Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier: KfLZrShURD344VGLLa2Eh6EbL010oo0ln65vXPok+/M=
Subject key identifier: 84:D9:A2:26:47:DB:6F:33:47:F3:1B:A0:3E:CA:33:FF:42:87:1B:88
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 019A228A2F575DDEDC10ED9C831AE2CAF372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number: 1682
Signing time: Sun 26 Oct 2025 22:01:12 +0000
Manifest this update: Sun 26 Oct 2025 22:01:12 +0000
Manifest next update: Mon 27 Oct 2025 22:01:12 +0000
Files and hashes: 1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=)
2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=)
3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=)
4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: fgsLSNfq4DJaCqtSIgrAE2dtsjrzDL407IbVuRqhJBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:2f:57:5d:de:dc:10:ed:9c:83:1a:e2:ca:f3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Oct 26 22:01:12 2025 GMT
Not After : Oct 27 22:01:12 2025 GMT
Subject: CN=84d9a22647db6f3347f31ba03eca33ff42871b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:7b:ab:ad:04:c5:56:fa:81:1d:90:6a:78:
7e:d5:cd:53:af:e6:2f:5b:a8:0a:0c:a0:0e:83:df:
d9:a7:21:e5:f6:0c:92:c0:3e:88:e5:1a:a5:e8:16:
ba:f1:90:7a:f4:e0:d0:74:64:7b:e7:98:54:cb:8e:
57:ab:21:bc:8c:ee:9a:6f:41:15:5f:c7:11:66:bf:
91:7a:b2:f6:62:bf:38:ce:5e:e7:64:ed:e0:8a:c2:
6f:71:c7:db:22:53:3e:0c:74:38:15:2c:4f:d5:05:
72:94:28:05:42:29:64:b6:7c:15:c5:10:01:85:f4:
d1:71:f5:4d:6f:62:36:7d:2e:64:9b:91:18:7e:8c:
93:92:b9:8d:d0:e5:e3:2b:b0:42:fc:7c:d3:36:1e:
75:d5:56:4c:3e:06:24:dc:2b:c5:20:17:78:73:50:
b8:fa:61:af:ad:75:9f:b6:e2:c9:d8:44:d7:eb:b1:
38:18:75:04:7d:e9:5d:09:ef:3a:38:f1:f9:13:22:
b1:de:ec:11:05:e8:1a:60:62:9e:11:65:fb:75:91:
19:b8:ad:04:40:8f:7e:c5:7e:b8:53:91:a5:8d:0e:
64:74:4a:b1:8b:ee:f7:3a:51:62:eb:bb:09:4b:e4:
a5:39:55:0e:bd:ea:c4:11:cb:b1:6e:b3:e9:59:59:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D9:A2:26:47:DB:6F:33:47:F3:1B:A0:3E:CA:33:FF:42:87:1B:88
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e2:b9:8a:11:b9:dc:ac:50:72:21:3b:b0:ca:17:ca:56:f7:
54:90:ab:d6:ff:96:4e:f7:02:92:25:9d:70:1e:a9:2f:70:3f:
65:a1:fe:97:f9:ba:d6:b4:7f:bb:2e:30:8d:e1:fa:d0:b1:52:
a3:a5:84:33:fe:35:aa:e8:70:b7:22:0b:fc:d2:51:53:1a:64:
a5:15:db:4a:15:a1:07:3a:01:85:30:28:3a:69:70:67:c6:70:
13:66:a1:61:6d:31:8d:da:18:73:fb:33:79:f4:53:05:0b:67:
93:a8:f3:22:ab:38:c8:1a:20:61:d7:c3:8d:35:31:47:a7:b9:
f3:86:d9:17:ec:a2:89:67:e8:0b:a2:df:e0:8a:d4:ff:d0:60:
7c:7a:8b:a5:44:fe:12:2d:cc:c6:9b:01:dc:a9:92:ef:0c:48:
49:d7:30:17:76:e2:32:b0:5c:e5:19:95:ce:d1:ab:72:9d:8f:
c0:ef:7e:2d:95:70:4b:7a:20:85:7d:c8:41:e3:60:09:c6:88:
6a:35:ef:19:27:68:76:37:a5:64:5f:81:37:d5:16:6f:3b:94:
bc:de:19:39:9b:1d:4f:56:af:bf:42:e9:55:b5:ef:1b:5b:87:
b7:e4:c6:bd:0f:a4:3f:32:a8:ce:a8:f7:32:a1:20:68:7e:27:
6e:c6:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:17:16 2025 by rpki-client