Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: Z5XkOPpVFtm/lUsJy+XtOggr08DKZCvg4wTkSScEMnM=
Subject key identifier: 14:C5:E6:84:9F:1F:46:54:33:65:F9:DE:4E:BB:C5:E2:20:9C:3B:11
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 0199FFC7D78AC021AE9B8CF0178FAB61D2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 05C2
Signing time: Mon 20 Oct 2025 04:01:50 +0000
Manifest this update: Mon 20 Oct 2025 04:01:50 +0000
Manifest next update: Tue 21 Oct 2025 04:01:50 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: aJBs42NFIiMYYr8dmWnq35Gmk0pXu14Xpdf/AGhEZ/Y=)
2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d7:8a:c0:21:ae:9b:8c:f0:17:8f:ab:61:d2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Oct 20 04:01:50 2025 GMT
Not After : Oct 21 04:01:50 2025 GMT
Subject: CN=14c5e6849f1f46543365f9de4ebbc5e2209c3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:89:bd:6d:e2:6b:5c:4f:5c:d4:b8:31:a9:
76:08:d3:0e:e2:ed:de:aa:0d:64:e7:54:e0:ac:25:
ad:f0:da:a3:b1:14:1f:5a:7d:fe:36:74:d6:8b:ba:
53:9e:7d:39:c2:dd:60:be:d4:27:f7:8d:1b:ff:b3:
10:5d:4f:31:2e:e5:2b:ed:26:ad:b0:b4:1b:fc:fe:
3d:0d:8e:84:aa:8e:b1:65:46:09:31:6f:71:46:e3:
7a:2e:03:de:f4:15:bb:c3:5f:f4:87:85:58:d7:fe:
58:45:05:1e:26:e2:e8:d8:1c:c6:c4:ea:e8:81:ac:
42:00:43:9c:ec:9e:4f:2e:02:8b:a1:c6:79:0a:f8:
3d:7f:24:51:45:ac:ac:c2:90:c3:ff:2c:ca:ec:f0:
ce:8f:7d:e2:c2:c6:4f:04:a2:ab:55:c5:bc:ec:d0:
2c:67:4d:a4:c7:db:25:c2:07:ea:68:0d:8d:bb:86:
fd:2a:7b:cc:e9:1e:9c:60:0f:d1:78:07:cd:1c:22:
dc:1c:80:65:cb:74:88:cd:44:5b:00:c1:a0:55:19:
94:68:a2:f1:25:c1:2d:01:7c:af:97:05:ad:c8:52:
04:38:96:d6:98:09:76:b3:2f:c7:8f:86:dc:66:37:
9d:4f:c9:4a:72:ae:21:c3:d2:2a:79:67:4a:df:df:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C5:E6:84:9F:1F:46:54:33:65:F9:DE:4E:BB:C5:E2:20:9C:3B:11
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:4b:11:30:ff:47:ea:45:db:8c:41:48:70:fe:97:cc:d7:
29:4e:a5:c9:6f:5d:b7:a5:9c:19:4a:ac:25:20:15:ba:4d:8a:
33:04:c9:f5:c2:e5:ee:dc:c6:35:82:a6:b2:99:3c:e0:bd:4c:
ce:a4:86:78:71:89:b3:b5:4b:9c:4b:87:18:43:05:04:00:03:
45:40:3f:f6:7f:c0:13:39:51:60:1f:15:aa:a4:7e:f3:eb:a5:
36:81:92:49:86:3d:3f:ca:28:f3:53:7f:1c:01:27:dc:a3:1b:
41:78:4b:25:c9:7a:29:c8:44:00:bf:87:53:36:ef:6d:e3:3b:
af:3e:9e:c1:6a:91:e9:1c:de:f8:f5:1c:e2:49:13:ca:6c:a7:
50:b8:9f:ab:3e:14:29:dc:bd:3d:d3:3e:60:3b:2f:07:cb:d0:
2f:4f:68:e6:0d:0a:88:2a:9e:77:36:fb:54:10:ae:59:63:a6:
da:bb:7a:ce:c2:29:9c:41:78:ff:ca:ee:97:56:b6:92:69:8a:
25:83:1d:f8:ae:86:1b:14:9a:b0:a1:f5:24:bb:a7:43:94:09:
9c:64:20:ad:a5:da:17:8f:45:41:6c:80:3c:7a:5f:86:92:72:
af:06:56:cf:7d:a1:de:72:ff:a3:8f:5f:35:8c:aa:9f:4a:f2:
0f:ad:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:04 2025 by rpki-client