Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: aw1dmyR1wG0h7pkTmqwnBU4oPyJqZbnSZGuibbk399A=
Subject key identifier: AF:A0:79:61:E9:7C:BA:88:65:22:6B:4E:6D:EA:24:44:D8:3E:6F:2C
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 01984A7818F17759BB190FF2AE07248595DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 146F
Signing time: Sun 27 Jul 2025 06:00:41 +0000
Manifest this update: Sun 27 Jul 2025 06:00:41 +0000
Manifest next update: Mon 28 Jul 2025 06:00:41 +0000
Files and hashes: 1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: 1P+2SZMA4e2ORGgl6Txz1bSDymoUEEQV01s6hVOn+SU=)
2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:18:f1:77:59:bb:19:0f:f2:ae:07:24:85:95:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Jul 27 06:00:41 2025 GMT
Not After : Jul 28 06:00:41 2025 GMT
Subject: CN=afa07961e97cba8865226b4e6dea2444d83e6f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:a5:f7:2c:0f:d6:83:96:5c:37:55:44:c0:
f7:e2:ce:58:ba:f0:48:19:5b:cd:e8:cb:ee:cd:ee:
be:ec:8d:c2:a5:e6:74:5a:d4:90:84:a9:c1:a4:42:
e5:89:86:41:7d:51:e1:59:ce:14:e4:c7:38:26:5b:
32:e3:1f:17:56:1b:4a:86:07:bb:0e:76:5b:0a:63:
07:16:89:c9:46:5a:b7:81:d1:de:d0:7b:4d:69:4d:
38:71:19:83:b8:a4:30:f2:5b:96:19:c9:12:38:53:
8a:46:f8:a7:bb:ab:f2:05:53:48:49:d9:88:6b:b6:
9b:b9:93:62:4f:86:d4:39:e2:6d:3b:84:9a:70:4e:
6b:0f:2c:ae:21:4b:00:77:13:13:74:a4:3a:73:ac:
02:d0:72:9f:51:0b:e1:cc:31:36:d3:7b:ae:51:de:
35:41:56:69:ee:1a:ff:bc:93:96:aa:d2:88:fe:84:
78:c6:d1:48:39:82:83:40:c9:40:1d:e2:c4:37:d6:
bd:06:99:ea:0c:1d:e0:bb:55:07:7b:53:91:b3:bc:
eb:9e:b6:5c:6c:7a:dd:e2:6a:7f:27:9c:75:3d:5f:
12:a9:a8:84:d0:e7:8d:95:b1:f3:ca:c8:5f:67:62:
a2:4e:dc:0c:bc:f7:49:62:29:67:7a:06:a8:0f:7d:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:79:61:E9:7C:BA:88:65:22:6B:4E:6D:EA:24:44:D8:3E:6F:2C
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:11:9a:61:98:17:e6:63:fe:86:0f:55:ba:f4:c5:83:60:d1:
65:6b:60:25:5e:2a:e9:2f:21:ac:b1:69:6b:d7:cb:a5:3c:27:
13:4b:27:1d:95:6c:92:c6:e0:18:87:82:58:6d:75:f5:4e:e5:
4a:0a:e8:6e:65:48:9d:38:f3:e0:01:df:b4:55:7f:e4:88:c9:
10:aa:0e:41:8d:c3:2f:c8:61:ef:cd:57:1b:1e:23:b9:eb:b4:
21:67:7d:a5:af:9b:78:35:9e:5f:b2:a3:5b:24:55:d5:53:5e:
eb:86:1b:c9:ac:38:9c:67:40:fa:1a:5c:b0:90:6d:3b:48:6b:
45:da:ab:74:5e:e9:f1:61:dc:57:71:76:06:ef:73:8c:b3:0f:
5a:c2:53:30:c1:e1:ab:15:cf:06:21:7a:28:7c:54:f9:20:b1:
b3:70:22:b1:5a:ec:1f:5d:ea:ac:38:fb:ce:75:6b:d9:a4:e2:
3e:c8:53:83:22:c0:13:a5:36:fa:15:22:49:03:65:4e:99:d7:
7a:de:f8:c5:7b:38:b1:52:2d:09:ba:35:02:71:17:1f:91:ee:
c9:7c:b9:57:40:41:ca:71:2c:eb:87:05:9a:94:05:9d:84:7d:
6a:d8:ec:0d:2d:a3:19:75:88:92:9d:3b:41:70:d4:9d:74:9b:
3b:54:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:23 2025 by rpki-client