Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier: b1WmmL7i+UqSGx7Lc09wuOPduXJy4JMi0YClXB+K3+s=
Subject key identifier: C3:09:AD:DD:C8:30:53:89:8E:63:34:8C:A5:83:6F:A9:2A:CF:E3:A6
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial: 0199228CE3590C8BE34CA4D25D9F8A0CF632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 05:01:22 +0000
Manifest this update: Sun 07 Sep 2025 05:01:22 +0000
Manifest next update: Mon 08 Sep 2025 05:01:22 +0000
Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: Uzdf89iJZrNQ5eXFYX/3PqRrgbMQ3pFdGq9z87eLr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e3:59:0c:8b:e3:4c:a4:d2:5d:9f:8a:0c:f6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Validity
Not Before: Sep 7 05:01:22 2025 GMT
Not After : Sep 8 05:01:22 2025 GMT
Subject: CN=c309adddc83053898e63348ca5836fa92acfe3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:ff:fc:36:a2:8c:d2:0a:ea:2e:6d:03:f5:
e4:f5:2d:05:13:ba:91:a2:bb:f2:7b:12:53:fa:50:
c8:7d:01:58:7b:13:1e:66:fe:f7:80:55:14:05:d1:
1d:3f:ec:a6:4f:71:f0:d7:af:e0:3f:11:0c:32:19:
ee:dc:e6:e3:e3:56:70:e1:2e:7e:27:b8:ec:91:4d:
25:54:d5:29:3e:22:e4:83:d8:2f:b9:5d:3d:44:19:
cf:8b:e3:76:70:a1:98:b1:8d:c5:50:9e:32:7e:8e:
8e:6f:8c:77:f0:91:ae:9a:04:0e:e2:c7:2f:c0:a7:
88:30:84:db:f0:a6:a8:8c:25:4c:5c:74:1b:1c:3b:
ad:ba:37:dc:1e:6f:09:74:fd:30:b8:73:05:eb:d8:
5f:35:b3:ee:89:76:9d:6c:3f:e1:7c:e9:b5:1d:96:
8c:da:90:e0:b6:42:a2:37:2d:be:13:99:a8:f8:2f:
91:31:c2:ba:87:2f:63:1f:c5:9a:71:4e:fc:5d:3a:
91:53:a0:24:9b:b6:7c:4a:2a:cd:5c:32:e5:75:74:
00:a3:01:37:d5:ac:68:bc:95:c3:28:5e:a3:8f:98:
75:08:60:f9:3d:ed:2c:ec:ab:82:14:bf:d5:c4:76:
92:67:83:26:af:d5:93:63:67:d4:0d:ee:26:a1:8f:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:AD:DD:C8:30:53:89:8E:63:34:8C:A5:83:6F:A9:2A:CF:E3:A6
X509v3 Authority Key Identifier:
keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ed:b4:43:da:e8:b7:e0:8f:d8:d0:84:b7:a5:93:cc:27:a4:
5c:0a:b0:a3:70:0f:8d:6a:4c:c5:76:0f:2d:39:57:26:cd:08:
f0:9d:f7:41:9a:dd:a4:ca:76:23:27:98:99:4b:77:f4:63:57:
01:eb:ff:3b:44:aa:21:b2:4f:ab:e1:cc:69:b0:31:ba:4d:a3:
92:60:27:3d:a9:d2:82:bf:ae:4d:a9:98:93:d6:b7:34:d2:02:
42:26:cf:06:41:e3:da:e2:10:8d:3d:f4:49:5f:5f:f7:0c:3b:
a2:88:58:c7:f8:69:8a:f8:d8:4c:63:09:05:2c:f1:e8:81:44:
81:9b:c5:7c:52:12:d4:5d:c1:d1:bf:d5:f7:3f:92:7d:8c:0a:
45:bd:4b:e5:63:50:4e:68:a3:28:5d:85:b1:82:72:d0:86:ac:
f6:f3:82:46:ee:19:c6:c7:28:c1:14:40:38:12:7f:0a:38:ab:
66:6a:fd:10:d8:3c:3f:c2:c4:ae:ba:86:ff:a2:a2:db:d3:ca:
d1:05:f3:22:ec:aa:44:f6:bc:30:68:17:b9:3b:ca:f2:28:f3:
0c:51:17:b6:31:57:4c:e6:26:87:e1:ae:0c:b7:82:4a:75:e6:
69:27:f5:c9:7a:35:f3:39:b4:2f:66:cb:3d:6a:38:e8:39:60:
28:e6:f7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijONZDIvjTKTSXZ+KDPYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlM2M2NzZkYjI0YzIwNWQ3MjU2ZmM1NDlhZGM3YzNlNjBh
YzdlOWQwHhcNMjUwOTA3MDUwMTIyWhcNMjUwOTA4MDUwMTIyWjAzMTEwLwYDVQQD
EyhjMzA5YWRkZGM4MzA1Mzg5OGU2MzM0OGNhNTgzNmZhOTJhY2ZlM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3P//DaijNIK6i5tA/Xk9S0FE7qR
orvyexJT+lDIfQFYexMeZv73gFUUBdEdP+ymT3Hw16/gPxEMMhnu3Obj41Zw4S5+
J7jskU0lVNUpPiLkg9gvuV09RBnPi+N2cKGYsY3FUJ4yfo6Ob4x38JGumgQO4scv
wKeIMITb8KaojCVMXHQbHDutujfcHm8JdP0wuHMF69hfNbPuiXadbD/hfOm1HZaM
2pDgtkKiNy2+E5mo+C+RMcK6hy9jH8WacU78XTqRU6Akm7Z8SirNXDLldXQAowE3
1axovJXDKF6jj5h1CGD5Pe0s7KuCFL/VxHaSZ4Mmr9WTY2fUDe4moY+GpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMJrd3IMFOJjmM0jKWDb6kqz+OmMB8GA1UdIwQY
MBaAFC48Z22yTCBdclb8VJrcfD5grH6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2Yt
MzQ4OTI1NzhmZjE5LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2YtMzQ4OTI1NzhmZjE5
LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe20Q9ro
t+CP2NCEt6WTzCekXAqwo3APjWpMxXYPLTlXJs0I8J33QZrdpMp2IyeYmUt39GNX
Aev/O0SqIbJPq+HMabAxuk2jkmAnPanSgr+uTamYk9a3NNICQibPBkHj2uIQjT30
SV9f9ww7oohYx/hpivjYTGMJBSzx6IFEgZvFfFIS1F3B0b/V9z+SfYwKRb1L5WNQ
TmijKF2FsYJy0Ias9vOCRu4ZxscowRRAOBJ/CjirZmr9ENg8P8LErrqG/6Ki29PK
0QXzIuyqRPa8MGgXuTvK8ijzDFEXtjFXTOYmh+GuDLeCSnXmaSf1yXo18zm0L2bL
PWo46DlgKOb3+Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:35 2025 by rpki-client