Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: GkMhiTuWKaESI433HmdRjF/Lh+5M9On0RCBBy30vh6I=
Subject key identifier: 71:E9:BF:97:0B:97:3A:C9:AE:CA:33:B9:23:A5:95:06:67:DA:21:E2
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 0199FB0F19CD2285953818C5DDA3FE36D45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 060F
Signing time: Sun 19 Oct 2025 06:01:34 +0000
Manifest this update: Sun 19 Oct 2025 06:01:34 +0000
Manifest next update: Mon 20 Oct 2025 06:01:34 +0000
Files and hashes: 1: DhJdlSXGg4nwo43i-3hsY3C4PiQ.roa (hash: OLFOl5avnYQnKlew3nA3PZbHQQyKutwAJUJzm6ztUrI=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: EewWeAyQ/uDbpYy8Cp5PpE/JyJbfhEGRiYN5wpRPN1I=)
3: ear6glms6xQEx-sJzJyz2U-vwUo.roa (hash: myzxilbkgn8eg20yO8piaw6MM2eVN5CUHaMGcHJd8U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:19:cd:22:85:95:38:18:c5:dd:a3:fe:36:d4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Oct 19 06:01:34 2025 GMT
Not After : Oct 20 06:01:34 2025 GMT
Subject: CN=71e9bf970b973ac9aeca33b923a5950667da21e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:59:3f:5e:82:93:ca:0c:35:e8:85:2a:9b:
82:10:ad:e1:1b:02:3d:c8:df:4c:7d:da:69:2f:07:
ee:a9:46:9f:bd:19:f7:75:78:6d:32:d5:0c:56:03:
59:86:0c:79:9e:2e:41:4a:6d:e7:24:72:e5:f4:30:
bd:8b:0e:5b:0e:57:ad:67:08:22:70:d6:f1:61:ea:
36:22:8a:a8:45:75:4e:63:c3:0b:05:85:9b:df:22:
0f:a3:db:72:5a:b4:75:d4:35:27:c4:fe:14:93:8e:
ee:83:bc:9e:bf:0c:2b:25:c6:a8:36:65:a3:da:40:
4c:8e:a2:7e:0c:48:d8:64:39:34:e2:1b:53:6a:c3:
3c:3a:34:f6:b6:cb:de:a9:a5:89:ca:8a:0b:ba:d4:
ec:19:7a:ba:d4:88:11:1a:d4:fd:db:c0:46:3e:f0:
e0:7a:28:c7:70:32:9c:d9:92:30:c9:4b:96:e7:92:
54:26:77:2b:b7:53:0b:79:06:22:3b:b4:c6:6c:b1:
be:5a:0e:ad:6c:a8:41:0e:9d:37:6f:a7:59:a9:8b:
e2:23:30:6e:88:f0:0f:b6:5b:c4:5c:b6:6a:58:b3:
58:85:5a:10:27:e6:55:c0:5e:1d:e3:0c:68:ec:f3:
df:33:10:66:b1:ba:ca:c7:09:5f:fe:ef:37:71:e4:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E9:BF:97:0B:97:3A:C9:AE:CA:33:B9:23:A5:95:06:67:DA:21:E2
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:55:a5:78:b4:61:66:49:ea:f1:d7:03:db:e8:75:6f:ec:
de:d5:2b:93:02:84:2a:36:60:0b:bb:39:2d:a5:74:78:79:e0:
11:e5:5d:db:9e:6c:51:fd:97:f4:2d:94:1e:8c:b5:11:7e:9c:
24:00:ab:65:55:20:20:93:93:1c:48:26:7c:2f:06:4a:a7:36:
de:6e:d3:e4:30:6c:68:f2:d3:eb:b1:94:be:e9:59:62:38:14:
d1:0b:98:5a:d5:11:12:be:90:17:d0:db:f3:d6:a3:37:a0:2d:
46:eb:9b:0c:41:fd:59:f3:06:39:5e:3e:8f:13:54:ca:44:83:
2d:52:57:88:17:1e:4e:15:02:49:6a:07:fb:9a:5d:ce:2e:c3:
7b:80:f0:23:73:f1:8d:aa:4e:70:1e:43:7e:ed:5f:d6:cc:3a:
e6:6a:b9:17:6d:99:09:bf:a9:6b:fe:36:6c:db:8a:a7:59:a5:
de:4a:72:ae:41:1f:e5:5b:0e:f0:a9:5e:3e:54:81:75:5e:8e:
7e:b6:12:f0:2d:19:f9:bf:bb:ae:e5:00:9a:79:26:5a:3f:b2:
a9:30:bb:10:5c:63:e8:8f:75:7e:90:81:1c:a2:de:d5:3e:96:
6c:7d:74:c9:70:62:c4:17:2e:e2:ad:84:db:f7:b4:ab:a7:ec:
50:71:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:48 2025 by rpki-client