Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: RpxJPq5JewsKLGbo3S9a16a8OnJ8KRYWnrETAO8B3fc=
Subject key identifier: B2:02:B5:3A:65:4F:90:30:6B:B0:40:73:C2:AC:2E:C3:F1:B5:A4:9B
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 0197B77C7CB3B704CEEC79AF0F16DA6D6DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0AF1
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: rRPKH0riKdCvITMRw/qbcgi9G0tdVMBvi8RKvpAGXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7c:b3:b7:04:ce:ec:79:af:0f:16:da:6d:6d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=b202b53a654f90306bb04073c2ac2ec3f1b5a49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:c8:26:e0:af:83:e7:d5:9d:05:da:45:40:
43:bf:78:7c:aa:4b:c2:2a:55:d1:54:3a:fc:33:99:
5f:ef:55:01:b5:49:91:c9:49:b7:28:41:dd:c4:a6:
00:e6:5c:d0:35:d9:f7:2d:6c:0c:10:bc:2a:f8:42:
f2:76:e9:c5:a0:ec:f0:da:7e:24:be:a0:c7:3b:37:
85:6c:4c:bc:9e:b0:b6:02:7b:62:b5:eb:7e:29:53:
0b:85:03:f0:12:38:03:27:85:02:a7:04:74:d8:3a:
e7:10:58:c8:22:5e:31:ba:fa:c2:5b:41:8c:80:40:
cc:e7:11:ce:86:06:03:1d:45:f5:2f:ad:2d:8c:5a:
8d:36:ea:41:e5:21:92:e5:e3:94:d4:10:10:22:b0:
41:72:78:58:d3:fb:3e:b3:a5:18:3a:db:5b:d3:c3:
57:90:44:58:f8:76:40:c3:2e:4a:7b:9d:15:05:08:
c5:12:c1:ee:00:e8:a1:b1:1b:48:16:8e:e3:0d:e4:
2d:63:cf:fc:27:0e:14:f8:9e:06:7a:05:92:cf:b9:
b3:18:d4:ba:05:1b:a0:a8:40:00:7c:ba:6e:68:af:
d9:9b:e8:28:78:7f:47:14:2f:bf:19:66:59:6b:68:
45:8e:35:be:67:3c:bd:e5:b3:ff:7f:de:fc:76:8e:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:02:B5:3A:65:4F:90:30:6B:B0:40:73:C2:AC:2E:C3:F1:B5:A4:9B
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:29:3b:3f:63:07:57:66:f1:75:9f:5c:af:67:96:2c:b9:eb:
9f:d5:f6:bf:a2:70:4b:da:63:22:98:0b:da:ea:8a:b6:a2:89:
f3:18:61:e1:27:f2:c4:f0:4e:7b:a9:e0:eb:9f:93:c9:78:0a:
28:6c:41:7e:08:70:a6:70:db:71:aa:a7:09:f3:9e:31:ed:08:
e2:a4:5a:bd:7c:88:53:23:ac:be:37:bf:91:4b:71:07:96:3b:
6b:9e:da:63:1c:22:56:35:48:2e:74:ab:5d:99:ae:ca:00:57:
74:bc:7b:0d:f7:5f:ba:c8:f6:5c:a8:9b:ba:4a:4b:12:e8:7a:
01:5c:c9:d0:7e:c4:57:94:70:36:7e:3d:13:5d:ad:2b:a4:ad:
50:ae:d7:67:36:e4:d4:a5:99:a3:5b:b9:30:56:08:95:fe:11:
fd:b1:4e:b6:44:e0:28:3f:4c:46:bb:c2:25:e0:c0:2f:ac:ac:
73:c9:60:de:3a:d1:4c:29:79:bb:73:ca:0a:60:e8:a8:a7:af:
69:ca:9b:d9:2d:c9:1a:8e:b5:63:6b:a7:40:68:f3:c8:fc:e6:
3f:1d:4a:14:8e:bc:0c:75:d2:d4:3b:ac:3b:3f:a5:11:85:98:
08:93:49:c6:79:10:03:64:e3:6c:67:08:42:74:e6:4b:e2:92:
93:9f:5d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:49 2025 by rpki-client