Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: BvolccxYH5vOEP0Z5BHb/cgr6PXw+GJiUVPWnmnFGzQ=
Subject key identifier: 2B:63:37:B6:76:AB:D9:DA:97:54:64:B7:BB:CB:2D:65:08:C4:AF:1C
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 0198D5BBFEF94FB33E6EF9FA9204F7C8080A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: QBFmANCHWHC4dGeNFcVmlDcSF0reabiTqt/qrwTKrzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fe:f9:4f:b3:3e:6e:f9:fa:92:04:f7:c8:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=2b6337b676abd9da975464b7bbcb2d6508c4af1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:e8:31:d3:5b:4f:18:57:b9:1c:f9:86:41:
f4:54:c7:25:c8:5f:40:99:3f:f9:2b:13:b3:dd:14:
c6:fd:60:6e:e4:09:17:1b:00:d9:da:57:70:1d:25:
ce:12:ea:4f:f2:66:51:01:ca:00:36:eb:be:ab:c4:
43:b7:85:66:55:2c:ed:3c:fd:ac:44:95:3e:92:d1:
c7:8c:9c:b3:1d:ac:b3:48:63:07:85:d5:a4:34:ce:
d3:68:51:61:03:09:c1:8f:de:be:ec:a3:02:d6:87:
a2:f9:2b:13:a8:39:22:01:ed:1f:d4:76:4f:29:b2:
4d:ab:ee:6c:46:f1:85:30:89:ed:5a:b5:37:ad:b1:
d3:47:35:2b:4d:d3:20:71:96:67:41:98:af:c4:83:
bd:77:d4:65:11:33:fb:3b:dc:30:ca:83:48:99:ff:
e2:7d:ad:5a:00:fe:90:bf:95:68:8a:27:5a:84:b8:
b9:c4:69:c2:e0:e4:45:2b:05:81:19:69:80:0e:e6:
82:3f:8e:eb:da:e5:d4:d0:95:86:d8:7f:48:b3:7e:
30:a2:3c:71:dd:89:23:2f:9b:69:86:be:e0:ee:45:
9a:d2:ec:94:39:6a:79:a1:fe:22:4e:1c:cd:15:b0:
bd:e4:be:eb:bd:0f:d6:fc:35:cd:01:c3:0a:89:3a:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:37:B6:76:AB:D9:DA:97:54:64:B7:BB:CB:2D:65:08:C4:AF:1C
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:65:68:35:57:ce:72:9c:2d:07:31:52:c2:90:67:84:7e:5e:
63:80:35:ad:24:d7:ce:8d:f5:1f:97:9c:3f:6c:25:4a:c5:44:
d0:25:b9:d1:1d:9c:32:5b:b2:70:ce:de:5c:7a:75:e2:28:8f:
bf:d4:8e:f7:fa:77:29:19:5d:f0:1b:5d:62:2c:09:36:42:d6:
31:ef:9c:cd:3c:e1:bc:5b:db:e9:4f:6e:10:70:61:51:ec:61:
d8:17:76:6e:2d:d4:90:63:98:ef:fd:87:a8:b1:f0:5a:14:4d:
4f:8f:a5:47:2c:7f:ad:7e:b3:25:bb:70:09:56:2b:47:db:51:
fb:d6:5a:d0:87:22:ce:73:aa:08:ad:c3:4a:01:64:09:56:7c:
09:a4:27:94:59:99:19:ac:d7:6b:c9:fc:f5:8b:57:8b:b9:c2:
e3:e7:de:1b:fd:6c:cd:84:47:dd:23:62:66:68:c9:f8:c8:32:
4f:8e:16:12:75:13:7f:a5:ee:6f:8c:29:9f:34:57:86:14:b0:
de:55:a1:db:06:ac:66:e8:1e:3c:05:a7:3b:a2:df:cd:94:99:
40:fd:33:e4:dc:23:aa:48:b7:5b:af:3f:86:9b:5d:43:36:a4:
b3:dc:60:ff:36:93:9e:7d:49:c3:b1:ef:8c:32:bf:55:b8:92:
01:b6:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:31 2025 by rpki-client