Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
File: LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft (raw, json)
Hash identifier: VZcQFkFw9qWAq0ilMeG1j4W8X2d65hgraI/x+zG9vic=
Subject key identifier: 2E:24:C4:F3:D7:E6:A1:65:EB:07:77:BD:0F:A3:BE:CA:B3:58:B0:BD
Authority key identifier: 2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
Certificate issuer: /CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Certificate serial: 0197B890081F68D82EAF2EFB03DED7628212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
Manifest number: 0D16
Signing time: Sat 28 Jun 2025 22:02:16 +0000
Manifest this update: Sat 28 Jun 2025 22:02:16 +0000
Manifest next update: Sun 29 Jun 2025 22:02:16 +0000
Files and hashes: 1: LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl (hash: cXmrGr9GV42e5/lUWpCtjxZrlMFykSLhxel3rZljnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:08:1f:68:d8:2e:af:2e:fb:03:de:d7:62:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Validity
Not Before: Jun 28 22:02:16 2025 GMT
Not After : Jun 29 22:02:16 2025 GMT
Subject: CN=2e24c4f3d7e6a165eb0777bd0fa3becab358b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:05:7b:2e:ff:e3:c3:7c:83:81:1b:2c:9a:
c4:6a:9b:48:ef:69:40:59:85:2e:97:01:16:bc:b3:
5a:1d:b2:c0:f0:68:59:24:4b:a7:36:ac:32:77:cc:
49:f5:f0:2d:c8:6e:0d:d1:47:48:eb:c2:66:fc:86:
bb:72:9d:9b:b4:3a:c2:30:ff:75:5d:de:73:ed:5c:
cb:28:41:3f:09:dd:a9:92:a1:e2:60:cf:14:5f:70:
64:3b:ff:80:c0:6c:12:b3:e6:23:0f:a6:91:67:2c:
6f:e7:3e:f9:a6:fc:87:27:29:a2:da:94:f2:48:33:
84:6c:00:53:a8:40:d0:2b:40:38:4f:cc:0b:0b:e2:
2c:ae:33:6d:ab:ed:aa:35:1d:13:d8:4d:8c:c1:85:
60:ab:56:00:7e:0f:c0:c8:c9:49:a3:44:ef:45:f9:
7b:be:09:91:26:c4:93:ec:6b:7a:ac:53:5f:8d:cd:
66:a3:bf:9e:b5:32:74:53:fd:0f:44:4f:7c:02:57:
ae:5e:be:e0:e0:02:92:ac:ae:77:28:6d:f1:38:33:
bc:28:a2:5b:60:dc:ef:23:bf:f3:ff:5c:1f:99:29:
d8:d2:30:c8:51:79:0e:1d:cd:d3:af:0f:92:68:c7:
87:06:5b:bf:54:1f:2a:1e:aa:ea:f2:d6:64:10:45:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:C4:F3:D7:E6:A1:65:EB:07:77:BD:0F:A3:BE:CA:B3:58:B0:BD
X509v3 Authority Key Identifier:
keyid:2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:db:85:c1:30:14:2b:8a:95:ae:09:ba:d1:67:0a:23:1f:e2:
25:0a:24:0f:52:f0:2b:79:ec:6c:e3:aa:35:c8:d4:5b:51:35:
37:2a:84:06:83:b1:c1:36:2e:bf:2c:5e:23:25:2d:85:cf:8a:
4b:3a:9b:9c:04:0a:c1:2a:9c:55:45:b0:5c:4c:18:db:8d:48:
89:82:7b:19:99:33:05:33:35:0e:f2:17:9c:2b:56:d1:14:1f:
05:f7:1e:cf:74:bd:25:97:fd:6a:af:1c:80:7c:01:d5:a8:51:
35:8d:89:bf:b9:b6:ab:d8:70:47:97:66:85:64:87:07:26:09:
d5:6c:d7:5e:ea:28:13:53:eb:2d:1d:e4:76:32:fd:f7:23:30:
3d:4b:fb:9f:dc:9a:fc:48:90:54:bb:81:7b:2e:90:fd:97:d4:
00:4d:23:31:ce:a5:c3:2b:e9:46:72:67:2b:0c:d3:cc:23:66:
26:2f:1e:49:ab:59:af:f8:e3:dd:25:a7:4f:55:0f:b2:eb:18:
b9:cd:ad:9a:21:e5:82:e6:ec:7b:e2:a5:b5:01:9c:88:a3:ae:
54:ea:6d:ff:3d:66:1e:a1:1c:dc:8d:72:87:ca:d9:f2:79:d7:
10:43:28:cb:45:6c:21:e8:5c:72:0a:bf:ae:05:b5:a8:a5:4a:
83:cd:a4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kAgfaNgury77A97XYoISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTgyMjAwOGQ5Y2M3MDEyZDYwMzA0MjliMjhkODU4ZGJi
YWNhNDMwHhcNMjUwNjI4MjIwMjE2WhcNMjUwNjI5MjIwMjE2WjAzMTEwLwYDVQQD
EygyZTI0YzRmM2Q3ZTZhMTY1ZWIwNzc3YmQwZmEzYmVjYWIzNThiMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sMFey7/48N8g4EbLJrEaptI72lA
WYUulwEWvLNaHbLA8GhZJEunNqwyd8xJ9fAtyG4N0UdI68Jm/Ia7cp2btDrCMP91
Xd5z7VzLKEE/Cd2pkqHiYM8UX3BkO/+AwGwSs+YjD6aRZyxv5z75pvyHJymi2pTy
SDOEbABTqEDQK0A4T8wLC+IsrjNtq+2qNR0T2E2MwYVgq1YAfg/AyMlJo0TvRfl7
vgmRJsST7Gt6rFNfjc1mo7+etTJ0U/0PRE98AleuXr7g4AKSrK53KG3xODO8KKJb
YNzvI7/z/1wfmSnY0jDIUXkOHc3Trw+SaMeHBlu/VB8qHqrq8tZkEEWhWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4kxPPX5qFl6wd3vQ+jvsqzWLC9MB8GA1UdIwQY
MBaAFCyYIgCNnMcBLWAwQpso2FjbuspDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81MGFjMTItZmQ5My00OTM5LWEyZWYt
NDFjYTJkM2FhZTcxLzEvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81MGFjMTItZmQ5My00OTM5LWEyZWYtNDFjYTJkM2FhZTcx
LzEvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntuFwTAU
K4qVrgm60WcKIx/iJQokD1LwK3nsbOOqNcjUW1E1NyqEBoOxwTYuvyxeIyUthc+K
SzqbnAQKwSqcVUWwXEwY241IiYJ7GZkzBTM1DvIXnCtW0RQfBfcez3S9JZf9aq8c
gHwB1ahRNY2Jv7m2q9hwR5dmhWSHByYJ1WzXXuooE1PrLR3kdjL99yMwPUv7n9ya
/EiQVLuBey6Q/ZfUAE0jMc6lwyvpRnJnKwzTzCNmJi8eSatZr/jj3SWnT1UPsusY
uc2tmiHlgubse+KltQGciKOuVOpt/z1mHqEc3I1yh8rZ8nnXEEMoy0VsIehccgq/
rgW1qKVKg82k5w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:07:40 2025 by rpki-client