Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
File: LijWjfjYqxVZsR5zmeYu3DMjyj0.mft (raw, json)
Hash identifier: ns7EJIScg6HkQZMdrlQG/6cQT8mAObzbwTAVSCSl8wM=
Subject key identifier: 61:DA:14:BD:A1:26:A8:D3:0C:BD:21:F6:BD:5D:26:34:8A:2C:F9:63
Authority key identifier: 2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
Certificate issuer: /CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Certificate serial: 019922C38AD5E6601FE293A8739E554AD9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
Manifest number: 0343
Signing time: Sun 07 Sep 2025 06:01:04 +0000
Manifest this update: Sun 07 Sep 2025 06:01:04 +0000
Manifest next update: Mon 08 Sep 2025 06:01:04 +0000
Files and hashes: 1: LijWjfjYqxVZsR5zmeYu3DMjyj0.crl (hash: 0S8LG3nLtOKHI72aLkXmkkzST4l2byJalN2+EK53XTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8a:d5:e6:60:1f:e2:93:a8:73:9e:55:4a:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Validity
Not Before: Sep 7 06:01:04 2025 GMT
Not After : Sep 8 06:01:04 2025 GMT
Subject: CN=61da14bda126a8d30cbd21f6bd5d26348a2cf963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:bb:c2:f0:2b:f6:b4:6c:b7:c9:9c:43:6e:
2d:12:9b:ab:a2:a2:11:73:2d:d0:00:96:d3:92:95:
eb:ce:f8:59:9e:ee:f1:ed:58:c2:04:a6:93:66:40:
99:a3:6c:d7:2b:4b:96:1c:9a:89:e6:a9:5a:0e:14:
43:26:1e:cd:a6:91:3e:57:54:64:7a:e5:57:91:a3:
ee:1d:43:eb:3d:b3:21:61:6f:bd:12:24:da:97:83:
37:2e:e4:1d:56:52:f0:28:11:78:b1:ec:35:67:b4:
e4:d8:2b:9a:f6:e1:fe:0a:79:7e:11:ab:90:9d:31:
5c:78:18:7f:96:d0:12:2e:c3:a8:e8:ac:da:d2:29:
04:9a:32:3c:60:df:af:6b:26:59:99:23:d0:6b:e3:
68:0a:28:31:e8:9c:ec:cd:99:ff:c7:b9:18:65:32:
99:e4:69:11:cb:6c:b5:92:93:5b:0b:2d:58:bf:c1:
70:84:4a:41:04:67:02:e8:46:61:43:80:71:d0:ae:
b0:51:e1:86:b2:9e:bb:a6:5f:1b:ae:d7:44:96:4c:
15:bb:52:3d:13:c7:c5:cd:de:3c:31:d7:c0:fc:a0:
dc:54:8c:9c:39:9a:d1:7c:5d:ce:5a:6a:ad:5c:eb:
d0:21:03:d9:4e:c8:8f:f6:54:d3:26:5f:19:6a:80:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:14:BD:A1:26:A8:D3:0C:BD:21:F6:BD:5D:26:34:8A:2C:F9:63
X509v3 Authority Key Identifier:
keyid:2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:d1:15:df:a5:35:75:9c:c0:11:b7:49:86:93:f3:89:ca:
f6:d7:29:93:2d:1a:6a:83:ef:35:c4:e4:62:15:71:f9:dc:76:
ed:ba:39:f0:a6:96:d3:9a:c4:87:16:5c:dd:f2:7f:88:90:ed:
9c:76:a0:e2:93:ef:28:bc:85:a7:f4:55:21:53:7e:7e:0e:38:
0d:90:17:65:5c:32:97:d6:e7:1d:cc:08:87:28:57:75:fe:65:
55:1f:09:f3:f8:c9:00:81:58:bd:22:43:b9:7a:72:89:f6:5d:
43:7d:b9:55:6d:d8:b4:64:d1:c9:f7:95:e8:cd:6a:1c:c5:f8:
0c:19:50:dd:d9:5b:30:61:e7:d0:da:15:eb:6b:00:d8:5d:a3:
28:7f:dc:8b:8e:e7:77:28:fc:de:d1:61:90:8c:fa:29:5b:b7:
49:42:fb:e2:4e:f8:cb:be:1b:0e:2f:94:2c:f0:80:2e:06:4a:
92:07:9e:ac:7b:49:8f:46:61:a4:a3:4e:b8:4a:f9:35:d7:5c:
1e:ed:20:2e:d8:6b:7b:d5:8b:b8:4e:2d:82:9a:4a:98:9b:29:
fd:5b:c6:b8:2e:f9:18:cc:de:a9:48:4d:54:f0:f4:f8:3a:fd:
98:3b:e6:ae:c5:05:ed:25:6c:08:40:a3:bd:0a:16:1c:c8:b4:
02:3a:5b:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw4rV5mAf4pOoc55VStnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjhkNjhkZjhkOGFiMTU1OWIxMWU3Mzk5ZTYyZWRjMzMy
M2NhM2QwHhcNMjUwOTA3MDYwMTA0WhcNMjUwOTA4MDYwMTA0WjAzMTEwLwYDVQQD
Eyg2MWRhMTRiZGExMjZhOGQzMGNiZDIxZjZiZDVkMjYzNDhhMmNmOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHi7wvAr9rRst8mcQ24tEpuroqIR
cy3QAJbTkpXrzvhZnu7x7VjCBKaTZkCZo2zXK0uWHJqJ5qlaDhRDJh7NppE+V1Rk
euVXkaPuHUPrPbMhYW+9EiTal4M3LuQdVlLwKBF4sew1Z7Tk2Cua9uH+Cnl+EauQ
nTFceBh/ltASLsOo6Kza0ikEmjI8YN+vayZZmSPQa+NoCigx6JzszZn/x7kYZTKZ
5GkRy2y1kpNbCy1Yv8FwhEpBBGcC6EZhQ4Bx0K6wUeGGsp67pl8brtdElkwVu1I9
E8fFzd48MdfA/KDcVIycOZrRfF3OWmqtXOvQIQPZTsiP9lTTJl8ZaoB7HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHaFL2hJqjTDL0h9r1dJjSKLPljMB8GA1UdIwQY
MBaAFC4o1o342KsVWbEec5nmLtwzI8o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlqV2pmallxeFZac1I1em1lWXUzRE1qeWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85OTE4MjUtZDRiZi00OGM2LTk0OTMt
MzhjZmVjMjFiNDIyLzEvTGlqV2pmallxeFZac1I1em1lWXUzRE1qeWowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85OTE4MjUtZDRiZi00OGM2LTk0OTMtMzhjZmVjMjFiNDIy
LzEvTGlqV2pmallxeFZac1I1em1lWXUzRE1qeWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQnRFd+l
NXWcwBG3SYaT84nK9tcpky0aaoPvNcTkYhVx+dx27bo58KaW05rEhxZc3fJ/iJDt
nHag4pPvKLyFp/RVIVN+fg44DZAXZVwyl9bnHcwIhyhXdf5lVR8J8/jJAIFYvSJD
uXpyifZdQ325VW3YtGTRyfeV6M1qHMX4DBlQ3dlbMGHn0NoV62sA2F2jKH/ci47n
dyj83tFhkIz6KVu3SUL74k74y74bDi+ULPCALgZKkgeerHtJj0ZhpKNOuEr5Nddc
Hu0gLthre9WLuE4tgppKmJsp/VvGuC75GMzeqUhNVPD0+Dr9mDvmrsUF7SVsCECj
vQoWHMi0Ajpbew==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:08 2025 by rpki-client