Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
File: LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json)
Hash identifier: 0l4ZbYTqASGMu/yikCX6xwFWZtgXD3LAMGTqOdlQFiE=
Subject key identifier: 5F:D8:19:DB:69:74:66:E7:B0:DA:60:2A:0D:6B:15:42:AA:E6:15:75
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 0198D583ECDB4EDB180EC4080942C0858091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
Manifest number: 1393
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: 3ClVuGwIZnyzq19yv6OajdRgSck.roa (hash: Pc2ZDdCkzUBbz8l3kHlCiGrzO9OmrpmH04akpnWTzRM=)
2: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: dG4rCInUYfFR4hc6RfY/riSSaEfxqryJUHdKRgMiA7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ec:db:4e:db:18:0e:c4:08:09:42:c0:85:80:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=5fd819db697466e7b0da602a0d6b1542aae61575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:d3:1c:b5:46:9b:6c:4e:86:98:b9:b7:9b:
80:e4:fa:17:b1:2d:c6:84:ef:8e:24:55:af:84:79:
05:b9:fc:de:a1:81:17:1f:5f:52:71:c0:df:cf:4a:
ff:0d:37:d9:c3:fb:db:fe:de:4b:ea:58:5d:85:ee:
3c:96:11:70:7a:ac:cf:83:bc:6c:1c:30:b5:1b:67:
b7:9c:75:2e:a3:9b:33:1f:65:3c:f9:91:8f:1a:2f:
b4:0b:65:1d:2b:e5:4d:03:86:17:62:76:3f:92:5f:
c0:3a:81:1f:29:4d:15:85:c0:27:38:3e:0b:35:f0:
49:e2:e7:99:6b:7e:82:05:cc:89:dd:66:79:3e:74:
35:d7:a0:90:37:df:cf:81:e7:0d:fc:bb:ed:a8:84:
e4:6d:49:ac:34:b1:77:ae:7c:1a:fd:d5:38:e3:fd:
d1:38:fa:49:57:81:08:6a:2f:37:7e:f7:33:a1:d7:
44:97:39:9c:19:0c:69:d4:70:a0:78:e3:73:76:a0:
21:61:42:c4:c9:12:e3:1d:95:e9:b5:32:1b:50:37:
a6:e4:a1:64:be:b0:ce:a5:0b:b7:ab:41:bb:2c:a1:
a1:93:1a:d4:73:8d:6b:be:9d:10:8e:b2:ca:b6:51:
96:b3:af:af:4f:5d:1d:7f:c6:62:34:25:da:7d:a2:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D8:19:DB:69:74:66:E7:B0:DA:60:2A:0D:6B:15:42:AA:E6:15:75
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c4:f0:7e:6a:41:f7:3e:ab:c9:3e:85:ad:04:bf:84:8f:ac:
d5:41:32:32:04:9f:6a:3d:89:02:e9:42:40:b7:a2:f2:5b:81:
a9:1b:06:e6:21:78:91:74:55:d2:51:ee:97:95:27:03:16:ff:
2b:0b:3a:8c:c6:39:c5:71:37:29:53:4d:55:f1:01:c3:e8:c4:
62:71:bd:ff:82:b3:86:bb:b9:6d:ed:74:20:6e:8e:c1:c6:27:
a2:eb:3a:51:9f:51:26:d0:c8:e9:f3:0d:cc:ba:ad:47:3b:26:
57:8d:ae:61:79:7c:1a:41:f6:33:65:55:35:a6:ad:ec:d9:7d:
04:e7:ec:83:4b:b7:77:8b:5c:af:dd:c4:bc:3e:e5:e7:3f:6a:
fb:8b:e5:70:46:98:ff:b6:c0:95:40:fa:8d:b8:d0:47:de:9e:
75:d8:7b:bc:1e:c9:5d:67:cb:22:ab:e9:b3:a5:20:9f:ea:fd:
e1:c8:8a:1f:2c:29:96:e5:a5:19:0d:ae:44:4c:e5:46:e0:aa:
d5:1d:ad:0c:3b:74:24:36:6c:81:8d:b6:a5:bd:9d:a5:70:cf:
51:f8:6c:42:9a:f8:ea:3a:b9:c6:dd:5e:59:21:1c:3e:54:e3:
12:1f:f9:7c:cb:b4:3c:8f:2a:87:ed:13:79:5e:e9:10:e8:f3:
13:a1:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:57 2025 by rpki-client