Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: vjWqhr7lEVTWGCs4NiLG4nvoROiNuT5RnRgujTKv4hU=
Subject key identifier: DB:D0:16:06:2C:82:BA:20:6E:28:23:8D:D0:38:BC:00:5B:C8:7B:68
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01984A77A455D2D4D24AE50B04032C61A4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 052E
Signing time: Sun 27 Jul 2025 06:00:11 +0000
Manifest this update: Sun 27 Jul 2025 06:00:11 +0000
Manifest next update: Mon 28 Jul 2025 06:00:11 +0000
Files and hashes: 1: 9ByEybCE9CIwuPyP4jebxsupnkU.roa (hash: 73w7qQJmQNDu4a4ozvHyeU3dD07eczn+JHcfhr0D3rk=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: WxInS+1ciSbGweXh6ZIZ3F3ohTDK4TLNzj5ltCrQIKs=)
3: ZGAAIEbHqaO9ocKXBuyPCJHOK4Q.roa (hash: zo/Lf5y0o4dx5HHn9iwdS1BxAwJJz2SLb/lxly7foaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a4:55:d2:d4:d2:4a:e5:0b:04:03:2c:61:a4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Jul 27 06:00:11 2025 GMT
Not After : Jul 28 06:00:11 2025 GMT
Subject: CN=dbd016062c82ba206e28238dd038bc005bc87b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:65:72:e1:ce:cc:2b:48:c9:11:ab:36:ae:
63:49:6a:d2:39:35:ab:01:ac:9f:a5:91:7a:4f:54:
0c:93:9e:da:2a:99:f6:7c:c0:28:c0:a1:0b:8d:18:
96:5f:e0:29:23:6b:fe:fb:10:7b:43:7c:47:42:47:
0e:fc:1b:f8:97:35:52:d5:ef:d6:df:98:b9:b5:b5:
a0:d7:d7:8f:e3:a0:3f:d7:79:87:92:b2:1f:e6:7d:
6e:ce:77:45:f6:30:fc:19:69:f6:d4:9d:78:9f:bd:
ee:13:cb:ed:27:de:05:1b:1c:39:fa:0b:70:72:6e:
3d:51:c0:61:5c:f9:a3:5c:7b:95:0c:36:7f:2f:b1:
13:6a:31:c9:3c:0f:44:b8:89:38:4f:00:74:01:d8:
dc:cf:8c:93:21:84:b5:98:ca:69:4c:83:a0:ae:20:
d5:ef:53:2c:e3:ff:b8:b3:68:c0:fc:e9:0e:5f:42:
3f:d9:38:8b:37:ac:9c:67:bb:eb:fe:34:c4:20:18:
60:b6:08:12:56:2e:1d:fa:74:75:a9:28:37:1b:d0:
61:af:b0:8b:94:4a:8f:ee:e5:64:37:dd:c7:3f:66:
f6:53:c3:4e:d9:79:1e:f7:c5:7e:fd:15:3b:eb:b2:
6f:d5:14:33:bd:64:dd:46:c7:02:ba:4a:10:89:85:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:16:06:2C:82:BA:20:6E:28:23:8D:D0:38:BC:00:5B:C8:7B:68
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b7:57:6b:a9:4d:f6:14:8b:57:fd:b5:06:36:a0:22:b0:ac:
17:3d:e6:fe:65:8f:03:48:a1:5b:ae:9d:ef:6b:96:cc:2a:0a:
8c:07:5f:3f:49:2a:28:1e:4f:31:88:07:15:43:a8:8a:8e:6e:
6c:01:85:1a:77:df:03:f9:1e:58:52:f8:ec:fa:b9:32:a2:32:
5c:ed:73:45:b8:30:40:7b:75:a2:9a:9a:a1:92:ab:ea:0d:4c:
4f:55:1a:9a:f2:01:c2:41:99:2e:c0:7a:6c:93:3c:47:07:98:
c8:f7:34:52:51:81:2c:51:6a:0a:96:0b:26:39:29:8f:45:43:
a1:e3:db:8f:82:23:7f:84:6d:2c:7a:83:3f:13:34:d3:4a:a9:
66:f4:96:d7:e4:f7:58:aa:0f:b4:4f:7f:1e:52:b3:b3:ff:ec:
23:e5:f6:49:25:04:a2:b3:f4:70:06:13:2d:08:c4:0b:fc:ce:
ac:c4:72:fd:fa:df:90:e0:f0:9d:12:89:85:54:14:5d:90:b4:
48:5e:ba:8f:ad:c8:68:8a:fb:7a:b0:44:4e:69:4d:aa:92:4b:
0b:10:98:fc:7c:fa:1b:61:ff:6c:13:25:e5:fc:4e:b6:e8:9d:
d7:2d:aa:de:eb:a1:9b:f7:72:c2:96:b4:f1:90:80:a8:cd:67:
df:23:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:55 2025 by rpki-client