Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: lEf60cuv/Xsx6H3qAoq55b7alkARnswppw+4dIB9qvM=
Subject key identifier: 60:11:91:F3:67:02:DF:BF:CD:DA:09:5B:EA:19:98:65:82:8F:4C:9C
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 019A733882F7A08D05B45162F379A12340DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 14:01:14 +0000
Manifest this update: Tue 11 Nov 2025 14:01:14 +0000
Manifest next update: Wed 12 Nov 2025 14:01:14 +0000
Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: mbJ9OCfM1PhM+ph37l7pGXJCekXVh2mRHpbrXdGuLy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:82:f7:a0:8d:05:b4:51:62:f3:79:a1:23:40:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Nov 11 14:01:14 2025 GMT
Not After : Nov 12 14:01:14 2025 GMT
Subject: CN=601191f36702dfbfcdda095bea199865828f4c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ce:c5:b7:70:b6:af:11:97:d8:67:7f:00:80:
43:52:99:72:e6:7b:15:96:b0:41:a3:f2:f7:8a:f0:
e7:fe:0c:f4:c0:0e:b4:41:14:f8:bc:6a:5e:53:c2:
9a:6b:7f:7a:18:70:84:04:97:0f:49:18:b7:75:01:
98:2b:91:19:7f:f8:db:fc:83:fa:dd:cf:73:a9:95:
f0:c7:8f:38:56:5b:cb:d0:01:b7:e6:a9:0f:ee:8e:
1a:19:e1:d5:de:44:b6:aa:b6:2a:81:12:66:31:ff:
e7:1a:b6:9e:ae:15:93:1d:51:5d:d5:a3:69:29:07:
cc:85:41:ea:16:ce:fb:e9:ef:44:f5:84:fa:76:07:
03:ea:64:2e:1e:d2:ab:0e:fd:ff:a2:7b:40:8e:a5:
ce:82:f1:10:1c:3e:90:24:46:50:aa:ff:ed:bc:b4:
b0:72:85:e2:1a:b8:cb:2e:be:26:bf:ee:41:fc:8e:
6a:9f:07:e3:f1:32:7f:01:cd:d0:ff:8a:82:5f:90:
6a:f5:e7:0f:0c:ef:d1:37:a2:ad:3d:d2:d6:8a:75:
53:bc:00:33:cd:f5:c9:0e:83:b8:c0:5f:e4:3e:9a:
5c:91:f0:49:76:3e:6c:10:6d:9a:e7:39:80:da:88:
0f:7d:63:50:6c:b3:d0:7a:c5:c5:ba:e3:4a:29:d6:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:11:91:F3:67:02:DF:BF:CD:DA:09:5B:EA:19:98:65:82:8F:4C:9C
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:36:b3:76:d8:30:53:a3:a7:f6:70:5a:5e:96:e3:db:1e:63:
cd:e9:58:66:65:fd:1b:b1:24:d7:db:28:f9:a7:ca:fc:5e:fa:
f0:0a:fd:01:5b:2c:d7:fd:32:b2:a8:05:b2:5c:50:d8:62:90:
69:4d:1e:dd:81:7d:d8:6a:a2:0d:a6:1f:9b:b9:58:e6:40:03:
76:4f:47:54:0f:cc:5b:18:41:72:6c:35:a0:8b:55:44:71:e0:
7c:f2:10:8b:38:43:76:7a:35:ed:44:77:a0:40:58:4c:57:c3:
55:07:05:08:75:30:a5:90:21:b4:36:50:8d:8a:4f:cb:45:90:
3a:a5:f7:48:ae:f7:5e:93:ca:55:7c:f6:53:91:67:30:35:f7:
ef:80:ec:af:ce:22:88:f1:a0:81:b1:90:cd:3a:41:40:e3:3c:
da:97:fa:ea:ef:41:40:41:67:97:50:a8:d3:8f:dd:49:e9:51:
a6:e3:db:17:26:87:c1:29:d6:19:e4:bf:5a:ff:b5:06:db:0d:
87:0c:84:18:83:6f:b2:d7:f0:1d:24:82:6a:2d:fe:68:0c:9d:
69:cd:93:81:54:2c:cd:23:9f:07:2f:e4:7b:c2:7d:27:f0:57:
b9:85:bf:3f:39:90:e3:fe:6e:e4:6d:0f:a5:c9:00:5b:8f:eb:
71:59:bb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:50 2025 by rpki-client