Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier: CE7+Vh0bcQoe4uWjNfZ/H2Za6cT4tz6fcL/HLwl/KY0=
Subject key identifier: 92:D9:EE:D8:F9:7F:C6:5D:D9:CD:D7:F7:A6:93:27:F4:65:52:48:46
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial: 0197477A0A8DBB499C45809E99F46859D829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number: 0489
Signing time: Fri 06 Jun 2025 23:01:09 +0000
Manifest this update: Fri 06 Jun 2025 23:01:09 +0000
Manifest next update: Sat 07 Jun 2025 23:01:09 +0000
Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: Z7EmSGJCpNUqNIIpYhEQOwXAC85TzakfGfFoOId0E+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:0a:8d:bb:49:9c:45:80:9e:99:f4:68:59:d8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Validity
Not Before: Jun 6 23:01:09 2025 GMT
Not After : Jun 7 23:01:09 2025 GMT
Subject: CN=92d9eed8f97fc65dd9cdd7f7a69327f465524846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:e4:49:73:53:bc:33:d7:48:0b:59:2a:22:
33:5e:71:bc:ab:6a:30:e3:bf:b8:dc:73:a5:59:2b:
0f:68:72:1e:3c:2a:63:ee:ae:12:00:94:3a:3f:6b:
93:08:d3:04:6c:d9:be:19:67:cc:69:1d:7b:9f:2b:
2b:aa:61:64:b9:6a:29:09:e9:87:e0:38:45:67:ad:
82:36:ee:82:b7:66:cb:b2:02:84:1f:c3:a7:e4:ea:
4d:eb:b2:0b:21:a5:ec:12:4e:6e:4c:65:e5:90:2b:
c1:c5:ef:aa:32:67:03:d7:99:d5:6b:e7:29:e8:c3:
6c:3a:ea:6f:a5:dc:a7:b8:33:95:14:de:2a:da:b3:
1e:03:47:6a:bc:6e:b8:94:78:03:41:aa:a6:c5:27:
e5:e1:c6:a6:e3:7f:0c:ca:5a:a6:a6:d7:a6:b7:37:
95:1e:03:9a:92:f0:4b:15:4a:1c:72:91:ec:c9:b5:
c3:61:79:6e:f9:7b:52:a3:66:20:54:7f:f7:80:c8:
5c:28:52:ad:1e:62:e1:8d:c9:d4:54:50:44:44:86:
cd:42:5e:fb:30:38:0a:aa:66:db:65:b0:64:0a:fe:
05:51:f6:6e:fe:bb:8f:81:1f:59:40:4c:bf:aa:eb:
64:2a:f6:18:0a:25:7f:8b:30:10:f5:04:ed:42:51:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:EE:D8:F9:7F:C6:5D:D9:CD:D7:F7:A6:93:27:F4:65:52:48:46
X509v3 Authority Key Identifier:
keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f6:c0:e1:3c:23:ed:5f:22:a6:03:28:0e:49:f7:53:71:bd:
62:e6:10:3a:70:bd:0b:8f:7d:1f:8f:77:00:8d:58:16:3e:b8:
de:f4:cc:01:39:8e:d2:07:4a:65:82:a9:f8:ce:16:6c:94:9b:
9e:cb:50:2a:4b:b6:2e:41:9c:31:aa:17:c8:98:96:ac:02:2c:
d7:cc:17:14:65:39:8f:14:f2:71:62:c8:3b:be:a1:b4:5f:ff:
29:2a:9a:e0:27:a9:a5:17:e0:c8:43:7e:cc:cf:aa:36:14:50:
ad:55:9c:c8:70:9f:c8:e7:2a:34:7d:dc:35:e2:8c:81:c0:5f:
78:81:e7:62:bf:52:01:a6:76:36:1a:f3:0d:17:34:df:b3:48:
83:81:c5:0b:4d:2a:ec:52:53:5a:a3:5d:f9:3a:ee:0d:ce:fd:
3c:fb:bf:fa:ea:13:eb:e5:9f:3b:e1:ec:b0:75:d3:cd:ff:b7:
46:48:99:da:09:17:ab:6f:3d:94:af:67:eb:8f:f3:59:52:e8:
24:e1:f1:5f:f7:af:34:fc:3e:f6:c0:ad:79:e6:aa:26:17:2e:
06:51:6e:42:ad:78:4b:7b:72:e8:d4:2a:8a:2c:5a:3b:34:81:
9b:67:a4:80:2b:a6:54:a7:6b:06:4b:61:60:79:cb:a3:bc:c5:
96:4e:69:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHegqNu0mcRYCemfRoWdgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOWMwOGJmMjFjN2Y1OTg4NWJiNWE2ZDQ4MWZmYzMwNjc5
NjlhMTkwHhcNMjUwNjA2MjMwMTA5WhcNMjUwNjA3MjMwMTA5WjAzMTEwLwYDVQQD
Eyg5MmQ5ZWVkOGY5N2ZjNjVkZDljZGQ3ZjdhNjkzMjdmNDY1NTI0ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAjkSXNTvDPXSAtZKiIzXnG8q2ow
47+43HOlWSsPaHIePCpj7q4SAJQ6P2uTCNMEbNm+GWfMaR17nysrqmFkuWopCemH
4DhFZ62CNu6Ct2bLsgKEH8On5OpN67ILIaXsEk5uTGXlkCvBxe+qMmcD15nVa+cp
6MNsOupvpdynuDOVFN4q2rMeA0dqvG64lHgDQaqmxSfl4cam438MylqmptemtzeV
HgOakvBLFUoccpHsybXDYXlu+XtSo2YgVH/3gMhcKFKtHmLhjcnUVFBERIbNQl77
MDgKqmbbZbBkCv4FUfZu/ruPgR9ZQEy/qutkKvYYCiV/izAQ9QTtQlFCawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLZ7tj5f8Zd2c3X96aTJ/RlUkhGMB8GA1UdIwQY
MBaAFCycCL8hx/WYhbtabUgf/DBnlpoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMDk1NTgtNDMxOS00NmMwLTlhYjIt
MTJlYTEwNzE0YTU2LzEvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xMDk1NTgtNDMxOS00NmMwLTlhYjItMTJlYTEwNzE0YTU2
LzEvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvbA4Twj
7V8ipgMoDkn3U3G9YuYQOnC9C499H493AI1YFj643vTMATmO0gdKZYKp+M4WbJSb
nstQKku2LkGcMaoXyJiWrAIs18wXFGU5jxTycWLIO76htF//KSqa4CeppRfgyEN+
zM+qNhRQrVWcyHCfyOcqNH3cNeKMgcBfeIHnYr9SAaZ2NhrzDRc037NIg4HFC00q
7FJTWqNd+TruDc79PPu/+uoT6+WfO+HssHXTzf+3RkiZ2gkXq289lK9n64/zWVLo
JOHxX/evNPw+9sCteeaqJhcuBlFuQq14S3ty6NQqiixaOzSBm2ekgCumVKdrBkth
YHnLo7zFlk5p7A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:02:28 2025 by rpki-client