Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: RAuhtLhA684B0UU8Zqx8wWE/0KDD9X4x/0qG1ox8GD8=
Subject key identifier: 4B:3B:51:8E:35:1D:8D:73:BA:98:0A:56:B4:D0:BA:CE:D1:BE:54:4F
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 01992367BD6FB91EC4B46B0DBE72029B833E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: 44
Signing time: Sun 07 Sep 2025 09:00:25 +0000
Manifest this update: Sun 07 Sep 2025 09:00:25 +0000
Manifest next update: Mon 08 Sep 2025 09:00:25 +0000
Files and hashes: 1: ACAAllRVQZSY6CEwPUn6nHE0pI0.roa (hash: iIJLabdlVKYUojIdfB178Gbcf89MJgK/cIMBkqfpXow=)
2: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: 9d7NRA5D8CCj26DOUiJKL35jTrKA18VKhEEfxpj+SI4=)
3: TnQBnRgF1Fd44NNajn0aU2c4k-U.roa (hash: bygzgFDHIVUQArLZudG2dlgz5CAq7YfyRAQZ0W8ymG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:bd:6f:b9:1e:c4:b4:6b:0d:be:72:02:9b:83:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Sep 7 09:00:25 2025 GMT
Not After : Sep 8 09:00:25 2025 GMT
Subject: CN=4b3b518e351d8d73ba980a56b4d0baced1be544f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:c0:b2:1d:fd:bf:6f:9b:d9:eb:f9:b6:05:
47:e9:96:21:d6:e6:48:9b:91:6d:41:f3:c5:81:ef:
ed:f8:56:ae:58:99:ca:c5:ce:fb:6a:94:de:8a:38:
d5:d7:32:5d:0e:18:01:fc:4d:9c:1e:f5:ed:a6:f1:
bf:e5:34:2e:47:d6:c2:00:8a:f1:06:6b:b7:d6:46:
96:b4:82:03:de:d9:cb:e6:e3:84:1d:ac:b7:f5:98:
34:03:88:02:e5:d6:a2:64:84:c4:40:c7:02:4b:19:
19:19:f4:71:b8:94:46:1d:e3:14:20:d8:22:3d:66:
b1:50:b6:fe:d0:b2:e8:b9:94:ef:ee:f8:87:a9:f5:
29:c7:ad:46:b1:06:76:70:44:16:7d:1b:28:7b:d0:
e5:01:28:3e:af:a9:68:08:53:c0:6a:25:80:f8:48:
54:90:b6:fd:17:a5:4b:0a:78:f7:53:cd:da:14:d9:
21:28:81:06:f2:43:fc:a5:a4:2d:bf:fb:db:9f:b7:
8d:52:b6:1e:a7:e9:59:36:1c:76:1e:22:43:bd:70:
71:a5:d5:af:9a:46:f0:1e:d7:39:cd:a6:a1:67:68:
e0:b2:d3:3f:96:64:1c:60:ce:5e:ad:99:41:29:c6:
5b:cf:e6:78:07:ab:3d:53:f3:31:23:84:fd:de:a2:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3B:51:8E:35:1D:8D:73:BA:98:0A:56:B4:D0:BA:CE:D1:BE:54:4F
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:61:e0:32:cb:ef:0a:16:7b:2b:45:50:79:d7:22:8f:b6:35:
fb:26:3b:83:b0:ca:b5:03:7f:9e:37:77:6d:c7:38:93:64:34:
55:bd:da:ea:44:1c:4e:7a:e4:cb:70:20:31:c3:8d:22:6b:b8:
59:37:5f:59:92:ac:36:3f:0a:be:4b:3c:e4:75:ba:7f:0d:9f:
0d:07:78:a7:67:fa:cf:9e:7c:f3:9b:7b:d7:f3:93:02:fd:17:
67:2d:15:78:3f:ee:8a:4b:22:2e:5a:89:4b:ce:38:d3:d4:ba:
6b:04:f5:ec:1a:1b:59:aa:e5:40:d7:8b:1c:7c:6f:68:60:15:
57:37:13:0b:ea:5d:8e:df:7f:7d:da:bc:0f:80:ab:a1:7e:51:
6d:ee:ba:81:31:c5:87:31:6c:08:dd:20:fa:da:31:b5:d8:e6:
29:33:fc:9f:f1:e9:17:ff:b1:6b:2c:41:2c:03:1a:f3:50:52:
6b:05:45:3d:3b:68:8f:78:a9:c4:bc:b2:5f:e4:6e:44:30:a7:
5d:75:0e:80:eb:a5:c9:d0:19:df:a0:44:1d:5a:a1:82:fc:31:
d9:56:ad:05:94:63:6e:31:9e:1e:43:74:c6:03:aa:5d:bc:1a:
93:23:10:d7:a7:4c:68:89:7a:74:f2:0e:8b:aa:c2:c0:b6:24:
b2:4d:41:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:19 2025 by rpki-client