Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: p/zIHIZYsrZz3VAOlrBzyGqAxnR1XIIIRY+a+1W+btU=
Subject key identifier: E1:36:A1:95:61:26:B2:55:38:6C:F6:DD:45:AC:6F:0C:80:0C:FD:9E
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 01992330EC8DAC99A5630700BAF0B3AF33A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 08:00:32 +0000
Manifest this update: Sun 07 Sep 2025 08:00:32 +0000
Manifest next update: Mon 08 Sep 2025 08:00:32 +0000
Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: /YN0gYIrT6JgraOC9qwnydBByTSwZpjHcDc/vjUGwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ec:8d:ac:99:a5:63:07:00:ba:f0:b3:af:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Sep 7 08:00:32 2025 GMT
Not After : Sep 8 08:00:32 2025 GMT
Subject: CN=e136a1956126b255386cf6dd45ac6f0c800cfd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:25:c5:74:1f:06:86:24:57:59:0b:53:26:
66:fb:f7:0e:63:c6:58:3d:0b:c1:ee:97:aa:81:5c:
1e:6e:4c:0d:62:4f:6a:88:71:40:4f:71:24:bd:f8:
0a:07:d7:9c:bc:f0:80:dd:2a:af:13:d9:59:d8:28:
12:98:49:7f:c7:fc:3b:09:73:ef:14:99:1a:3a:aa:
35:9f:e1:c8:cc:d3:97:57:b3:2d:e7:72:be:cf:96:
2f:71:2e:96:76:db:b6:85:15:fe:ff:d5:80:a4:c6:
5a:48:1e:90:bf:4d:c6:3c:fc:47:46:12:dd:e2:fa:
b3:ff:57:ab:37:cc:92:7f:bd:13:c5:b1:af:61:f7:
ac:bb:87:9c:43:c7:91:b6:54:7c:e6:38:0a:ff:36:
7f:0e:ad:17:4b:5f:45:fb:c7:4d:5d:7c:1d:4a:85:
dd:c0:b1:63:23:a9:83:4b:f9:ed:57:cb:76:19:a8:
28:47:b8:19:e6:e6:e5:03:18:dc:67:e9:e8:71:fe:
80:5d:49:d9:80:ea:2b:7d:d1:b9:a8:ee:1f:7c:09:
d7:51:43:aa:3c:02:d9:30:a2:40:96:04:46:13:a1:
27:67:49:05:3f:7d:1b:ef:34:a0:3e:51:ad:dd:6f:
7f:9c:7e:fd:99:58:96:0b:16:16:cd:e6:bf:28:36:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:36:A1:95:61:26:B2:55:38:6C:F6:DD:45:AC:6F:0C:80:0C:FD:9E
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:49:37:8b:42:07:5e:ee:d4:3f:1a:59:fa:ee:0b:cc:d2:e9:
23:8e:ca:69:3f:1e:9d:7e:37:9f:49:75:53:28:ae:63:4f:50:
f1:9a:e1:ff:08:64:14:f8:e0:d0:3c:cd:74:2b:0e:42:5d:89:
71:86:f4:a9:7d:58:bf:64:51:82:1d:97:c2:09:a4:1a:64:72:
53:04:61:02:12:85:64:5a:70:26:a2:23:b7:66:f0:46:7f:15:
94:aa:16:c2:7b:c6:29:b5:1f:85:04:76:9b:92:b4:ab:9f:b5:
a6:2d:5d:39:45:ac:d3:74:46:87:6c:d1:7a:5a:b5:56:c4:03:
92:6c:e3:97:47:52:e1:c5:7c:ea:03:00:ca:15:c8:13:b1:2a:
c6:a6:7a:aa:ff:e9:1e:73:29:e2:8e:cf:02:a0:ff:7a:27:1f:
7d:6f:e0:31:13:3e:1e:4e:c6:30:e2:e9:42:71:29:35:0d:d3:
19:5a:46:36:67:61:95:98:f4:4b:6a:77:42:a8:00:04:76:7b:
d8:02:98:00:ce:ce:c6:ca:78:d4:04:a3:36:ae:ef:ae:26:81:
e7:bd:f8:d7:45:b6:46:05:08:42:bf:f7:2d:ba:04:ab:8a:49:
f7:2d:6d:5b:ac:8b:17:d2:84:02:d5:34:ef:1a:0c:fb:7c:56:
ed:41:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:12 2025 by rpki-client