Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: CJXI+InDhiOXaVJFCOZpVr0C/n2wpoO5YJDiQ7JkF+Y=
Subject key identifier: 11:20:64:1F:97:E5:E8:DB:AF:87:A7:DC:97:BD:A2:AB:EF:43:80:74
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 0199FEB501C2EFE475DFB8BF369786B239E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0C1F
Signing time: Sun 19 Oct 2025 23:01:39 +0000
Manifest this update: Sun 19 Oct 2025 23:01:39 +0000
Manifest next update: Mon 20 Oct 2025 23:01:39 +0000
Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: p5OsTYUn+ap7TdKdmXGKxChfJOUQvD0VdlsUH9IOjbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:01:c2:ef:e4:75:df:b8:bf:36:97:86:b2:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Oct 19 23:01:39 2025 GMT
Not After : Oct 20 23:01:39 2025 GMT
Subject: CN=1120641f97e5e8dbaf87a7dc97bda2abef438074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:d5:e0:87:4a:b4:a8:d1:0d:f5:64:c1:10:
7c:7c:56:08:c6:6f:40:c8:24:b9:66:55:4b:61:ec:
02:45:2d:37:e8:58:9b:b4:96:9c:db:a5:95:99:bf:
82:66:f9:d6:6e:aa:f5:a6:9f:08:64:19:05:85:65:
24:79:38:bb:65:40:3f:42:87:81:d3:c5:cd:f2:20:
a3:65:dc:18:49:7e:db:fc:ca:8c:c4:1d:e5:c5:fe:
04:44:5c:0b:c9:31:b5:b4:b5:a4:f6:a0:be:c7:af:
a0:12:1c:20:f1:14:52:51:f9:b2:23:a7:7e:8d:7b:
3e:c9:c8:44:76:18:45:27:17:00:eb:a0:fd:d7:03:
48:c5:70:03:5c:18:1e:f3:7f:4b:ba:2a:a4:70:cb:
df:d2:ca:e0:17:30:31:cd:fa:46:4b:91:cd:3e:69:
44:c2:0e:8e:ee:2e:2a:8e:15:05:fa:9c:85:ea:6f:
55:1b:07:af:60:01:29:60:33:7b:9a:a0:be:63:34:
06:5c:43:aa:19:75:ed:36:dc:ae:21:41:11:c4:48:
e4:bf:0e:8a:e9:bd:86:f7:27:36:47:5c:53:db:26:
4c:8e:0c:78:57:67:d8:47:eb:5e:7b:60:dd:99:de:
28:d0:50:83:8f:ec:1d:77:09:76:72:7f:8e:bc:c3:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:64:1F:97:E5:E8:DB:AF:87:A7:DC:97:BD:A2:AB:EF:43:80:74
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a9:c2:06:52:41:e2:4b:82:e9:7c:a2:ea:f3:c3:ce:bf:1c:
90:49:5c:bd:67:87:29:34:a2:ae:19:e5:aa:43:3a:a4:3a:3a:
2b:d5:d1:e1:d0:7b:01:5a:3d:e0:00:e8:4d:78:98:36:28:36:
10:fe:5c:a5:be:dd:17:62:4c:c6:e0:4a:86:ba:2f:3b:2f:12:
51:05:a9:22:8a:73:dd:16:10:39:66:c3:1b:25:58:6a:99:cc:
d3:7d:b0:63:24:cf:97:85:8d:7b:a4:a1:de:72:20:3e:84:20:
a8:cd:65:0b:7f:ee:68:6e:9f:31:f3:c5:2c:25:98:db:0a:a7:
c0:ce:8c:fb:25:eb:ec:64:2f:00:4f:6b:50:5c:a5:de:78:bc:
95:6d:b2:ed:29:04:b9:dd:2c:05:26:cd:47:26:3a:62:91:d1:
c9:d4:20:1f:e4:ba:3e:be:b1:4e:b7:41:7a:1e:f1:06:35:2d:
0e:e2:d7:1c:e0:26:1d:db:78:5e:20:01:52:cd:cf:60:88:aa:
cd:e1:27:fd:70:00:21:26:0f:10:fe:83:ac:b8:34:2e:40:78:
7e:9a:d5:df:ea:19:dd:04:b0:ba:cf:54:35:1b:d8:0c:50:3d:
0b:c0:0a:24:5b:36:70:88:e7:d6:42:2d:92:c2:3b:cf:fd:7e:
ff:89:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:39:14 2025 by rpki-client