:44:d3:bf:31:cc:
0f:b6:68:8d:62:70:36:f1:d4:d6:c2:4c:57:8d:67:83:18:98:
12:f8:b2:95:b4:18:af:b5:0a:23:2c:34:1d:46:1a:7f:1a:a0:
b0:90:2a:ea:e4:2f:22:71:df:42:6c:9d:f6:05:9a:9d:96:a5:
7e:64:4d:8e:8e:0a:9e:69:4e:86:28:a2:47:39:42:81:46:bf:
e0:be:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:38 2025 by rpki-client