Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
File: LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft (raw, json)
Hash identifier: E/kzsBp4EYXuprzZOkuZZj+uRkCW8etjczOSlKdz9To=
Subject key identifier: 96:87:7F:7D:7E:12:CA:3D:9E:AC:95:3E:48:99:C1:BA:D5:36:47:6F
Authority key identifier: 2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
Certificate issuer: /CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Certificate serial: 0198D661427DDDEA970368E884627433B796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
Manifest number: 0DAA
Signing time: Sat 23 Aug 2025 10:02:34 +0000
Manifest this update: Sat 23 Aug 2025 10:02:34 +0000
Manifest next update: Sun 24 Aug 2025 10:02:34 +0000
Files and hashes: 1: LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl (hash: 278rp7Wyu5plI/zwkSuVk8UhDIg31bKccEUGS+lUc0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:42:7d:dd:ea:97:03:68:e8:84:62:74:33:b7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Validity
Not Before: Aug 23 10:02:34 2025 GMT
Not After : Aug 24 10:02:34 2025 GMT
Subject: CN=96877f7d7e12ca3d9eac953e4899c1bad536476f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:68:ba:77:ad:7c:e7:ac:c4:1a:5f:b4:51:
0e:39:61:e7:35:38:10:71:20:c7:cf:3f:d2:22:7b:
2b:e0:0a:b7:da:93:79:bb:2b:9d:57:4a:03:67:ce:
0f:19:45:9f:70:eb:17:82:15:e7:e4:74:d0:6a:14:
57:dd:6b:12:57:3f:8f:b9:10:69:1c:85:f2:69:03:
1c:71:6d:c5:d0:03:a6:7f:7d:2a:04:c7:75:fc:2a:
7a:00:2f:a7:81:8c:8f:ee:47:d6:4d:66:e2:9e:87:
f2:b0:7b:b0:7d:ba:7b:96:7e:29:73:7c:26:39:c5:
c6:20:be:ca:4b:34:56:e0:5c:97:03:4b:43:1e:36:
11:79:c8:3a:ce:77:f5:c4:73:9a:bd:40:ac:ae:3a:
e8:f0:e2:67:aa:fe:11:8a:4f:e7:34:27:f9:d0:ed:
8c:c2:0a:ae:14:e5:29:05:c6:f7:86:70:04:af:59:
92:06:98:d8:c9:bc:d7:ad:42:b4:32:42:8c:96:45:
48:84:54:6b:d2:f7:63:66:f2:71:7b:40:7c:ed:93:
7e:3f:21:de:37:8d:2a:4b:01:cf:e3:3e:b7:34:94:
fb:33:c1:39:da:88:5c:b9:82:1f:84:de:63:99:2a:
57:90:e8:73:49:73:af:02:f7:07:4a:5a:08:44:07:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:7F:7D:7E:12:CA:3D:9E:AC:95:3E:48:99:C1:BA:D5:36:47:6F
X509v3 Authority Key Identifier:
keyid:2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6c:c3:c2:f4:a4:8e:30:61:e1:d4:a0:74:0a:c0:45:3d:03:
25:96:1f:9d:97:58:2e:02:1a:7d:4b:a0:eb:3f:18:9d:f8:6b:
4b:af:6d:bc:21:7a:01:20:12:f6:eb:a9:dc:0a:76:51:95:72:
ce:dd:28:8b:44:04:bb:09:1b:45:10:c8:0a:31:36:50:1a:21:
1f:98:45:47:5b:5e:51:2d:9a:ce:ad:10:79:48:db:24:ef:4b:
3e:42:93:c5:93:14:ea:a9:cf:2a:44:bf:24:2f:50:98:fd:7b:
81:f6:65:fc:47:ed:34:07:a8:2d:1d:83:c9:a2:b0:8b:e9:05:
56:53:1d:75:39:48:29:70:7c:55:71:18:62:13:4b:10:b8:3f:
d2:f3:52:bd:9e:d4:34:b4:22:0c:e8:5e:ac:31:9d:b4:d4:ca:
1f:54:cd:8f:29:1a:93:34:a1:ab:65:35:0e:f2:d2:27:8b:14:
f7:94:13:42:f3:86:e1:a6:f4:49:cf:88:c8:cd:f2:7c:c3:e1:
31:5d:16:40:11:5f:b0:3a:e3:3f:22:f6:3b:b9:8b:67:69:d5:
dd:ed:c3:cc:1c:d7:da:48:94:2e:f6:5d:31:2c:e5:e3:41:eb:
a9:e9:94:b6:19:db:9a:11:5d:00:75:7d:df:e9:b2:ed:9b:f6:
fa:ef:52:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYUJ93eqXA2johGJ0M7eWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTgyMjAwOGQ5Y2M3MDEyZDYwMzA0MjliMjhkODU4ZGJi
YWNhNDMwHhcNMjUwODIzMTAwMjM0WhcNMjUwODI0MTAwMjM0WjAzMTEwLwYDVQQD
Eyg5Njg3N2Y3ZDdlMTJjYTNkOWVhYzk1M2U0ODk5YzFiYWQ1MzY0NzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoENounetfOesxBpftFEOOWHnNTgQ
cSDHzz/SInsr4Aq32pN5uyudV0oDZ84PGUWfcOsXghXn5HTQahRX3WsSVz+PuRBp
HIXyaQMccW3F0AOmf30qBMd1/Cp6AC+ngYyP7kfWTWbinofysHuwfbp7ln4pc3wm
OcXGIL7KSzRW4FyXA0tDHjYRecg6znf1xHOavUCsrjro8OJnqv4Rik/nNCf50O2M
wgquFOUpBcb3hnAEr1mSBpjYybzXrUK0MkKMlkVIhFRr0vdjZvJxe0B87ZN+PyHe
N40qSwHP4z63NJT7M8E52ohcuYIfhN5jmSpXkOhzSXOvAvcHSloIRAdE6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaHf31+Eso9nqyVPkiZwbrVNkdvMB8GA1UdIwQY
MBaAFCyYIgCNnMcBLWAwQpso2FjbuspDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81MGFjMTItZmQ5My00OTM5LWEyZWYt
NDFjYTJkM2FhZTcxLzEvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81MGFjMTItZmQ5My00OTM5LWEyZWYtNDFjYTJkM2FhZTcx
LzEvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGzDwvSk
jjBh4dSgdArART0DJZYfnZdYLgIafUug6z8YnfhrS69tvCF6ASAS9uup3Ap2UZVy
zt0oi0QEuwkbRRDICjE2UBohH5hFR1teUS2azq0QeUjbJO9LPkKTxZMU6qnPKkS/
JC9QmP17gfZl/EftNAeoLR2DyaKwi+kFVlMddTlIKXB8VXEYYhNLELg/0vNSvZ7U
NLQiDOherDGdtNTKH1TNjykakzShq2U1DvLSJ4sU95QTQvOG4ab0Sc+IyM3yfMPh
MV0WQBFfsDrjPyL2O7mLZ2nV3e3DzBzX2kiULvZdMSzl40HrqemUthnbmhFdAHV9
3+my7Zv2+u9SjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:38 2025 by rpki-client