Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: opvtbmHTJ+XLkffF8vGNkUbrKvhi7vVIOH1W6PRfLS4=
Subject key identifier: A1:8E:2C:F7:2F:02:1A:BD:2E:B2:46:93:23:4D:B7:01:B2:17:73:AF
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 019A209BB18F6EFB7A6A544A1FE63000C2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 14B5
Signing time: Sun 26 Oct 2025 13:01:05 +0000
Manifest this update: Sun 26 Oct 2025 13:01:05 +0000
Manifest next update: Mon 27 Oct 2025 13:01:05 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: iNGhqco8SsBjoxmPtgWXZHIEsoG1vR5ksBXhkfKBUOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:b1:8f:6e:fb:7a:6a:54:4a:1f:e6:30:00:c2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Oct 26 13:01:05 2025 GMT
Not After : Oct 27 13:01:05 2025 GMT
Subject: CN=a18e2cf72f021abd2eb24693234db701b21773af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:b1:47:0f:40:8f:95:fc:ce:3b:2d:0b:b0:
50:85:e6:d2:27:d0:98:7e:3c:e6:7c:e4:7f:aa:30:
6f:3b:f3:12:d1:90:a8:66:ae:51:58:5d:0e:67:01:
d8:69:aa:5f:11:07:62:10:e4:a4:81:fb:ed:6b:30:
6d:e7:d1:ec:a7:61:55:9f:ee:64:f0:35:5a:fb:ca:
f9:9b:af:5b:b8:6a:36:22:c0:11:de:30:20:10:8c:
9f:b4:ed:8d:be:dc:59:f1:a8:43:8e:0e:5a:d8:f4:
a2:f9:4d:5d:fe:67:68:66:a5:dc:64:95:75:38:7e:
a2:6a:29:fd:ef:25:5c:3c:b2:e6:37:9b:2b:2a:af:
73:d8:cc:e7:f7:9c:0e:ea:5f:40:b8:b8:fd:70:7e:
b1:cd:b8:c9:84:12:2f:fc:be:30:e2:df:57:26:c5:
4c:81:f0:c5:3c:7c:23:a6:e0:3d:c6:b6:03:bd:1d:
e9:90:e3:6e:ac:5b:8c:80:29:03:d1:92:25:49:89:
95:e8:bc:bc:41:92:00:6f:77:52:86:9e:f2:1a:0f:
e2:6e:50:3e:ff:f7:4d:0e:35:8d:ec:55:a4:70:75:
b8:2f:d7:03:e0:f0:2b:28:9f:a0:aa:49:7e:d8:21:
9f:6b:26:c2:22:c5:fd:64:14:a6:a6:1a:aa:c3:1e:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8E:2C:F7:2F:02:1A:BD:2E:B2:46:93:23:4D:B7:01:B2:17:73:AF
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ed:9b:11:e6:30:69:14:07:f0:81:0f:53:56:64:95:7b:f0:
6e:82:8b:5f:60:72:22:9a:b2:8c:5b:aa:54:a4:fe:e7:e5:f4:
39:a6:f9:dd:67:a6:51:1f:2f:42:98:e1:23:58:53:80:06:70:
a6:e4:0f:bb:b0:31:20:02:ee:a1:7d:ba:4d:3b:f8:81:28:f3:
59:be:2e:5c:cd:17:38:ed:f1:2b:5c:f5:52:50:4f:86:4c:0a:
8d:db:a4:83:54:dd:a1:6d:1a:6c:5b:a0:bb:28:08:ae:f3:f7:
3f:a1:d3:37:db:2a:28:35:fd:41:a0:d8:f4:16:46:1b:52:f3:
f1:e2:07:bc:de:61:24:8a:a5:08:c7:bd:05:2d:eb:0c:01:cb:
6f:fd:b7:16:2f:bc:e9:d3:66:bf:f8:c2:2e:a9:36:a2:b7:c9:
39:92:7f:b3:61:20:ee:d3:c4:44:1d:57:72:9b:ec:d9:bd:94:
97:fe:b7:fd:69:a7:f2:cd:4b:59:6c:21:71:da:2b:ab:02:3c:
5f:d3:98:c1:29:90:a4:42:6b:25:7f:8d:69:c5:0d:a6:cf:96:
24:ec:da:3a:87:9c:61:08:32:9b:63:d4:02:5d:7c:eb:a4:1a:
1b:0e:1e:e6:21:eb:4b:b3:05:d9:1f:70:3d:b3:05:15:e6:c3:
08:da:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:30:56 2025 by rpki-client