Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
File: LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json)
Hash identifier: KaW+4KhM1LFdOQt5Hg1Hclam0uSo0fWJgHkHBRgKn0Y=
Subject key identifier: 90:C0:8D:47:62:BF:A4:63:F8:81:8E:AA:68:7F:E0:05:C8:BE:FA:ED
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 0197B5C49EC4EB6DC8BDD496F85F2CF9512E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
Manifest number: 12FD
Signing time: Sat 28 Jun 2025 09:00:51 +0000
Manifest this update: Sat 28 Jun 2025 09:00:51 +0000
Manifest next update: Sun 29 Jun 2025 09:00:51 +0000
Files and hashes: 1: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: eiu5PN9/aG7aXiXy2xz1AKqZCkLMCK9uZ6ol9lfcWJY=)
2: PP9bgdUS-fVj1MX8DGYePZt8TkE.roa (hash: ostFORLB1aqakHZ76u6KB5do/0qYMVa/6OoMMSfXFeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:9e:c4:eb:6d:c8:bd:d4:96:f8:5f:2c:f9:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Jun 28 09:00:51 2025 GMT
Not After : Jun 29 09:00:51 2025 GMT
Subject: CN=90c08d4762bfa463f8818eaa687fe005c8befaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:ab:41:df:8b:26:6b:d4:3a:18:89:6e:00:
cb:53:58:42:b8:da:6a:70:02:b3:1b:25:b9:53:f8:
1a:41:37:c0:af:5c:bd:e1:5a:00:5a:17:ad:b0:23:
f3:8e:13:0a:6c:19:a4:f6:cd:aa:05:18:ed:85:87:
94:a1:ee:37:e4:93:da:1c:ba:8b:aa:43:3b:9c:77:
1e:60:45:cc:1a:2d:0c:17:81:aa:7f:b6:3b:56:7e:
cc:c3:29:9b:97:bc:8d:72:3f:d9:18:d8:b1:65:9d:
99:85:d8:b5:ba:15:68:19:d0:d5:c8:08:3e:d1:d4:
f2:7c:6e:09:4b:14:7b:b2:4f:68:d8:f7:8d:62:f2:
0e:45:da:6e:e2:42:19:aa:fd:40:eb:4a:0b:ee:13:
0f:93:61:fe:8c:c2:49:0b:65:be:0e:51:92:a5:bf:
10:3d:03:70:ee:24:78:9a:b0:8e:ae:e8:2b:33:e4:
a9:c9:cd:75:63:26:ca:bf:18:a4:17:09:f7:4d:52:
1c:9f:5e:80:a5:3c:f3:dc:79:fc:62:8e:20:33:f9:
ea:f9:c8:e7:f8:9b:c0:c3:36:a5:71:4a:47:1d:2a:
94:76:be:dd:28:18:d4:f6:a0:ed:7c:30:10:df:b2:
25:98:a7:7b:10:78:3a:05:e0:ab:24:44:f3:c4:1e:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:8D:47:62:BF:A4:63:F8:81:8E:AA:68:7F:E0:05:C8:BE:FA:ED
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:22:b5:7c:50:03:38:e4:ca:5b:eb:82:49:1f:9c:f9:6d:74:
b7:2a:80:ee:49:12:6e:42:fb:20:88:b2:78:e5:1e:ce:81:7f:
30:b7:44:54:f2:f0:f3:70:e7:3e:e4:ec:b0:1b:4a:80:92:fa:
9d:dd:ec:5e:d6:75:06:a7:2e:b0:e6:5e:a8:a3:df:a3:03:55:
7a:9f:41:d3:2f:3b:c8:66:30:42:7e:52:9b:5e:39:56:a9:c2:
63:2d:41:73:59:70:6e:3a:dc:45:93:d4:13:ba:e9:9c:12:76:
98:fd:a4:dd:ea:ca:77:fa:88:da:42:2d:21:4c:34:ab:93:ff:
1f:da:bf:b7:7a:2c:9c:63:61:3c:f8:0d:0b:63:64:54:b8:ae:
f6:57:09:b7:99:1c:49:47:4c:02:ea:a3:be:50:ad:c6:8c:13:
d8:01:11:29:f8:97:69:51:50:d1:00:a6:74:8d:a8:3c:68:47:
c6:3e:da:5f:50:93:c2:c9:53:c7:e4:81:ec:e0:69:b7:9e:d2:
51:28:ce:12:52:75:69:24:0c:9f:29:c4:81:64:58:00:e1:9e:
1e:ed:e8:cb:f0:04:00:d2:2b:45:31:ce:7a:7e:5f:56:ec:96:
06:c3:8f:5d:11:3a:d6:31:72:65:b9:1c:69:2e:69:c2:06:f0:
5e:78:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:50 2025 by rpki-client