Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: mUAElomDDPjij0RDvuGZwz/vgVQhyHryDPWQ7kpR+IY=
Subject key identifier: 38:8C:27:49:5A:A8:0C:99:1F:53:3D:7F:70:11:F3:14:8D:7B:0A:DA
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 019A71B97DC9547896678AFE1F1FB10C299D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 05FD
Signing time: Tue 11 Nov 2025 07:02:53 +0000
Manifest this update: Tue 11 Nov 2025 07:02:53 +0000
Manifest next update: Wed 12 Nov 2025 07:02:53 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: XeX9KL+jm3liBog6k20v8F9zji8Bdl1Ud3VMVbwph/Q=)
2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:7d:c9:54:78:96:67:8a:fe:1f:1f:b1:0c:29:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Nov 11 07:02:53 2025 GMT
Not After : Nov 12 07:02:53 2025 GMT
Subject: CN=388c27495aa80c991f533d7f7011f3148d7b0ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:fa:b2:9e:e2:10:79:7a:b6:4a:14:ad:fd:
5f:0f:f5:5a:c4:52:78:58:e8:b2:b2:99:26:44:f7:
8a:07:f3:78:4a:43:3e:6b:65:87:2b:17:92:aa:53:
91:96:f9:ed:d0:04:c6:f4:24:ec:ce:6a:50:90:be:
2f:05:2b:2c:dd:c0:46:25:3c:37:d7:0f:5f:b8:e8:
0c:3b:6a:37:ca:36:87:c7:02:19:cc:c6:58:be:62:
51:65:0d:76:24:c6:a3:c9:96:08:15:d8:07:4c:54:
d5:d2:9f:66:4e:68:27:ca:88:2f:26:06:9d:41:f8:
d8:95:aa:b6:91:42:47:55:4f:ae:d0:4f:2e:28:4e:
82:1c:b4:03:03:ed:7d:b1:fe:75:bd:69:9b:59:a1:
a2:67:ae:db:fc:5e:e9:1d:f2:4b:87:a5:f4:d0:05:
fc:f1:7e:33:da:dd:43:17:cc:35:7f:9f:c3:1c:78:
9a:08:58:c9:13:b7:ff:3c:44:d5:a5:6d:06:2e:25:
6e:ba:80:15:49:b4:43:fb:82:ad:3d:9f:27:5e:4a:
51:8a:60:04:b8:3a:41:0c:ee:95:2e:26:f8:bb:44:
9b:5e:ca:47:d1:3b:58:a4:03:d0:cb:fc:3c:68:f4:
6c:2c:d2:85:9f:fb:9c:77:91:67:a7:18:12:56:2c:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:27:49:5A:A8:0C:99:1F:53:3D:7F:70:11:F3:14:8D:7B:0A:DA
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d8:ec:06:9c:aa:39:71:7a:89:94:eb:0d:ce:81:e0:9d:14:
d2:e2:03:8f:87:be:3d:be:b7:56:8a:45:f7:52:bb:de:63:53:
d3:bf:66:6f:e8:42:21:ec:cb:83:f3:06:ae:4d:e8:6e:64:7d:
ed:b3:22:86:ba:6e:14:06:44:a8:d1:ae:17:88:52:81:4f:1e:
8a:27:9a:fc:95:65:30:99:17:2b:ba:43:29:f8:17:5c:c6:48:
1d:b8:c0:a0:f1:30:60:7a:0d:b0:f6:72:72:0f:dc:35:fa:f1:
12:3c:59:2b:58:64:e8:a9:8e:c6:03:92:32:96:cb:9b:c0:99:
d2:fe:e5:63:ae:13:c0:c1:7b:b6:1e:42:71:93:82:24:a4:06:
fc:20:2f:aa:4f:26:7f:5d:98:3a:2c:22:07:57:55:f0:74:75:
6b:61:98:33:20:3f:95:40:ea:4c:b7:2c:75:56:d5:45:49:05:
c4:4a:68:ec:58:85:4e:a2:98:bd:4b:71:f8:5b:e6:36:20:eb:
94:5f:2f:68:42:b0:a2:db:2a:8e:ae:ac:4a:df:30:d6:5d:c5:
b8:6c:f3:2e:ad:d0:49:1e:3d:21:85:81:a7:2e:5f:56:60:a7:
0b:dd:77:7c:d1:6c:1c:70:7e:07:8d:3b:03:0e:b7:bc:b9:f8:
04:6a:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:32 2025 by rpki-client