Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier: 0SstxD7bezRfo2IslkMdZ4/b1Cpq4Zqa1um4xbhSWzM=
Subject key identifier: 63:0D:4E:A9:C1:7D:E8:5C:FE:BB:01:13:20:4A:52:1B:CD:03:6D:1D
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial: 01974F330F06424EE0B6C431F2A2DD1BBCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 11:00:35 +0000
Manifest this update: Sun 08 Jun 2025 11:00:35 +0000
Manifest next update: Mon 09 Jun 2025 11:00:35 +0000
Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: bya0MwK1UEpoVRQ6c6sGbXW0ejfHdAxlE6dlHrCuM5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:0f:06:42:4e:e0:b6:c4:31:f2:a2:dd:1b:bc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Validity
Not Before: Jun 8 11:00:35 2025 GMT
Not After : Jun 9 11:00:35 2025 GMT
Subject: CN=630d4ea9c17de85cfebb0113204a521bcd036d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:cc:48:17:e7:58:01:f9:4b:a7:29:84:9e:
14:78:cc:b1:3e:33:a9:d9:d4:5a:24:ca:61:59:64:
1f:f7:aa:d2:35:b8:8a:b0:f4:17:d0:41:48:d0:b8:
3b:d3:aa:d3:ab:97:70:70:2c:11:08:28:88:52:77:
72:8b:ab:96:25:18:73:5a:23:39:c0:bb:45:7a:2c:
b9:a0:47:0c:54:09:9f:d8:ca:b0:6f:4a:ab:14:6f:
46:fb:0b:fb:e5:1c:72:98:a9:58:5c:42:05:52:d6:
d8:ac:eb:6d:1a:ae:a3:15:02:7a:a0:56:de:d8:a3:
63:c4:50:60:49:de:f1:03:61:42:f6:46:23:bf:b2:
00:a5:0c:b2:0f:49:e1:6d:41:02:72:dc:ad:c6:5b:
2a:b4:0f:91:7f:46:8b:4b:54:f9:00:5d:00:42:b8:
68:07:4f:f2:cd:30:97:2e:80:ee:bf:4c:fd:97:11:
44:02:f6:6c:79:cf:6c:eb:12:bd:a5:b4:46:73:81:
2d:04:7e:58:6a:c6:fd:86:91:3c:58:ed:ba:07:f1:
4e:c8:a7:7a:26:46:43:67:51:69:5f:bc:af:6d:43:
28:d5:dd:78:da:6a:b1:ef:f3:39:e7:fe:c1:31:9c:
bd:68:d4:fc:df:da:e2:bf:93:76:0e:9c:27:40:80:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0D:4E:A9:C1:7D:E8:5C:FE:BB:01:13:20:4A:52:1B:CD:03:6D:1D
X509v3 Authority Key Identifier:
keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:55:50:6e:88:03:6d:af:04:b5:9d:da:00:2b:e0:cb:ed:f0:
12:70:a3:69:f6:51:d5:71:38:35:00:ec:fe:cf:fd:79:38:18:
85:f5:b9:43:cf:48:77:2e:e3:4e:6d:14:78:17:b6:86:ac:02:
0f:17:55:6a:e7:7d:f6:4d:ac:9d:e4:ed:53:a8:57:e8:d2:42:
0a:a3:8e:37:2e:b3:ce:6c:39:61:f6:26:aa:62:30:a2:c9:83:
66:5f:a2:7d:52:2c:47:73:d6:c4:81:1e:4d:f5:c1:94:97:bb:
a4:82:f7:90:c7:9c:d2:a6:91:36:11:76:84:13:d9:03:1d:80:
f6:96:16:cd:98:d6:8e:d6:ec:ba:af:07:22:b0:2c:6f:00:37:
6e:09:fd:3b:0a:8a:b5:ec:d9:bf:18:82:22:22:00:f5:3d:ab:
6b:bf:9e:a3:70:4f:dc:d4:53:9c:c7:40:74:81:08:cd:a2:6a:
57:27:d5:f1:97:c3:4c:4b:d3:98:ba:3a:b3:38:19:76:93:29:
14:96:8b:6f:ac:98:a4:06:65:74:b9:e1:52:c7:1c:36:b0:f8:
29:8d:a6:53:0d:79:ed:42:cc:c4:84:a6:30:e0:14:5c:39:c4:
c2:da:ea:66:ae:27:d7:af:26:4a:49:78:f4:7e:ad:98:33:b3:
c3:1e:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:39:48 2025 by rpki-client