Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: bs66tfOPPjfktHvLsj30LnBMMe/2twfeL6Bgg4RI93w=
Subject key identifier: 33:02:88:F9:19:C6:D7:2C:C7:3B:2F:D0:23:52:05:13:55:F1:A7:F2
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 019A71B7AA6B197AA66285304B0653F93221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 06A6
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: 4qAZBKWL6s83QZVoCh9ZrBb3V+SW69GCvvZTMZEsp3s=)
2: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (hash: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:aa:6b:19:7a:a6:62:85:30:4b:06:53:f9:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=330288f919c6d72cc73b2fd02352051355f1a7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:eb:c1:f0:b6:f1:c4:ef:ab:b2:59:13:2d:
da:f3:63:36:31:89:91:00:11:08:49:be:63:b8:6d:
5f:3a:f1:b1:c3:de:24:04:5e:0c:62:a3:68:82:78:
49:51:7a:a8:16:ae:6e:e4:e8:fd:63:58:97:f6:c1:
21:db:80:03:b8:b1:5b:1a:4f:61:e2:31:3e:fa:43:
fc:e3:4c:64:26:7a:a0:03:ce:1a:9d:ef:d0:00:eb:
3e:e3:63:c2:c8:ee:34:80:bb:81:f6:53:3c:c3:2f:
aa:be:b3:39:0b:da:75:a7:f0:ed:b7:47:59:2f:ac:
a4:87:cc:25:d7:64:48:3f:11:9e:c6:f1:d9:65:29:
c7:cc:cf:cd:b4:3f:45:c5:78:e8:ba:7b:de:a3:84:
e6:5b:60:08:ee:9d:cc:7d:50:96:ca:5b:06:69:49:
de:f3:13:0a:95:d4:d5:c9:90:1b:87:83:be:35:1e:
64:ae:17:bb:b0:88:c4:fc:a5:e9:bb:c4:5f:29:8e:
fd:0b:19:5f:8e:f1:9d:f6:7e:6a:3c:d9:f7:28:ea:
09:29:58:92:42:a0:e4:d0:47:5b:e1:45:b2:be:cc:
f8:08:2c:f3:b9:79:6a:98:e9:df:a5:70:5d:ef:5d:
c2:bd:6a:a4:23:0b:3e:24:d3:69:81:4d:88:08:e4:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:02:88:F9:19:C6:D7:2C:C7:3B:2F:D0:23:52:05:13:55:F1:A7:F2
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e3:df:3c:12:5f:44:0b:03:d0:c0:d2:11:e6:f9:a3:ef:dd:
3f:ef:e7:87:db:2d:4c:50:5a:ee:d7:b1:e0:d1:02:02:c4:0b:
38:c4:f7:83:e4:13:04:3a:a2:80:5d:11:d6:0c:40:98:c1:71:
84:4c:b8:ae:03:b2:7c:17:8b:2b:db:56:38:ce:96:13:75:76:
30:57:b6:67:8d:0a:ee:17:0a:3f:0b:61:35:a4:98:6f:92:dd:
b0:95:0b:cd:2b:37:96:85:ae:3f:10:70:65:db:20:ed:aa:ac:
15:42:f7:11:32:66:4e:32:47:5e:6b:fe:61:6f:a6:34:ab:73:
f2:82:57:c8:29:03:de:94:1b:93:c1:6a:8e:8d:8e:f6:3f:e5:
b8:bb:78:f2:f3:8a:97:bc:07:fc:8d:45:86:44:36:71:73:b1:
60:a9:a9:82:76:3f:4b:a9:18:d5:c5:7a:db:ed:41:21:0f:f9:
23:89:38:f2:af:84:bc:17:bf:32:bd:88:2e:db:5a:e3:07:99:
bb:d3:59:e0:02:f6:b6:d0:3e:d7:75:d3:99:32:30:16:2a:0d:
c5:53:e7:4b:9a:81:72:2e:a0:3d:df:71:78:aa:1e:0a:7f:02:
83:27:2d:5c:7b:3b:b6:bc:8f:cc:3b:bd:ce:40:a7:fc:9b:ec:
c7:c9:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:32 2025 by rpki-client