Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: 1AdBsCWAiZQykaqwy35+gWcZBoc6Zsxkb/50JBOjUWM=
Subject key identifier: BA:EE:EF:35:14:19:47:E8:71:49:24:D0:BA:AE:7B:42:C3:0B:0F:45
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 019A258A347CA452B76EE580FED25D7CEF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 1566
Signing time: Mon 27 Oct 2025 12:00:05 +0000
Manifest this update: Mon 27 Oct 2025 12:00:05 +0000
Manifest next update: Tue 28 Oct 2025 12:00:05 +0000
Files and hashes: 1: 18UiEkWgqpaCUiY-OhtgSebxhOw.roa (hash: 6gZVGHDsK6q4GdqiE+ksKEH6UAMcpQLDmBdSndAkah4=)
2: FbZfSYIH3EeQkv8qBjiOL4mkSRo.roa (hash: KvthMjiMPKXISBfRRLYFJRU4z8PyoDc7qUCgy66NG/Y=)
3: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: Z55Ocl6yIINQnjp/YD4FgGB67MtO+8gh3eahTMKcbjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:34:7c:a4:52:b7:6e:e5:80:fe:d2:5d:7c:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Oct 27 12:00:05 2025 GMT
Not After : Oct 28 12:00:05 2025 GMT
Subject: CN=baeeef35141947e8714924d0baae7b42c30b0f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:da:1e:23:f3:ff:50:cc:05:00:c9:1b:2c:
e3:4b:46:a9:9e:f1:08:9e:5b:e9:c0:cc:2b:65:2b:
9b:75:88:99:ab:54:81:a1:4a:18:44:78:3d:dd:8f:
3e:a9:c5:0d:f8:92:64:b6:69:37:04:d2:8e:f9:85:
31:9c:e4:ad:52:a3:05:4a:7b:50:36:86:2a:9c:07:
60:9f:fa:38:db:1c:7b:db:5b:f1:32:18:4c:6a:fa:
40:33:d9:00:dc:fe:bb:f0:c1:d8:29:2d:9c:ba:e3:
b2:02:a8:74:5d:30:bc:04:20:2b:57:2a:ef:eb:d0:
7c:92:5d:de:68:a8:ae:d7:47:c3:64:56:e1:fa:a7:
5e:8a:2b:f1:2e:6a:a1:b2:ac:5f:92:4f:f0:65:e2:
4f:8c:b7:8a:3c:1e:7e:24:e1:e8:7b:60:8a:10:42:
a8:39:32:12:99:c0:07:24:7b:7d:9f:6f:c5:6e:8c:
72:c4:2d:b6:4e:05:f0:8d:b9:86:cb:f7:49:7f:d7:
de:10:2b:ed:2e:d2:d6:cf:bf:48:c7:c6:0c:9b:5b:
f6:28:9f:4f:42:d9:ed:9d:33:ad:00:bf:cb:9b:2a:
b3:5e:1d:1b:74:47:bc:0d:9a:ed:fc:2c:9b:44:e7:
76:39:e6:60:f4:fd:00:02:a2:65:42:71:51:82:d8:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:EF:35:14:19:47:E8:71:49:24:D0:BA:AE:7B:42:C3:0B:0F:45
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:36:a9:0e:35:43:4c:31:db:ae:8d:8b:57:24:f8:be:8f:3a:
04:32:b6:c3:26:43:40:11:af:d1:04:28:f3:bf:59:66:51:c6:
cb:b5:cc:42:37:a9:d7:36:05:fc:15:d1:da:fd:7e:7f:09:af:
57:7c:e0:9e:30:09:70:aa:e7:6b:20:b3:95:d9:52:a7:c8:4c:
5f:b4:bb:a4:76:17:55:a6:e8:e3:20:71:a0:ac:ba:ca:6f:e9:
de:cc:fd:b6:ba:3d:22:2a:b4:fd:01:f4:37:56:45:4c:02:98:
57:51:8d:72:99:9a:40:9a:72:65:9b:00:9b:7c:db:88:b9:54:
4f:69:a4:8d:d7:60:1c:26:bf:29:07:74:d9:27:4a:a2:cd:4f:
79:8d:8b:49:ff:c7:4d:c5:61:55:f6:2c:9a:5e:4d:c2:a6:d8:
f6:e6:b0:86:67:b7:89:bc:0c:21:b8:7d:9a:60:71:04:45:49:
54:f6:b2:9e:d5:9c:c6:c7:5c:f0:21:f6:e3:90:39:63:fd:c4:
bd:83:97:dd:ee:b6:99:8c:fc:59:f6:8d:5a:2f:04:bd:c1:e7:
16:8d:3a:84:7f:fd:4f:28:a4:fb:05:25:09:cf:68:31:72:c5:
be:ee:87:18:59:89:87:45:e5:8a:85:89:b7:20:9a:f3:12:33:
88:86:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:49:49 2025 by rpki-client