Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier: +H7OqR6cj0dhayXXcblM21SIKqziAZd64MISLPqhCfg=
Subject key identifier: 56:74:0B:C1:8B:E1:78:0A:4F:11:F7:9A:12:A1:84:0D:67:61:86:AC
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 0198D515BAB306B74BBF924CCB44624D5529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number: 08D1
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: h70KJCNhFM5raXx0Ey8X3WCsOvjUeG6mUoAqsw/yczs=)
2: VkqCgv7KNS6e1PhzxHv9intvH9s.roa (hash: UPK71sxaCRmFF2DDfT2tfgKHGZFs8344I8c3t19Opag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ba:b3:06:b7:4b:bf:92:4c:cb:44:62:4d:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=56740bc18be1780a4f11f79a12a1840d676186ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:25:aa:be:40:d4:be:b2:2c:1d:39:5a:cb:
17:d4:37:92:97:24:f8:10:d0:89:3a:94:04:ad:41:
be:03:7b:58:93:15:df:07:ec:10:52:4c:eb:db:55:
16:37:9e:96:fe:62:1f:03:3c:32:33:96:31:70:98:
9d:20:6c:f5:81:fd:ac:ba:51:a5:54:0c:7a:c6:ec:
2b:78:74:ba:d6:1c:25:ed:f3:f3:ab:31:42:7d:66:
c5:a0:8e:c0:d5:97:aa:78:21:9c:4f:77:36:98:47:
21:34:7f:43:b4:0e:3b:48:d8:48:24:31:f8:91:ea:
55:bf:a2:15:89:f6:b8:bb:9d:73:1b:79:fa:10:6c:
d8:84:78:92:04:55:7e:0a:d4:c2:74:c8:48:b0:8d:
7c:cd:6e:0e:17:99:f6:9d:4f:11:4e:99:c8:63:3f:
82:5b:36:b7:1c:df:fd:38:70:b0:e9:c3:2a:b8:af:
58:d3:27:e7:0f:79:d0:b7:2f:db:df:50:64:39:93:
d9:9e:e3:f0:98:9b:e6:8f:ca:8d:01:c5:47:e2:18:
c4:63:3b:f4:77:56:d4:49:1d:89:0f:7b:d1:4a:26:
2c:dc:5b:32:10:5e:9d:f7:a6:9b:e4:20:c6:7f:07:
06:bb:52:c2:56:01:27:f2:aa:29:ee:76:9b:f1:a5:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:74:0B:C1:8B:E1:78:0A:4F:11:F7:9A:12:A1:84:0D:67:61:86:AC
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9a:0f:c4:7c:31:4f:6c:b8:dd:48:a2:f4:6e:4a:72:94:48:
66:ad:a6:7b:46:1a:ee:7c:75:f9:71:cd:22:98:0e:94:cf:c7:
47:57:ff:29:58:e7:e5:f2:29:e3:74:cf:18:9c:bb:6b:0a:e1:
fc:83:98:64:f2:d7:eb:b2:ed:86:14:fe:98:6d:18:90:38:6a:
7c:bb:2d:a8:c8:43:e7:2f:e7:65:7f:23:7f:ce:53:a9:47:c4:
28:d0:c7:25:10:fc:75:95:51:64:b2:05:3a:21:8e:4d:58:d3:
8d:d5:8a:d0:8a:11:ce:0c:36:b3:7c:bd:b1:a0:8a:2b:7d:84:
48:b7:78:d3:ba:a9:87:e3:e4:a0:83:d7:21:df:73:2d:c5:13:
61:47:10:fb:67:e8:83:b9:fd:d8:ac:55:8c:69:15:99:b0:07:
21:11:e8:c1:78:ee:6d:27:49:38:a5:1c:27:43:ad:3a:ff:72:
ff:4c:c4:4a:a7:e4:27:1e:ad:65:38:1e:f4:73:71:2c:0d:c3:
78:2c:61:6b:91:2f:ff:57:76:37:0b:83:22:cc:78:7c:cb:02:
bc:6a:2d:ef:90:bc:94:92:00:e5:00:b3:62:e6:87:eb:50:33:
65:ab:10:b3:62:29:1b:f1:e6:6b:b8:87:a7:4d:97:a9:82:98:
df:d5:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:43 2025 by rpki-client