Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
File: LijWjfjYqxVZsR5zmeYu3DMjyj0.mft (raw, json)
Hash identifier: t2YVVLTj9NjqhMMGmf4CfIlCLMMc1HbKV9cAm0IQgqw=
Subject key identifier: 82:AA:C9:AA:D5:3F:AF:CC:1B:91:35:A7:85:81:D1:92:2A:AD:92:99
Authority key identifier: 2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
Certificate issuer: /CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Certificate serial: 0198D5839528E36CC936F85C7AD39789DF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
Manifest number: 031B
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: LijWjfjYqxVZsR5zmeYu3DMjyj0.crl (hash: ghyU2ThLvTuafOCIORr+ivjtHYC4s8cailua3/30OpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:95:28:e3:6c:c9:36:f8:5c:7a:d3:97:89:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=82aac9aad53fafcc1b9135a78581d1922aad9299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:d7:e5:16:1b:9c:66:e3:b8:92:31:8d:58:
8c:cd:d7:27:37:b0:48:d8:67:5f:69:1b:79:b5:68:
3a:23:60:b4:b5:11:00:9d:76:f0:ce:b9:4d:56:0f:
67:ee:33:a4:ad:ed:07:a0:ef:91:55:a1:0e:73:95:
be:f2:51:50:05:88:93:51:f7:85:6b:34:03:17:72:
cb:ec:d0:be:1b:e0:76:5c:2e:57:b3:79:98:ba:cd:
8d:f7:c2:3e:11:d7:8a:84:94:31:c2:2a:5c:96:e4:
6e:0f:0b:14:53:8b:05:9d:b4:ea:a0:6e:36:db:b3:
87:b0:a0:16:45:23:dc:4d:d2:b8:a2:71:2c:50:3e:
54:e6:d3:46:8c:4a:92:71:9f:9c:ff:4f:40:d1:2f:
69:70:e9:62:d0:50:d1:ab:20:40:5b:57:2a:92:93:
89:83:c7:b5:05:49:75:4a:53:2c:a1:9d:05:be:8e:
87:3e:a5:01:d7:7f:ff:0b:39:6f:65:55:92:ad:a9:
2c:31:bb:97:21:43:7d:52:ad:7e:20:0c:be:f5:65:
12:b5:b6:b4:3d:e9:42:00:41:cb:03:a1:e7:09:f4:
59:6b:82:e5:d0:35:11:2d:90:90:3f:26:dc:bc:cf:
f3:26:14:52:f5:bf:29:76:fc:c2:ee:71:81:8e:4e:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AA:C9:AA:D5:3F:AF:CC:1B:91:35:A7:85:81:D1:92:2A:AD:92:99
X509v3 Authority Key Identifier:
keyid:2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:77:92:59:54:74:70:eb:90:a0:16:57:29:79:25:61:74:22:
36:fa:ac:8b:88:9e:21:3a:e2:1b:77:46:8c:60:cd:55:3e:2e:
17:84:c2:8f:32:17:e7:94:a5:ac:ef:66:30:73:fb:65:65:11:
70:74:f4:a1:14:2c:10:0c:d1:6e:ef:1c:aa:34:ad:f2:9e:0a:
9d:e1:58:ab:9b:4f:ad:7c:19:1a:f8:df:20:ea:e9:c7:ac:4b:
03:77:41:80:a8:ea:c5:81:4e:ef:8b:7a:4c:48:1b:05:29:70:
9e:5b:a0:f5:03:d1:3f:09:a9:2c:a7:65:f6:be:29:1a:0e:ec:
8b:81:79:ea:f5:ee:4e:97:a9:63:93:c0:6c:14:14:11:2d:db:
e8:76:db:25:4d:7a:02:5b:6b:47:68:61:5d:63:a2:81:25:3e:
e4:59:66:64:11:fb:cf:ea:cf:cb:be:4d:2d:47:0d:89:bc:61:
a5:4f:e9:61:d8:66:15:2c:e5:89:7b:55:0a:70:76:76:a9:19:
4c:1f:97:d5:ce:14:b0:7b:8f:4f:91:14:54:a5:53:24:c4:1b:
4b:fb:f1:be:13:db:37:61:8e:03:02:62:30:9d:c3:eb:b0:2c:
67:be:fd:24:51:3e:23:83:66:ed:01:26:17:8b:07:ac:0d:2f:
53:b5:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:13 2025 by rpki-client