Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier: 1kl0S53BhYGYxya5JO0FFPL2Cxh9JAsnBjN/jgzVXn8=
Subject key identifier: 60:4E:EF:28:55:9B:15:08:13:B3:7E:26:65:44:A5:1A:29:BE:6F:E6
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 0199FBEB0B3CF851695D68A2B308D1C57498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number: 096A
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: AgRbhD5gS/PewZ7ZSqzQnbxG7CNf60BBQDkTfKyC6mA=)
2: Vjktac0EQutqMz1o5f1-TeAG4AY.roa (hash: 8mwOPd8uKHxcwF0athR1g43eU49G81HPQuicA6jXBsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0b:3c:f8:51:69:5d:68:a2:b3:08:d1:c5:74:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=604eef28559b150813b37e266544a51a29be6fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:86:6a:05:73:cc:4f:6e:6a:ec:83:b3:97:
9b:1e:32:f8:06:5a:66:94:96:ee:00:aa:ae:f5:93:
4c:06:ca:f5:97:e7:ac:30:6d:29:00:8b:12:82:49:
6a:5b:bc:6b:6e:b7:b9:cd:11:6d:4c:72:c3:4a:7c:
ae:39:31:1c:67:0b:c6:7d:30:59:78:01:13:25:c9:
24:45:5c:81:11:9b:48:ee:f8:10:ff:ec:32:70:c8:
f5:84:3d:a3:ee:1a:32:28:f5:6c:36:f0:29:24:d1:
6c:b3:8f:82:64:53:5c:12:b0:8d:de:b4:47:b5:cc:
00:40:f0:88:b3:31:30:84:3f:7e:7d:ff:e9:57:a1:
78:56:b1:41:79:c0:07:6d:ed:f3:64:95:5f:07:d2:
40:2e:a1:a1:83:c0:08:26:dc:6b:a6:10:f8:e1:f6:
2c:d4:21:b0:9f:82:ce:b8:ff:5d:85:5d:07:12:73:
ce:e6:f0:d3:da:32:f0:4f:00:41:c0:00:d1:ca:d5:
bf:e8:d2:b7:89:62:a1:00:3c:90:37:45:6e:13:39:
05:3c:34:01:58:53:43:c9:b3:4e:8d:11:16:33:19:
b7:5d:1a:b6:bf:a5:69:c7:55:44:77:6a:ad:91:3c:
11:85:c9:b0:f7:c2:5f:83:c0:09:93:aa:d7:c3:b1:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:EF:28:55:9B:15:08:13:B3:7E:26:65:44:A5:1A:29:BE:6F:E6
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:77:77:ec:5a:b2:94:e8:7d:9f:47:dd:26:8a:0a:66:a0:7a:
12:28:36:34:39:c8:08:fb:fb:69:da:bf:bf:09:7e:3a:b9:3e:
fe:16:bd:f2:b3:95:18:ca:33:85:08:d5:a4:d3:c2:f5:b3:30:
e8:a1:7f:50:ca:8e:7b:70:f5:94:45:f7:bc:70:bc:c8:04:eb:
79:f2:13:4c:18:d7:2b:76:f4:63:11:7e:21:95:4e:6e:5e:4b:
df:ea:f3:f9:ed:c9:96:c3:e0:b2:16:4b:bf:e7:aa:a3:ad:4b:
10:6b:23:91:dd:8f:69:df:a5:e0:e8:b5:97:1d:25:21:4e:1f:
c2:6f:ad:3b:b9:e7:46:3a:97:7a:4a:aa:0c:0c:36:4f:11:55:
49:af:1d:4d:a2:5d:1a:94:ba:1f:a5:e7:93:f5:bb:96:71:aa:
6d:1e:c2:8f:9c:85:9a:19:c0:70:d1:f4:ec:5f:f6:02:4b:01:
ec:10:81:39:59:5a:f3:e8:0c:77:2f:80:90:a1:d6:5b:d0:c0:
58:6a:99:ec:5c:55:9c:51:37:9a:65:29:91:bd:71:ce:80:7e:
be:28:bc:0d:d9:e8:6e:39:54:df:f4:55:d1:a9:a5:ba:f2:c9:
b3:bf:87:e0:b6:2a:45:b6:bf:f5:bf:e6:07:67:d9:bf:07:28:
d8:8a:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:10 2025 by rpki-client