Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json)
Hash identifier: d4G+lkamln3XFQPmm22I+gxCaQaXH4ncGEe7+sWC1J0=
Subject key identifier: A7:E4:07:09:D6:48:DE:26:17:4A:56:C4:E3:B6:3D:63:C9:BC:67:DB
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0199530AB533147C832333BE6F952B09066B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
Manifest number: 0E9B
Signing time: Tue 16 Sep 2025 15:00:34 +0000
Manifest this update: Tue 16 Sep 2025 15:00:34 +0000
Manifest next update: Wed 17 Sep 2025 15:00:34 +0000
Files and hashes: 1: 8gg7kQMVPMp5CW_2Zh8YAWMAQ5w.roa (hash: f3wtA4WN/DWLyQp37wYwvHxSkXSyAaxvA1pdEj3pPLE=)
2: Icbwhc8S4XsUNrA3DAVlOZ_S-dI.roa (hash: KivdxCjSWzKBuTPXWGtW7RGejxkaq7uv1LCmzlsIUeA=)
3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: obdlGuSHceTwMahsFeKvUXl/upKi2OV/Mt2nKvwHzvs=)
4: MjFS6dB7OMbfF7YRvnb57-2T17g.roa (hash: H5eKU5P15YBVQ9g0o2US0fKUyvY/W21Aot95Lw/6/co=)
5: V3nOHEnCJP-Y80iAPhFlmBROCqE.roa (hash: u4LP1rpbwcMhaXZxdRjmUDhrY5qRbzrSLpn+2r2q6YI=)
6: ZdB9xKTpmE5hnLIq03x2S--VZhk.roa (hash: sJNWpiCDd7rJ3H/Q1tfBrOgTL8SsbyZ5IthK8cBTE8Y=)
7: teJ51KVPIWV36Tlu6BnhXD2AUD4.roa (hash: iirQ6/n4/0a+w6plKlxP3E2dDeNQoZhhCXUm/2+ugFU=)
8: z9geQajqLX4fEuy3PNQy0IwzzgY.roa (hash: JIvL3zAmwpher+kvj+pICp4mH45/hSa/ISO69pribAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:0a:b5:33:14:7c:83:23:33:be:6f:95:2b:09:06:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Sep 16 15:00:34 2025 GMT
Not After : Sep 17 15:00:34 2025 GMT
Subject: CN=a7e40709d648de26174a56c4e3b63d63c9bc67db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:30:c9:c1:17:7a:07:1e:9b:dc:f9:38:14:
e7:2d:fa:2f:80:72:f5:1c:6d:af:2a:57:ce:51:fc:
3b:d2:c9:4c:74:ac:5c:f8:a4:3d:b3:29:a5:71:54:
fe:dd:69:40:b2:62:b5:41:af:87:a3:c7:5e:f1:d8:
1e:d7:db:25:13:de:1a:d6:70:20:cd:ef:e4:e7:e7:
16:9b:a6:39:17:8e:00:be:ba:e1:35:cc:5c:c8:85:
d5:35:b1:79:18:4b:ae:ed:0f:6f:e2:74:98:f7:1a:
36:8f:2e:d7:c7:2c:17:3a:c6:4e:fa:72:4e:8b:f2:
1f:ad:6d:9c:12:b9:99:dd:77:f8:1b:65:e6:07:fd:
30:8a:68:88:a9:76:fd:1a:e4:df:cb:0d:e6:20:17:
cc:36:c1:67:09:7c:ad:91:e6:7e:40:ce:95:b0:fc:
b7:b4:89:6b:33:fc:ac:ac:10:36:a9:30:81:13:ae:
55:44:ee:6f:e3:ee:69:50:fa:68:71:41:a8:30:bc:
b7:e1:0a:27:08:a5:bd:36:c9:e3:9d:a0:30:80:a8:
78:b1:75:47:75:5f:e4:4a:1c:01:5e:3d:80:ac:cb:
f9:85:b7:70:c0:af:49:b4:54:73:16:67:48:94:84:
ae:0e:44:24:b7:e5:84:61:3e:27:10:36:75:4b:80:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E4:07:09:D6:48:DE:26:17:4A:56:C4:E3:B6:3D:63:C9:BC:67:DB
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:4a:32:3a:5e:45:4b:fd:4b:02:a6:70:64:a9:f9:c8:9c:
9e:e1:d0:72:11:ae:8c:51:ce:5c:8c:84:a4:cd:d7:4a:20:3e:
6c:72:1c:65:82:da:f6:3f:3f:c3:d9:1b:6c:83:14:8f:47:ac:
e0:92:10:9f:36:09:fb:ce:29:7c:cc:2d:0c:90:24:93:41:23:
54:5e:73:ee:11:ca:f0:c6:6a:ba:a5:50:ad:ba:2c:fe:f7:02:
79:23:1e:2b:2f:bc:25:1e:b0:e2:63:ed:6f:ce:11:d3:42:f3:
0c:99:8c:70:3c:01:7e:31:aa:eb:6b:a3:2b:61:05:4a:83:87:
c6:34:ce:56:63:05:f7:e2:ff:bf:86:88:cf:15:fc:0b:82:2f:
92:3a:38:c6:3c:e6:d6:e8:33:07:51:46:f6:9d:1f:a6:d9:15:
be:fd:b1:e4:ca:34:98:86:ce:64:6e:c9:8e:42:be:62:a5:9f:
95:77:9a:e8:7b:f8:d9:76:7a:56:a5:47:44:29:68:ba:74:13:
c0:86:c0:db:67:fc:26:9c:66:08:8b:e1:76:a5:90:d1:bc:ff:
2b:a8:9e:3b:55:34:2f:b3:bc:e8:0a:6f:14:4a:4a:1f:46:ee:
f5:03:4f:5e:e1:35:63:3c:d4:56:6f:a6:fc:f7:82:99:a4:48:
db:76:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:17:02 2025 by rpki-client