Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
File: ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json)
Hash identifier: 4izWQani1nwd1q9x4L0dz7QM2+7FbSCkHthn2juNZJQ=
Subject key identifier: 9A:05:D2:8B:64:7A:B8:5A:3E:B7:20:50:F5:B6:D4:36:2C:30:1B:8C
Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
Certificate issuer: /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Certificate serial: 0199FBEAE5BD6A98C92CF577E4E5F5F2CF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
Manifest number: 0CDF
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: flK9dI6qS59uuhUTdI9-Lm32F14.roa (hash: zlQ+q1YmxirUq/y5GYQVkTybydvIz392HoitTR1/bAQ=)
2: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: bmN2vO3ZuTlJ6xvvlPecNsmruWJWSgTwf7Yc03FE4s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e5:bd:6a:98:c9:2c:f5:77:e4:e5:f5:f2:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=9a05d28b647ab85a3eb72050f5b6d4362c301b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:09:6a:bc:06:bd:dc:e4:01:d9:38:23:70:
f3:43:da:6c:b8:75:d1:dd:69:01:b4:19:63:ee:ad:
40:8c:9d:85:4c:d7:26:64:12:aa:d9:22:50:b4:87:
97:94:d7:62:8c:54:a9:fa:91:13:3f:12:5f:0e:e8:
72:7c:19:aa:bc:2b:e1:02:51:86:61:47:46:1e:15:
7a:a2:7e:13:73:27:a8:9e:98:26:32:49:97:07:d4:
eb:25:bd:41:50:67:47:3a:21:cd:75:63:92:87:5c:
02:bc:e6:20:17:48:da:cd:f1:b2:12:f8:38:7d:7b:
cb:dc:41:5d:d4:e6:7b:91:3d:4d:96:02:8e:1b:c3:
90:45:f3:5a:58:01:ea:35:5f:81:95:85:33:cf:36:
35:77:ca:38:58:77:02:51:18:b3:72:b5:29:89:75:
75:ab:11:ed:a7:c8:7a:3e:4a:63:3f:86:ee:c4:17:
3b:82:8d:63:1b:7f:32:8b:43:fa:61:3e:8f:ab:05:
b5:ff:4a:8e:d2:87:61:ef:8e:78:e2:2a:65:71:81:
b0:07:61:b7:79:d8:03:27:0f:f9:3f:26:bf:d7:0e:
6b:30:b3:1c:32:db:30:eb:a1:f5:5f:a7:e0:a8:ca:
ad:63:47:4a:bf:75:8c:be:05:fa:1f:bf:45:4b:5d:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:D2:8B:64:7A:B8:5A:3E:B7:20:50:F5:B6:D4:36:2C:30:1B:8C
X509v3 Authority Key Identifier:
keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:63:56:3d:d4:21:f1:59:be:15:1f:d7:27:e3:c1:38:df:ca:
fe:af:9c:39:8a:c2:e9:24:77:07:97:02:9c:8c:9d:af:20:d4:
32:d8:9a:68:72:35:67:f8:d2:2b:72:97:59:1c:c7:66:ee:3a:
97:d2:66:72:43:c6:3e:fd:f0:c4:a0:20:a4:bf:57:20:b6:05:
b4:25:50:17:a0:5d:28:62:d1:7a:10:ff:35:9d:67:4a:53:2e:
61:56:ae:8b:fd:a8:a3:77:93:d9:b4:e6:3d:d1:c8:93:dc:da:
f3:6f:e5:0d:6f:5c:1c:55:aa:1f:51:44:14:6f:a8:04:5b:9a:
6d:f1:e0:3f:34:bc:6c:e7:29:cc:0d:b4:81:9e:5a:49:01:7c:
14:f5:35:3d:98:cc:d6:11:32:8d:e7:a1:2a:9c:2a:ab:7b:07:
3b:2b:f4:6e:b7:f8:53:52:4f:f4:14:fb:c0:32:62:78:ef:1e:
18:a7:08:37:b6:09:78:cc:3f:ad:5b:ef:bf:de:ae:5f:36:22:
3d:96:a9:95:a6:4b:37:6b:8e:b6:1f:a4:88:68:54:25:55:ea:
de:7c:ca:a1:ee:0f:08:5b:ad:4c:61:20:35:4b:ab:db:73:56:
d2:2e:23:c8:72:93:9f:87:60:88:d7:77:89:11:7a:2a:a8:52:
bd:d8:fb:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76uW9apjJLPV35OX18s9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2M2EwZmM0N2E3YWRmNjI4NDVhZDZkY2Q3ZmI3NjFhNmMx
OWZlZGIwHhcNMjUxMDE5MTAwMTM5WhcNMjUxMDIwMTAwMTM5WjAzMTEwLwYDVQQD
Eyg5YTA1ZDI4YjY0N2FiODVhM2ViNzIwNTBmNWI2ZDQzNjJjMzAxYjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl88JarwGvdzkAdk4I3DzQ9psuHXR
3WkBtBlj7q1AjJ2FTNcmZBKq2SJQtIeXlNdijFSp+pETPxJfDuhyfBmqvCvhAlGG
YUdGHhV6on4TcyeonpgmMkmXB9TrJb1BUGdHOiHNdWOSh1wCvOYgF0jazfGyEvg4
fXvL3EFd1OZ7kT1NlgKOG8OQRfNaWAHqNV+BlYUzzzY1d8o4WHcCURizcrUpiXV1
qxHtp8h6PkpjP4buxBc7go1jG38yi0P6YT6PqwW1/0qO0odh74544iplcYGwB2G3
edgDJw/5Pya/1w5rMLMcMtsw66H1X6fgqMqtY0dKv3WMvgX6H79FS11cpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoF0otkerhaPrcgUPW21DYsMBuMMB8GA1UdIwQY
MBaAFJY6D8R6et9ihFrW3Nf7dhpsGf7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUt
ZTQwNDVkOGNmZThmLzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUtZTQwNDVkOGNmZThm
LzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGNWPdQh
8Vm+FR/XJ+PBON/K/q+cOYrC6SR3B5cCnIydryDUMtiaaHI1Z/jSK3KXWRzHZu46
l9JmckPGPv3wxKAgpL9XILYFtCVQF6BdKGLRehD/NZ1nSlMuYVaui/2oo3eT2bTm
PdHIk9za82/lDW9cHFWqH1FEFG+oBFuabfHgPzS8bOcpzA20gZ5aSQF8FPU1PZjM
1hEyjeehKpwqq3sHOyv0brf4U1JP9BT7wDJieO8eGKcIN7YJeMw/rVvvv96uXzYi
PZaplaZLN2uOth+kiGhUJVXq3nzKoe4PCFutTGEgNUur23NW0i4jyHKTn4dgiNd3
iRF6KqhSvdj7qQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:30 2025 by rpki-client