Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: jP5P11B5PPqBOh+JFBXwM/EQ6/C9FlaKrFrdEVi9f0E=
Subject key identifier: 43:BF:30:46:B1:85:25:F6:03:B4:14:CB:CD:9A:E3:D6:32:36:59:6C
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 019849650FC2C187D8A13BFE49821B898077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 13C1
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: 2y7YfbQGq2NixmCaVKP3CGCIExuJr/VYDW7MzkyFvl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0f:c2:c1:87:d8:a1:3b:fe:49:82:1b:89:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=43bf3046b18525f603b414cbcd9ae3d63236596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:d9:d9:12:85:9c:73:b8:b8:77:a9:14:e9:
a3:b3:a2:15:69:c4:64:5b:71:7b:1b:40:fa:f6:6d:
12:68:29:65:ad:d0:5b:a6:69:76:f7:31:50:cc:ac:
cc:24:97:58:15:a2:9d:75:ab:34:e4:e2:23:85:46:
b9:21:bb:0d:c4:0b:a8:cf:30:55:7f:3f:95:80:74:
9e:e0:02:72:ae:2a:ae:f2:ea:fb:2f:4f:89:e9:b0:
62:9d:61:e4:bd:fe:4c:a0:3f:b7:fa:20:0b:79:3a:
dc:63:d0:1b:af:0d:13:d5:2c:3b:95:d6:0b:63:6a:
91:72:ba:f1:a5:46:87:be:a6:23:8e:b2:92:48:cf:
b8:59:9e:d0:92:48:cd:63:5d:c2:93:d9:4b:fc:bd:
e5:bb:62:93:df:8d:cc:fc:ad:a9:37:fc:9f:cb:f4:
97:7c:f9:8a:1c:63:fa:9d:3b:06:e2:c2:4c:f0:73:
9a:a7:56:62:61:a5:22:c7:31:f9:37:65:35:36:ff:
ea:9d:28:02:55:44:31:e6:a9:43:4d:61:9a:79:f0:
77:15:10:f6:93:8f:98:74:ca:15:af:09:1d:53:85:
27:fa:b8:ed:d1:1b:5e:fe:07:4b:7f:ac:f5:91:a9:
c5:8b:0c:ff:72:0c:07:50:b4:7e:35:23:81:87:79:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:30:46:B1:85:25:F6:03:B4:14:CB:CD:9A:E3:D6:32:36:59:6C
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:de:6e:91:ac:58:a7:24:09:6e:61:ac:de:34:01:ed:5f:
3c:38:16:66:56:e6:82:2e:a2:14:99:0e:f6:13:06:f9:98:18:
a6:17:24:b3:4a:f6:76:e0:d7:58:18:29:91:f4:57:e6:43:ad:
c9:ee:d4:9d:39:4a:08:14:67:0c:b6:d9:fb:86:f2:35:83:8b:
a6:fd:08:3a:39:5f:2b:06:a4:33:a1:b1:c6:d8:78:e5:b9:87:
cc:ad:1a:93:db:43:c7:4d:4e:a9:31:cc:5a:04:86:5e:ab:c9:
36:03:57:78:0c:76:6e:e3:25:8c:59:0d:a4:4a:d8:31:61:d9:
e1:d6:91:d0:49:6d:53:24:97:f5:74:03:6e:c4:e3:fc:13:78:
36:cf:5c:5b:43:eb:9c:6c:cf:1a:c2:f5:d1:7a:a3:a0:5c:f2:
73:d3:72:8d:39:0f:85:17:b1:c3:20:3f:c1:8e:d2:bf:ad:23:
ff:d3:67:16:db:b7:f8:66:0c:b2:cc:60:ef:eb:f9:49:d6:95:
71:10:a2:63:9c:36:6e:3b:97:6a:0f:8b:e3:d6:a2:b6:88:52:
2d:44:ca:e5:a4:35:20:d6:2e:89:a1:ca:a5:f4:5f:d9:c9:e9:
29:56:0c:4c:7d:0e:3b:a8:48:cf:36:f9:bd:7f:bb:04:6f:d2:
0b:19:10:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZQ/CwYfYoTv+SYIbiYB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MzlhMWE3ZGUwNmQ3N2FiMmFlMzM4N2RjYTY5YTdmZWM3
NjZjNDMwHhcNMjUwNzI3MDEwMDE2WhcNMjUwNzI4MDEwMDE2WjAzMTEwLwYDVQQD
Eyg0M2JmMzA0NmIxODUyNWY2MDNiNDE0Y2JjZDlhZTNkNjMyMzY1OTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyITZ2RKFnHO4uHepFOmjs6IVacRk
W3F7G0D69m0SaCllrdBbpml29zFQzKzMJJdYFaKddas05OIjhUa5IbsNxAuozzBV
fz+VgHSe4AJyriqu8ur7L0+J6bBinWHkvf5MoD+3+iALeTrcY9Abrw0T1Sw7ldYL
Y2qRcrrxpUaHvqYjjrKSSM+4WZ7QkkjNY13Ck9lL/L3lu2KT343M/K2pN/yfy/SX
fPmKHGP6nTsG4sJM8HOap1ZiYaUixzH5N2U1Nv/qnSgCVUQx5qlDTWGaefB3FRD2
k4+YdMoVrwkdU4Un+rjt0Rte/gdLf6z1kanFiwz/cgwHULR+NSOBh3n7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO/MEaxhSX2A7QUy82a49YyNllsMB8GA1UdIwQY
MBaAFJY5oafeBtd6sq4zh9ymmn/sdmxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82Y2Q4NzAtMDk2OC00Y2VmLWE5MWQt
YWYyMGZlNzkzZTY0LzEvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS82Y2Q4NzAtMDk2OC00Y2VmLWE5MWQtYWYyMGZlNzkzZTY0
LzEvbGptaHA5NEcxM3F5cmpPSDNLYWFmLXgyYkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2/ebpGs
WKckCW5hrN40Ae1fPDgWZlbmgi6iFJkO9hMG+ZgYphcks0r2duDXWBgpkfRX5kOt
ye7UnTlKCBRnDLbZ+4byNYOLpv0IOjlfKwakM6Gxxth45bmHzK0ak9tDx01OqTHM
WgSGXqvJNgNXeAx2buMljFkNpErYMWHZ4daR0EltUySX9XQDbsTj/BN4Ns9cW0Pr
nGzPGsL10XqjoFzyc9NyjTkPhRexwyA/wY7Sv60j/9NnFtu3+GYMssxg7+v5SdaV
cRCiY5w2bjuXag+L49aitohSLUTK5aQ1INYuiaHKpfRf2cnpKVYMTH0OO6hIzzb5
vX+7BG/SCxkQ8Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:58:20 2025 by rpki-client