Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: l0Fa7Y8qRkMWlR9htKQ2FMt7AcNedNIpq5vthhH4mf8=
Subject key identifier: C3:CC:D8:ED:FB:5A:5C:98:E5:70:D7:9F:52:A3:B5:A0:6F:5A:47:47
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 0199C30D3E69BC3BD3117386BE1A4F024616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 05F2
Signing time: Wed 08 Oct 2025 09:00:49 +0000
Manifest this update: Wed 08 Oct 2025 09:00:49 +0000
Manifest next update: Thu 09 Oct 2025 09:00:49 +0000
Files and hashes: 1: DhJdlSXGg4nwo43i-3hsY3C4PiQ.roa (hash: OLFOl5avnYQnKlew3nA3PZbHQQyKutwAJUJzm6ztUrI=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: rsIawVfdlV7d88wB4QIJXtVJQRs3SkhWFAHjplytFL4=)
3: ear6glms6xQEx-sJzJyz2U-vwUo.roa (hash: myzxilbkgn8eg20yO8piaw6MM2eVN5CUHaMGcHJd8U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:0d:3e:69:bc:3b:d3:11:73:86:be:1a:4f:02:46:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Oct 8 09:00:49 2025 GMT
Not After : Oct 9 09:00:49 2025 GMT
Subject: CN=c3ccd8edfb5a5c98e570d79f52a3b5a06f5a4747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:6c:7b:70:51:f3:df:15:42:b1:11:94:58:
39:26:ce:bc:a4:02:3e:c3:1c:dc:bf:7e:47:c8:f2:
27:9f:8c:62:88:38:05:a2:c5:10:a8:d5:2b:c7:2d:
ea:cf:c1:e5:6d:b5:6c:4a:e1:11:5b:f2:8d:1e:62:
47:7e:58:47:60:74:4e:be:de:97:2a:bb:fd:68:42:
29:3d:20:44:03:47:85:bc:ed:5c:b1:0d:68:67:db:
88:8e:78:08:62:c5:6e:fd:68:f6:cf:1d:27:9e:19:
cc:9c:de:03:90:70:65:4d:e9:14:7c:48:dd:64:b2:
e3:23:1a:fb:f2:d7:93:c4:16:c3:63:5e:e1:d9:20:
a3:3b:99:05:90:20:01:c5:34:92:82:92:4c:d2:55:
3e:24:04:aa:df:e6:41:c6:18:c0:75:e3:61:fb:09:
41:82:5a:c2:55:fa:d9:1c:90:69:cd:b4:d8:fb:04:
76:a1:ec:f1:2c:89:2f:bd:4c:cc:e4:85:77:15:a7:
42:71:97:5e:30:c7:35:41:0f:44:bf:ec:ab:f4:84:
6f:94:60:9b:4f:c5:cb:69:fb:16:2c:c5:f5:a0:1b:
57:e4:11:52:ba:2a:63:e8:f4:65:37:72:34:00:70:
85:5b:9b:8e:f9:c8:5c:5e:b5:5d:de:d2:81:ff:40:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:D8:ED:FB:5A:5C:98:E5:70:D7:9F:52:A3:B5:A0:6F:5A:47:47
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:19:61:ce:b5:d4:72:df:fe:42:21:7b:8d:17:2a:25:39:0a:
33:aa:55:cf:91:2f:98:82:1e:a2:28:25:47:be:e2:88:cf:d9:
1b:c4:42:e0:b6:4e:e5:2a:ca:6f:73:40:5d:e7:d1:0c:de:f3:
e7:e7:be:10:44:b1:bc:b0:f9:46:04:44:be:60:15:fc:dc:10:
3f:c1:ce:4d:73:7b:8d:3f:c6:2a:95:e0:63:d8:ac:d4:5f:ce:
ee:ab:33:67:7f:a5:68:ab:0b:d6:8e:19:f5:85:7c:25:bc:a2:
9d:7a:4f:d3:6e:5f:f4:00:cd:ab:41:c6:8a:e9:bf:d9:80:50:
50:6f:a1:e2:51:d8:25:0b:dc:47:fc:42:18:66:da:bb:67:08:
57:d9:7d:db:c3:43:66:45:4a:ac:6d:70:5a:99:95:ee:91:64:
06:52:03:7b:7e:48:c8:a8:03:77:97:95:ce:18:6f:5c:df:43:
e9:66:06:0b:7f:14:2c:cf:09:97:c9:1c:81:c7:13:03:03:ee:
3f:1c:36:89:3d:21:74:95:4f:f5:9f:bb:2c:8d:21:c7:10:d2:
59:e9:58:6f:f7:f3:5d:12:1a:11:f1:56:52:02:44:e3:d2:a9:
cb:7a:e0:ec:16:36:42:e1:60:91:91:4f:04:93:8f:0c:7a:18:
15:c9:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:22 2025 by rpki-client