
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier: 9mnIeMIPnnAcpiIC+WgQCOx7OW3yeLhphmmwAlFc/E4=
Subject key identifier: 94:3B:88:FB:0D:BF:AF:D5:44:73:78:C5:C6:04:39:F6:FF:67:51:63
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial: 0199228CD51AEA9FAFF285942DEEEE77837C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number: 057F
Signing time: Sun 07 Sep 2025 05:01:18 +0000
Manifest this update: Sun 07 Sep 2025 05:01:18 +0000
Manifest next update: Mon 08 Sep 2025 05:01:18 +0000
Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: CpMtLbmtbbOF9YaQkPa6xPMdjpDQL0KrCeCCjB/bvRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d5:1a:ea:9f:af:f2:85:94:2d:ee:ee:77:83:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Validity
Not Before: Sep 7 05:01:18 2025 GMT
Not After : Sep 8 05:01:18 2025 GMT
Subject: CN=943b88fb0dbfafd5447378c5c60439f6ff675163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:d6:fc:42:8c:c7:f3:52:98:d0:fa:8f:84:
21:95:30:8d:9a:29:00:ee:98:97:a4:e9:c5:a5:94:
09:ee:7c:f3:69:2f:6a:fb:b3:fc:6d:b0:4d:b4:a7:
69:92:ac:8a:6a:ef:26:10:78:9a:61:39:ad:01:66:
19:7e:a0:dd:78:51:31:a4:ed:ef:f7:8b:71:2f:82:
b7:16:d9:7b:43:9a:d4:c9:69:14:ae:4c:28:b9:52:
69:bf:5a:5e:da:52:3d:e5:16:32:7a:a6:76:24:f4:
81:d7:08:38:be:79:50:53:ff:40:3d:69:a5:f7:1c:
7c:13:75:7e:64:06:a1:1a:ef:56:6b:42:f1:37:62:
9d:8e:09:a0:0d:91:bd:64:14:c1:0e:55:d4:f8:b6:
ed:7d:0f:e4:23:27:11:a2:4a:be:48:e5:cf:df:92:
97:64:c0:85:f5:e7:b3:7e:b0:47:74:4f:85:f6:43:
45:d4:80:52:df:d6:46:ef:d7:6d:fe:24:ac:3b:e9:
8b:ba:8d:37:9b:c4:0c:a4:77:e5:70:07:02:cb:df:
62:6c:d1:2e:60:6d:c5:1c:28:c1:c0:12:75:a9:9b:
de:c2:9c:1e:26:f9:1c:3e:2f:cd:67:a6:e1:08:dd:
0b:16:c3:4b:69:d1:86:43:44:f5:9f:40:a1:04:c1:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:88:FB:0D:BF:AF:D5:44:73:78:C5:C6:04:39:F6:FF:67:51:63
X509v3 Authority Key Identifier:
keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:63:63:eb:17:a4:2a:56:4b:ef:f1:61:17:71:eb:37:cd:
18:77:0c:9c:36:43:be:77:f1:51:5f:cd:c1:d3:a3:f6:97:37:
4e:cf:53:6d:c8:54:ee:5c:34:09:b7:88:15:63:10:61:29:63:
4c:04:fa:9e:ee:b6:75:5e:26:bf:3d:21:45:5d:21:8c:c9:87:
33:41:a4:9d:39:03:72:01:10:f2:9d:ff:4c:fe:e7:82:73:39:
bd:8d:6b:87:c5:eb:43:0d:96:c8:54:83:79:f8:19:0e:61:7d:
5f:c2:33:7a:fc:1d:48:e0:9a:e8:51:2c:b7:96:74:e3:2b:af:
5d:f8:d0:25:a5:38:30:c7:53:54:2e:f2:36:63:c0:7a:c3:68:
9d:59:c6:9d:e8:75:aa:88:cb:6f:0d:2b:f2:6a:24:79:4e:54:
1c:4b:d9:3e:5f:5d:a8:50:b9:52:46:35:88:b4:80:69:66:35:
41:63:48:95:24:f1:ec:c3:7f:ca:5c:3e:53:01:56:88:4d:3c:
b2:3e:43:18:ab:5d:b5:aa:5e:5e:ac:80:a3:e6:d3:56:b7:9b:
f2:55:69:dd:14:4b:21:3f:51:72:97:dc:19:6e:c6:5e:ae:18:
1b:d6:ea:f0:7e:68:d1:d5:cd:f6:ac:65:41:e4:64:d7:da:d5:
de:30:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:49 2025 by rpki-client