Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: EoUhG31ohs86LQaSiMNZdNOjO1q6XOa7KXqluusw6BE=
Subject key identifier: 41:D1:1E:9D:FB:6E:90:37:27:5D:FA:4A:81:21:B9:E1:1C:2A:2D:28
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 0197488CF60003621F22CF60FED4707D1B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 133C
Signing time: Sat 07 Jun 2025 04:01:26 +0000
Manifest this update: Sat 07 Jun 2025 04:01:26 +0000
Manifest next update: Sun 08 Jun 2025 04:01:26 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: zn+lYm3Ec++fsU4tXroLi0PASZnyyHHF/sKITAoIR3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f6:00:03:62:1f:22:cf:60:fe:d4:70:7d:1b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Jun 7 04:01:26 2025 GMT
Not After : Jun 8 04:01:26 2025 GMT
Subject: CN=41d11e9dfb6e9037275dfa4a8121b9e11c2a2d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:c1:ba:31:09:2c:40:bb:24:60:47:e4:3a:
e4:8f:df:41:bb:41:56:d8:b7:5a:10:85:8d:ed:84:
4b:12:5f:11:a4:99:bb:e4:15:b8:fd:ca:35:e9:4f:
2c:86:00:87:69:03:61:c7:0f:c5:80:8d:db:30:a7:
d8:ce:1f:d8:31:4d:15:0c:ee:ed:83:e9:7f:e0:6c:
f8:91:49:45:08:6f:64:df:1d:56:27:11:91:f0:de:
19:3c:ba:9b:19:cb:eb:f7:de:fe:d5:da:20:c1:9d:
59:ad:53:fa:c5:cf:2b:98:38:54:7c:17:e7:80:9f:
5f:18:a6:3e:fe:94:62:6d:b6:56:77:1d:dc:9a:d9:
e3:4e:f5:f2:72:0e:42:28:88:1d:e8:3a:ab:9e:ea:
66:fa:0e:6f:b6:39:17:f2:49:8a:e9:2f:5e:06:75:
d1:45:00:ac:72:c5:0f:ac:10:27:98:85:ce:de:e5:
72:10:fe:2e:12:3e:f5:c2:9b:29:e7:1a:1a:e8:fd:
fa:c3:45:3e:a2:bc:1a:f4:5c:32:d2:f9:84:ec:e1:
6b:c2:28:9c:8c:b3:37:af:6f:8d:f1:9a:7d:37:e7:
e7:27:47:06:9d:8a:46:38:1e:59:97:5c:5a:c8:77:
12:4c:b5:03:bb:49:71:b3:c6:2b:0c:09:57:bc:6d:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:1E:9D:FB:6E:90:37:27:5D:FA:4A:81:21:B9:E1:1C:2A:2D:28
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:29:b8:55:a7:8c:b4:dc:7b:aa:ec:fd:c7:15:b0:68:01:42:
96:4a:ca:d3:6a:fa:13:1b:07:95:84:d9:90:d6:c6:3d:9f:30:
05:51:1a:5a:82:c5:fb:b9:b2:0f:98:76:e9:63:84:f3:92:64:
f2:d0:cf:44:cf:85:b2:93:d0:6d:85:c0:60:17:b9:4f:d7:08:
0a:1a:ee:44:fe:df:9c:26:05:76:46:07:a2:9f:2b:3e:26:5d:
cf:e6:f5:5a:a4:08:8e:09:03:5e:c0:a1:83:38:9f:69:73:ab:
87:65:47:13:4b:5c:b5:38:ec:56:b1:fa:01:8a:42:c3:dc:e5:
8b:87:f9:7f:a3:ce:66:03:c1:3a:35:f2:1a:26:9d:3f:3f:6e:
47:7f:5c:cd:30:d6:26:78:7a:51:3b:d6:b4:3c:96:8b:c1:50:
db:3d:c9:c5:28:21:2c:a8:50:1c:59:a8:ad:fa:03:b3:eb:31:
d3:a1:8c:a2:b0:32:f8:1c:0a:40:62:64:d6:ab:7b:08:5c:78:
fb:e5:84:d0:fb:6c:c5:10:cb:51:47:db:7c:bc:e1:fe:76:31:
21:c6:be:cf:c0:36:2f:4f:97:c5:f3:2f:69:d9:0e:9c:a2:b1:
b5:60:87:c4:a4:a0:5a:38:6f:4b:a8:f2:53:31:fc:31:4f:f1:
1d:a2:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:54:03 2025 by rpki-client