Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier: u9x+Ve26bMQzTphYQErZsGbbrP4YJZF1Nv4qGxcJASY=
Subject key identifier: 47:05:A9:B0:C4:52:81:9A:01:FF:DD:9C:83:1A:3B:DC:7F:7B:53:05
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial: 01984589B4BC134E214B96FF7358A510466C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number: 0A78
Signing time: Sat 26 Jul 2025 07:01:49 +0000
Manifest this update: Sat 26 Jul 2025 07:01:49 +0000
Manifest next update: Sun 27 Jul 2025 07:01:49 +0000
Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: 1DQvLY1gqXE5jI90txA5a1FJBDf9vrh8mPjHrn9BOG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:b4:bc:13:4e:21:4b:96:ff:73:58:a5:10:46:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Validity
Not Before: Jul 26 07:01:49 2025 GMT
Not After : Jul 27 07:01:49 2025 GMT
Subject: CN=4705a9b0c452819a01ffdd9c831a3bdc7f7b5305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:d9:41:d8:15:19:99:32:0b:5a:ba:9d:20:
bc:6b:12:3c:30:f6:d2:a1:75:44:7d:75:dd:28:56:
f2:d5:de:f4:53:a7:6e:bd:a4:b5:59:1f:8a:9b:0d:
4b:9e:dc:33:73:17:fc:38:1e:d3:dc:46:94:f6:54:
ad:2a:af:4b:f4:72:bc:b9:49:34:25:17:f8:eb:e1:
68:12:4b:27:a2:b6:b4:78:b5:91:87:23:17:b5:fa:
3b:bb:3d:a4:f1:b1:22:1c:55:3f:24:23:31:2f:6b:
fa:0b:b0:2a:8a:92:c8:b5:c0:59:87:8e:32:fc:81:
d7:8f:1f:37:35:e7:2a:e3:e8:c4:31:26:14:fb:e5:
e6:2b:cb:06:65:b9:82:c6:82:52:cb:17:93:88:22:
07:69:28:ca:82:c9:fb:e0:14:43:0e:79:0f:89:31:
72:fd:d9:98:59:b5:2d:a1:49:26:63:0f:18:4d:db:
9c:9f:8f:95:93:b4:89:73:ae:13:51:7c:e3:05:b6:
55:31:8e:00:ec:dd:c7:77:b5:4d:31:27:b3:18:33:
34:45:63:ec:68:62:e8:4e:f1:d8:77:a5:a5:2c:1c:
97:5c:40:e5:3d:87:4c:56:02:eb:4a:db:cc:a2:48:
0c:8c:a2:4b:45:35:8c:d8:3e:9c:a2:49:2e:0b:93:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:A9:B0:C4:52:81:9A:01:FF:DD:9C:83:1A:3B:DC:7F:7B:53:05
X509v3 Authority Key Identifier:
keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:28:3d:ab:8f:47:39:09:eb:ed:75:78:0b:32:69:11:22:44:
9d:c4:bc:03:cd:6e:d0:7b:70:10:87:90:c3:ab:1f:3f:1d:80:
f0:07:ef:a5:6f:5f:c8:f2:df:67:db:dd:c3:e7:3a:cb:d8:e2:
7c:07:c6:b9:b3:d0:8c:6b:71:c1:41:3e:f9:8b:d6:f3:98:3b:
bd:a3:79:ff:18:68:de:7a:34:42:2e:1d:21:04:a2:35:2e:86:
96:7e:19:4f:1a:99:30:4b:5c:eb:14:62:c4:e2:17:e4:38:d9:
7a:1e:49:a2:e3:cc:68:37:5b:76:c5:a6:ac:9d:32:02:49:14:
7c:93:cb:0d:ff:a1:f0:f1:15:22:20:dc:0f:a8:78:f7:51:18:
e1:30:1c:d3:2e:47:04:6d:97:35:fe:cc:90:2b:1a:4e:24:a5:
3a:52:45:ea:ef:76:4b:75:cf:d3:eb:2c:88:e2:d0:7a:11:ac:
f5:55:9a:c0:cc:d4:7d:a7:0b:f6:d8:6a:8a:5b:15:79:24:61:
90:0a:5f:f3:a3:33:df:0f:d4:65:44:42:b1:3b:df:f0:c4:53:
4b:60:bc:61:97:88:d0:b3:40:8c:56:cc:bb:e7:37:76:bb:51:
96:b4:fe:1c:61:8f:60:d8:25:dc:d0:23:c2:bc:c4:96:3b:00:
3e:87:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:13:57 2025 by rpki-client