Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: VnQ5igA2ab+7/2qGSy4/aed4fJCMewwXQoygYhx6J4Y=
Subject key identifier: 7B:F9:6E:0C:BC:34:01:7B:DD:17:FF:3C:91:EB:44:70:26:E5:F7:6E
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 0197B5C4B15D99FCAEEA2CC70C3F4542BA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 1422
Signing time: Sat 28 Jun 2025 09:00:55 +0000
Manifest this update: Sat 28 Jun 2025 09:00:55 +0000
Manifest next update: Sun 29 Jun 2025 09:00:55 +0000
Files and hashes: 1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: XEdFK+RVs55RkoUV9qJEsZtrP96ct3jAA+4FzH2dD8k=)
2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:b1:5d:99:fc:ae:ea:2c:c7:0c:3f:45:42:ba:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Jun 28 09:00:55 2025 GMT
Not After : Jun 29 09:00:55 2025 GMT
Subject: CN=7bf96e0cbc34017bdd17ff3c91eb447026e5f76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:e7:58:99:ff:9f:98:43:b7:46:0d:40:11:
6b:4c:8e:ab:4c:6a:57:22:d9:8d:97:f4:55:d2:4c:
f7:eb:ae:8c:e0:7b:6e:43:ca:ca:9e:71:8e:9d:27:
13:54:8e:31:df:26:e1:d8:58:33:4e:a5:00:e5:11:
56:3a:ea:c4:3c:c3:54:f5:5e:cd:2d:da:5c:60:90:
94:ae:aa:c5:af:9d:71:2f:65:3c:06:98:d5:50:b5:
6e:8e:76:af:48:4c:f3:79:1e:ab:6b:10:1b:02:46:
5e:17:9b:4f:60:21:ab:1c:fa:63:3e:b9:cf:59:4a:
10:5c:f3:35:aa:4e:22:3c:0f:18:12:c2:c3:d9:6c:
88:61:81:9a:3f:c0:1c:83:77:95:7b:3c:11:25:c7:
cb:9f:41:4c:4c:5c:4e:89:18:12:c8:16:bd:7f:c4:
54:14:41:47:54:be:04:12:5b:c8:42:f0:e3:0d:e0:
2a:4a:b9:be:42:9d:8b:70:31:e3:f3:b1:20:86:45:
d1:54:e7:22:55:73:31:2b:c4:78:43:73:ef:62:a8:
ea:54:83:70:0a:4d:b8:87:dd:ae:76:cd:09:ff:8b:
86:ed:8e:c5:ed:ae:d1:90:44:1d:a9:f8:cc:2d:5b:
77:8f:4d:de:b1:02:a4:e7:1d:5d:5a:c5:5b:07:e0:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F9:6E:0C:BC:34:01:7B:DD:17:FF:3C:91:EB:44:70:26:E5:F7:6E
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:30:f9:52:5c:20:e6:a6:33:b0:22:9d:a8:1d:0b:be:ed:62:
42:c6:8c:df:bc:90:80:58:90:2c:41:2e:21:8d:ee:a4:17:50:
69:3f:37:54:0e:41:69:e9:8d:a2:f6:5e:2a:b4:e2:3d:09:f5:
50:5a:b4:3b:e4:b2:35:dd:8c:dc:10:d5:a3:b5:ac:db:19:b3:
8e:14:7d:74:aa:4e:0f:a6:4b:9f:53:5e:7b:35:34:3b:8a:c1:
aa:87:fc:d6:a1:aa:c2:9d:fd:00:cc:ff:5b:70:f2:86:3a:bd:
82:2d:69:d4:e8:b8:01:62:87:37:ab:e3:39:bc:4e:16:13:3a:
e4:24:1e:f1:ee:9e:8e:ed:f7:36:05:58:b7:9b:95:40:ef:b6:
d7:69:1d:fd:24:c3:52:05:2a:df:90:f1:13:52:27:a3:06:4f:
99:f2:a1:09:6f:f7:9e:1b:8a:c8:3b:62:6a:05:7a:ca:27:60:
5c:cd:6a:f2:9a:ae:30:d0:52:9e:bc:cc:11:47:93:82:e7:77:
55:80:3b:f8:15:cc:44:b8:5f:3a:97:64:01:61:df:e3:6b:49:
85:e3:18:e1:ea:28:e2:00:5a:02:62:97:2e:d4:57:e4:d4:db:
6d:38:a6:7f:c6:47:5a:ba:a4:50:10:8b:0e:0d:2e:1d:ed:dc:
fd:17:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:58 2025 by rpki-client