Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: fi0R6MV8n0ocn2PLwsXVkW3RwT5uapSBO45TbNbbP60=
Subject key identifier: 93:E1:D4:15:1D:B3:29:6F:E6:52:36:11:8F:F1:E9:F2:FA:B4:0A:01
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 0198D5834F8CD5F23D61BA1E9DEA4A7B3B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0576
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: 9ByEybCE9CIwuPyP4jebxsupnkU.roa (hash: 73w7qQJmQNDu4a4ozvHyeU3dD07eczn+JHcfhr0D3rk=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: ChnfPypnDARPMnPriTYz2pGZz0mKSQto2TaGK/qCEOM=)
3: ZGAAIEbHqaO9ocKXBuyPCJHOK4Q.roa (hash: zo/Lf5y0o4dx5HHn9iwdS1BxAwJJz2SLb/lxly7foaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4f:8c:d5:f2:3d:61:ba:1e:9d:ea:4a:7b:3b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=93e1d4151db3296fe65236118ff1e9f2fab40a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:e7:9a:cd:96:15:38:86:5c:2d:35:13:0a:
0d:23:e8:6c:39:ff:22:ac:14:37:9c:6c:61:b7:8b:
c0:e3:8b:0a:00:0d:e7:f5:d1:cd:d6:d8:96:56:29:
6e:47:5b:ba:90:df:46:fb:72:6e:aa:41:4c:50:d9:
86:d2:12:f9:7a:45:42:ce:6c:24:3a:4f:db:19:f1:
f0:e7:07:96:8d:79:a6:94:50:f9:69:a3:6d:d7:49:
64:66:ee:cd:65:0f:0e:91:79:79:cf:a4:3b:76:ab:
0a:fe:a1:08:14:2a:f1:9b:28:a4:1c:0f:e4:ce:34:
bc:42:b0:cf:87:3f:eb:64:17:d6:11:a3:40:1c:99:
33:3d:be:8d:7f:dc:1f:16:6e:74:6c:be:b5:78:7b:
be:dd:ce:49:c8:0c:39:8c:fb:c8:af:06:c8:b3:bd:
78:b9:c4:48:b4:4d:a5:31:77:af:38:f9:20:df:85:
39:f3:c4:ec:70:22:4a:c4:65:e6:7e:31:01:08:d7:
b4:b9:84:cd:3a:f8:ca:38:39:33:96:88:8e:bf:53:
88:66:26:d6:2f:32:67:ca:0a:7c:9e:4a:6a:8c:d9:
99:16:a2:2f:7d:e2:93:ff:0b:51:d0:82:fa:e5:7c:
90:b7:7c:bc:39:c2:06:95:cb:fe:dc:f6:18:f2:ef:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:D4:15:1D:B3:29:6F:E6:52:36:11:8F:F1:E9:F2:FA:B4:0A:01
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f1:03:c6:e0:95:ee:c4:ed:c0:dc:94:e9:54:bf:19:e7:fd:
c3:8e:7c:c9:87:29:79:d8:80:4b:3e:91:82:12:97:fa:10:62:
26:4c:af:37:48:ee:7c:27:e7:39:41:cc:88:2e:9d:ef:00:5c:
35:32:a8:e8:49:0c:d4:7f:c5:ef:f3:d6:f5:07:d9:53:63:fe:
7d:ea:81:95:f8:22:3c:e5:94:77:29:7a:73:55:9a:df:8c:73:
d9:9f:9f:ff:56:fc:16:15:01:04:f2:16:59:ee:c9:8e:fb:43:
90:98:1d:71:eb:a1:1d:10:4c:f6:d2:4b:7a:92:b3:7f:8b:9a:
d5:70:c3:d4:3f:2b:52:e5:73:98:a5:e4:ec:a6:47:fa:df:da:
33:e4:2f:ca:50:4f:30:c4:cc:dd:db:af:e5:00:1b:f2:5c:f3:
6e:be:d9:a0:dd:8c:ed:90:f7:37:a9:89:cb:89:8f:49:c2:3b:
6d:1b:7d:34:ce:64:a4:f9:05:7d:1b:3c:89:24:4c:57:2a:12:
4e:cf:12:2f:a3:4a:aa:fa:3e:cb:42:45:8e:23:ff:19:23:2d:
20:a0:9f:15:54:9b:97:9f:f1:fb:b4:a2:98:c8:6c:bc:fe:8c:
f7:3c:36:51:ca:7f:70:1c:8a:4c:09:fd:bc:7f:4c:52:e8:61:
85:16:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:18 2025 by rpki-client