
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier: qeW81LTBTL2mU/LW02hRYhR+h7rAdnu1cmwP1f3IpIU=
Subject key identifier: 78:84:F7:D8:40:EF:A9:E2:63:E1:BC:E8:C1:B4:09:9C:F7:0D:CF:DA
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial: 0197B77C4AD4936969A5CE4A0269FBA5F2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number: 04C3
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: EN/7to6nIY3XpUwPhOS1+Jqc4QQEMEfDKh4QQkMhAtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4a:d4:93:69:69:a5:ce:4a:02:69:fb:a5:f2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=7884f7d840efa9e263e1bce8c1b4099cf70dcfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:0b:19:e5:1d:db:3a:c4:21:a0:a5:56:ba:
ab:d9:c4:41:52:22:02:a3:b8:b3:df:f9:b5:a0:db:
cc:aa:0a:f6:3f:0b:8f:4a:2e:cf:d6:98:65:b1:70:
e5:d7:c0:c6:40:58:82:b2:8a:e0:43:7c:c0:69:a0:
60:36:b7:15:4b:5b:ed:2d:46:a6:ba:24:64:15:7d:
eb:bd:50:03:24:36:ea:01:1e:dd:33:13:de:2c:39:
67:36:3e:42:4b:4b:5a:84:03:14:14:47:2a:54:39:
bf:db:2c:05:98:32:ec:a1:2b:3e:9c:bc:56:87:54:
8b:95:08:d2:f9:1a:01:c2:e0:6d:05:6c:b6:2b:a7:
95:16:0a:df:3d:2e:79:ad:dc:02:89:99:fc:c1:5c:
68:3c:f3:a1:fe:6d:c8:2e:53:9f:23:2f:2c:3f:a7:
b3:e5:e4:2e:54:9c:1f:f2:e4:4f:78:05:29:3c:52:
21:f1:1a:fe:d5:f8:d3:2c:01:b2:7b:08:87:49:f5:
a9:f5:4e:c9:ed:2d:b3:a4:42:5e:4c:4d:02:96:08:
6b:6c:db:76:4c:21:ac:c9:71:07:2d:a1:31:81:a3:
39:f8:3f:bc:b6:3d:f4:1b:6b:8f:02:99:89:72:6e:
b1:d4:82:6e:12:56:af:7c:06:f8:59:9f:f3:b9:86:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:F7:D8:40:EF:A9:E2:63:E1:BC:E8:C1:B4:09:9C:F7:0D:CF:DA
X509v3 Authority Key Identifier:
keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:42:04:51:e7:63:ea:94:29:29:ce:46:bb:52:a0:e0:66:8c:
97:5a:16:ba:0b:c5:56:18:7e:ab:e8:71:43:ac:82:c3:49:97:
67:5b:f3:63:7f:d4:10:90:10:fa:33:ce:20:56:59:e2:90:23:
65:56:8b:e6:a5:fd:d7:a0:86:f4:7f:ab:b4:fa:4d:2a:9c:df:
76:ef:ad:23:d2:c7:b5:3e:6a:ea:37:e4:9d:41:01:59:88:d5:
d0:e4:5e:6b:1a:47:d3:5a:8b:7a:57:d7:ba:9e:54:ad:f5:7d:
e1:58:f0:cd:90:5b:ad:9c:bd:e0:ac:40:a8:8a:ef:77:da:90:
2c:7e:da:9e:41:ab:5a:6b:e9:22:5f:5a:26:4f:8e:83:6b:b0:
0a:9d:d2:5e:28:ca:ed:67:51:37:5d:c7:d4:6b:99:c4:06:4d:
ed:a7:07:da:96:be:83:4c:c9:1e:b2:b4:25:98:17:49:31:44:
dd:1f:3a:c8:19:fe:ff:2d:65:39:f1:13:a3:d4:f9:89:58:a4:
ef:7a:00:2f:81:80:70:c4:2c:62:b3:2e:b1:17:3d:cb:c4:c3:
ee:1c:e2:3f:5c:00:74:84:a9:d8:5c:a1:d8:d5:32:5b:8c:d4:
b3:f3:8e:99:82:14:d8:70:7c:a8:c2:2e:78:b8:01:ff:90:b1:
76:56:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:21 2025 by rpki-client