Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier: 8l6DFqn9BxBZZK+foYwonCfU189pk4XGHQnebzqGBWI=
Subject key identifier: 4C:46:5D:EA:E0:09:8E:CB:BC:54:88:DD:AD:CF:DB:D6:20:D4:E0:34
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 01992F36E0E6D7204E4DB132028C3C9EA17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number: 1604
Signing time: Tue 09 Sep 2025 16:02:29 +0000
Manifest this update: Tue 09 Sep 2025 16:02:29 +0000
Manifest next update: Wed 10 Sep 2025 16:02:29 +0000
Files and hashes: 1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=)
2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=)
3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=)
4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: ffijq8tuF1derzw23tant92xQbsIXS3fjyttEH4D2dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:e0:e6:d7:20:4e:4d:b1:32:02:8c:3c:9e:a1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Sep 9 16:02:29 2025 GMT
Not After : Sep 10 16:02:29 2025 GMT
Subject: CN=4c465deae0098ecbbc5488ddadcfdbd620d4e034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:78:aa:47:88:11:b6:8f:f4:c2:7d:9c:8b:
29:b5:7f:2c:a3:25:76:83:8b:e2:33:25:61:3f:1d:
16:a2:c4:e1:0f:10:fb:3b:bc:59:e7:a5:fe:48:8b:
d4:ee:49:c3:b1:63:80:f3:93:c3:d8:1b:14:4e:18:
e1:b9:3b:20:4b:24:c9:a0:9e:2f:3b:36:25:26:e3:
39:31:a8:80:f3:b8:48:45:ab:f0:db:37:6f:b8:33:
6f:92:e4:ee:ef:93:f9:36:fa:e4:b2:dd:6e:0d:f1:
6f:83:4a:0f:38:44:0f:20:bd:fb:b2:df:f5:d7:80:
dd:c3:aa:03:e1:cf:8c:25:81:7a:65:c3:27:b6:94:
9c:2c:13:03:dc:2a:9e:57:4e:a2:00:f5:c2:c7:6e:
07:b5:a6:03:3d:65:9b:9d:1f:d4:7c:34:f9:0b:bf:
1a:6a:dd:58:30:a0:2a:5d:4f:30:59:31:39:3b:4e:
6e:a0:fb:f0:85:f9:07:e7:25:a0:91:f5:3f:45:92:
5a:ee:79:80:cb:a8:6c:e3:a8:e9:eb:f6:fd:c9:85:
9e:3c:b3:49:82:6f:3b:4f:21:dc:43:3f:b4:76:69:
a8:de:13:a0:f2:95:35:d9:73:dd:f9:53:f3:63:e2:
05:d4:39:ce:a6:1c:f9:4b:b1:fa:84:ed:5e:af:2a:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:5D:EA:E0:09:8E:CB:BC:54:88:DD:AD:CF:DB:D6:20:D4:E0:34
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a0:83:c4:70:01:30:6d:20:8a:06:5a:2a:cf:44:43:93:0b:
a4:f0:72:21:dc:d0:25:bf:c3:d0:21:1a:ec:c0:13:27:51:53:
26:c1:f8:53:0f:be:d2:e4:b6:6e:24:7d:c7:4c:1a:0d:01:29:
cb:fe:03:72:85:5c:a4:0e:2b:82:cc:cc:67:83:5b:0e:bd:0f:
f8:82:84:0d:c3:2a:b0:c4:7a:fb:ff:19:8c:79:c0:ed:59:7d:
45:5c:5d:51:c2:c2:8e:14:02:5b:84:1e:f5:19:bb:ec:15:f3:
5c:7e:90:c4:91:a8:07:39:19:e2:03:dd:49:bc:2b:67:9e:fd:
88:02:5c:75:8b:9a:92:ed:30:29:c5:70:96:4d:65:81:fc:29:
ab:f5:65:4b:55:3a:50:8d:bb:c2:24:dc:24:8c:e3:e7:7f:ff:
61:c1:8f:28:5a:6d:38:b8:69:e9:96:90:e6:35:16:e9:7d:d4:
e6:b8:49:be:5d:9b:4a:0b:30:a4:f9:87:d2:1f:57:f4:48:3b:
71:ee:ec:8a:39:f5:55:69:c1:1e:b8:f6:28:5e:00:53:a2:b3:
a1:71:11:fd:75:37:65:16:e1:11:f7:6d:60:33:b3:09:9c:e1:
cd:1d:98:4b:e9:62:4d:37:36:9f:ee:e8:c0:30:a9:28:1b:bd:
65:71:48:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:43:21 2025 by rpki-client