Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: NqDXkTCRQJwU4POZiNmwsBGg82T0fAiwbccbVqKlCPM=
Subject key identifier: 75:AE:42:18:F9:DB:05:DB:A0:EF:8F:AC:6B:0D:11:01:DF:4E:45:C5
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 0199FBEBB0D3F33E99AD909348D3732D204F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 14A2
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: +xRCUJ+uAtXLQ3/AeXG/cpEOKv1K7CTfBJJEibj6X+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b0:d3:f3:3e:99:ad:90:93:48:d3:73:2d:20:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=75ae4218f9db05dba0ef8fac6b0d1101df4e45c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:98:15:79:55:ac:4a:3c:3f:49:d7:4b:04:
82:d7:fb:8c:dd:a0:0a:24:1f:ac:b2:37:c8:a9:ba:
02:de:56:6d:51:f1:16:ee:7c:ec:75:63:7b:72:42:
33:b8:3a:21:16:ab:0c:8c:00:63:25:d8:08:e1:51:
da:d0:19:67:a4:54:66:b1:39:a5:07:34:d1:7e:60:
df:63:d7:08:d3:c5:88:29:37:e5:03:91:4c:b9:52:
05:ff:76:ec:6a:17:f9:e1:f5:54:07:57:82:3f:05:
96:20:28:b5:98:aa:a7:a6:ec:ae:10:45:71:b7:3f:
d1:0a:03:b7:8a:4a:aa:ff:f7:1f:db:df:e1:e2:6a:
d2:9a:a0:27:80:03:2e:cc:04:90:91:11:7e:25:14:
d6:65:95:aa:28:d8:c7:b1:9d:a0:c4:6c:08:d7:e1:
a8:11:50:a4:ad:08:26:80:fa:9f:c7:07:d5:2f:54:
6b:dd:f4:2e:15:45:73:17:82:72:49:36:b6:ed:36:
bd:eb:f0:99:b8:4b:62:14:92:8f:60:48:dd:21:42:
ca:23:4b:df:a9:55:67:fb:c4:0a:07:c7:45:54:d1:
3e:1e:4c:63:88:72:62:ec:0e:d6:c5:23:35:70:5f:
34:fc:27:df:25:91:bb:52:69:dc:4f:85:fe:43:48:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:42:18:F9:DB:05:DB:A0:EF:8F:AC:6B:0D:11:01:DF:4E:45:C5
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:16:90:2e:5a:e6:39:46:98:20:b2:02:b6:e3:d9:b7:f9:c5:
b3:00:10:55:65:20:07:16:02:a7:4b:bc:15:23:50:04:12:45:
89:50:70:44:10:66:74:ec:7d:f3:f5:09:71:6a:7f:ff:a1:29:
5d:e4:83:b1:b0:ff:68:47:73:d6:8d:25:7f:a7:c8:f2:07:4f:
26:9b:b0:e1:03:da:fb:61:ec:db:d3:b0:0b:76:07:82:05:af:
89:91:84:dd:fd:b5:f3:3f:fd:a2:8e:b3:cb:0b:32:a6:a1:81:
20:ca:fe:be:95:1f:bf:da:5a:32:bb:c7:40:1d:c1:d6:88:65:
71:62:a1:62:b7:ec:d4:52:2a:78:97:e3:85:19:f8:35:cc:8a:
0f:de:71:e2:bc:e7:3d:8c:1a:68:24:aa:a5:f2:b3:9f:3a:e1:
61:64:24:34:2a:fd:82:c0:55:ab:b1:0f:b7:eb:96:c5:74:f4:
1f:e4:11:2b:b3:84:eb:3a:16:3b:0b:f1:eb:68:ac:e2:67:7d:
3e:84:d5:17:d3:e4:0b:26:a8:07:8e:20:ee:cc:93:6f:43:b4:
82:24:17:73:1c:a2:c8:13:eb:f1:c9:4a:2c:a1:6b:69:53:9d:
9b:c2:18:e5:6d:72:cb:63:39:da:59:5b:1a:6a:9d:f3:f1:51:
1f:84:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:32 2025 by rpki-client