Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json)
Hash identifier: olIs5IXEY1VAugF32IIYWADm4Ou32lVOPF2DCMFoYs0=
Subject key identifier: EF:49:A8:77:27:B5:E9:25:2D:4E:7E:1C:26:8F:3C:94:D0:99:61:AF
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial: 019A72CA2EA730EAA3056A47BD01D18102F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
Manifest number: 048A
Signing time: Tue 11 Nov 2025 12:00:44 +0000
Manifest this update: Tue 11 Nov 2025 12:00:44 +0000
Manifest next update: Wed 12 Nov 2025 12:00:44 +0000
Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: rg3NsLUIPGYU7uZM2iVsxZWKIn5GKXa3NuuCIwvv4bU=)
2: tUeDOLxh54YzVxv0XUKXGVzFhsg.roa (hash: guDk4R7GTLiv83MGpogrsbl+v0V3XO0MlUq9mf/rxx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2e:a7:30:ea:a3:05:6a:47:bd:01:d1:81:02:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Validity
Not Before: Nov 11 12:00:44 2025 GMT
Not After : Nov 12 12:00:44 2025 GMT
Subject: CN=ef49a87727b5e9252d4e7e1c268f3c94d09961af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:2c:e9:7a:2e:8d:17:b9:44:52:6b:64:13:
0e:17:98:bf:da:7c:c2:d5:27:bd:83:84:d6:37:2a:
5b:2a:37:d6:1c:84:2d:53:80:a3:3f:0b:2a:1c:3d:
b1:11:ac:63:e0:b0:74:ff:c4:9c:38:0f:09:53:2a:
5e:fc:81:18:12:bf:32:20:dd:39:39:14:37:af:10:
eb:cf:83:fe:24:0a:b7:e1:97:97:3f:0b:50:af:70:
0d:13:ee:b0:5b:bf:9e:90:b7:29:cc:b3:b6:69:09:
8d:a9:55:b7:d1:45:4a:4b:fc:b2:96:d4:bf:6a:61:
f9:28:89:41:80:42:fe:f0:9b:02:25:28:11:f2:cf:
5e:ee:e0:df:a3:97:f6:1c:ec:bd:7e:ad:8b:69:61:
32:33:96:88:bb:2f:56:b4:6a:22:62:f2:40:32:da:
41:c2:f3:0e:9b:74:90:5f:79:fa:0a:26:88:a0:58:
a4:66:67:e7:55:48:0e:a5:4e:ff:40:7f:ba:76:ce:
93:b2:79:d2:60:48:f4:ef:89:6a:92:27:67:3a:9f:
90:a9:c0:54:1f:1c:81:81:98:64:fb:04:55:e8:b6:
eb:65:58:1f:7b:93:16:b6:8c:77:ef:60:3a:6e:9b:
34:e9:a9:58:63:43:21:a3:d0:77:c7:18:56:9f:d5:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:49:A8:77:27:B5:E9:25:2D:4E:7E:1C:26:8F:3C:94:D0:99:61:AF
X509v3 Authority Key Identifier:
keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:60:24:8b:d8:61:76:61:eb:6a:18:71:7d:f9:ff:6e:6f:
e8:94:95:0e:e6:e5:a0:64:5b:81:9d:d4:0a:31:e0:42:b8:1d:
b4:90:6a:3d:c6:74:15:60:38:c0:39:1f:ad:73:f0:0d:5d:e2:
87:34:0e:d3:63:58:e6:4e:4b:56:ac:cf:22:b1:43:22:aa:d2:
c7:c1:a0:bf:cb:74:64:db:12:21:70:5b:a9:62:28:1c:4f:12:
0f:25:95:21:73:27:98:9c:4c:c5:b0:0e:9c:20:75:ba:5b:5b:
1b:96:3a:0f:f7:3c:de:c0:45:b6:e3:db:9d:c5:90:2a:bc:da:
fe:b1:cd:ab:b3:0f:1b:82:ab:0e:fe:f1:17:cf:94:49:c0:eb:
88:e3:30:ef:8d:d7:95:0a:85:fc:2d:02:97:d5:fd:f0:ba:11:
41:26:a0:a1:0c:12:a0:7a:70:95:16:e6:db:7c:4e:07:b7:f2:
5f:38:01:4e:01:93:0d:6d:bc:d3:1c:eb:1c:6c:b3:c5:8d:7e:
43:2c:72:ae:d5:d0:08:f5:53:c6:e8:32:09:49:58:72:6f:9c:
0b:b5:d0:a5:50:7d:09:e4:ee:82:30:81:b2:6b:7e:58:7a:66:
10:28:17:8c:e6:a2:85:0d:1c:0d:b7:58:2e:ca:c1:56:5c:6d:
4a:df:c5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:48 2025 by rpki-client