Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: W2d140nAxBPlmP8apAxsoXOs0uNyOa+EmAaOBPQwkcM=
Subject key identifier: 9E:D4:4D:03:EC:1E:F7:AC:CB:2E:E4:92:07:FF:49:E4:E6:0B:20:61
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 0197B6D7C293533BE1B9E2C792B33EEF7E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 04E1
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: 9ByEybCE9CIwuPyP4jebxsupnkU.roa (hash: 73w7qQJmQNDu4a4ozvHyeU3dD07eczn+JHcfhr0D3rk=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: 7KwG5vp22GNI28aS6ft39K/OitPKE9o57tCmTh5O6gQ=)
3: bEpAFTKCNxwMFh242P25dpMRFQU.roa (hash: tZcdul/sD62igS+FQVO9jCgrVXqompB4QdjISAhOaRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c2:93:53:3b:e1:b9:e2:c7:92:b3:3e:ef:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=9ed44d03ec1ef7accb2ee49207ff49e4e60b2061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:4d:80:26:68:9f:1d:1a:68:da:91:fa:51:
ed:f9:47:d8:38:78:e4:cf:78:3f:f1:65:9c:42:94:
cc:1b:e3:51:9d:6c:48:73:f9:f1:74:6c:52:b3:77:
85:c6:5e:5e:c1:09:46:15:4c:db:7a:76:73:f8:a7:
f1:66:1f:b9:1d:bf:49:33:24:3d:9a:13:44:89:6b:
ce:c9:33:f8:6b:39:66:87:75:64:48:c8:38:f7:f0:
51:3e:c7:fa:3a:fa:0e:7e:fe:09:3e:d9:52:3e:23:
e9:ea:db:85:2d:a3:c9:84:ea:53:c1:47:29:2d:f9:
e4:f7:25:93:87:7e:2c:04:fc:f4:fb:00:de:f9:02:
45:ab:27:15:24:78:cd:b2:40:e6:ee:2d:91:73:2d:
72:e5:96:d9:26:71:63:b2:2d:43:5e:c5:da:d2:af:
12:e7:d3:ce:d4:d1:54:c9:7c:e2:d9:ac:22:24:b4:
a7:3f:d2:3f:b5:ab:85:58:72:82:d7:78:b4:15:d5:
4e:36:aa:d4:4c:cc:89:2e:08:bf:e7:64:8d:d0:3a:
8d:fb:48:5b:2f:94:b4:70:6d:48:ff:5d:a1:78:ed:
0f:e8:29:55:9e:e4:22:53:1a:3f:31:a3:53:9d:da:
3b:f4:e5:30:29:9c:99:b8:e6:0a:91:4d:3e:f2:0f:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:4D:03:EC:1E:F7:AC:CB:2E:E4:92:07:FF:49:E4:E6:0B:20:61
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:78:65:12:4c:6f:c7:91:df:b6:7f:d9:cc:7e:64:47:ff:8a:
30:66:59:22:75:4c:1d:8d:fa:24:27:df:a3:78:c9:ca:b3:21:
43:85:35:30:58:cc:32:94:47:3f:25:67:48:1b:34:96:41:11:
21:f8:ce:cb:a2:3b:6c:32:40:7d:99:c1:f0:57:26:4f:ed:78:
3c:82:5c:e6:78:ff:64:25:b6:e1:78:8c:4d:80:c1:d4:59:b0:
19:8d:1f:3f:d0:8e:1b:a6:32:be:d9:18:a6:e3:22:42:e3:b1:
9f:e5:fc:68:9d:bf:a1:97:e0:5a:be:33:c9:26:26:b7:e2:4f:
4f:47:1f:c0:42:78:27:71:33:34:f4:8d:37:97:f2:37:88:1d:
f9:f2:86:f3:23:f6:eb:0a:81:18:71:4a:f8:c3:cd:ac:1a:97:
71:40:4f:57:80:7c:38:e7:0f:69:48:87:fd:cf:df:25:2a:80:
32:72:8d:d6:51:cf:c5:b1:b0:2c:59:b1:aa:74:f3:3c:c1:f7:
e1:cb:f7:c5:a7:6a:45:75:19:75:c4:f3:e7:3f:0b:51:7a:19:
24:f4:91:ae:e2:0c:2e:83:be:ad:a0:b5:db:46:cf:24:ef:1c:
e6:11:98:13:2b:63:49:fd:b7:75:4b:66:d4:f7:12:16:3f:d4:
48:9f:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:10 2025 by rpki-client