Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: nLStTWQLNsQ2Qm/MBYEeFd3mfllK6fV+XV62SOZxS98=
Subject key identifier: 6B:A3:FF:EC:DF:A4:90:CF:A8:FF:63:8B:5D:CD:CF:71:1E:DC:2A:D1
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 0199FBEC030F79026166E44064D27B600689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 0669
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: q4+1O5FAXjXyEVffGarV7a7tQm/PzccYQ0XIetGqDBM=)
2: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (hash: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:03:0f:79:02:61:66:e4:40:64:d2:7b:60:06:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=6ba3ffecdfa490cfa8ff638b5dcdcf711edc2ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:a3:c9:63:81:51:e8:c6:ff:3c:a7:d2:88:
ec:77:d6:86:d7:95:55:b2:8e:72:47:53:4e:68:f3:
62:91:72:c7:fb:fc:6d:d6:f9:a8:93:be:7b:d5:be:
24:bc:b0:1d:75:08:71:73:d6:a5:7d:04:2d:f5:69:
96:17:94:72:54:2b:c7:c1:06:de:57:7f:52:b8:af:
5c:30:26:ca:39:ed:32:97:1e:06:f0:a0:1e:38:d7:
03:b6:dc:e6:b1:6c:41:ea:8b:f8:61:c3:42:6a:38:
cb:f5:e3:c8:b8:a0:c5:1f:2a:6a:90:89:42:b7:ee:
fb:ab:4a:34:a7:c0:2b:ef:9f:9f:de:47:f7:77:31:
d2:ba:c6:df:75:f3:50:5f:ed:8a:03:ce:58:8f:06:
9e:66:a9:e3:bc:ac:8c:fb:d6:de:1e:c8:56:c8:cc:
59:3d:28:e2:09:84:fe:f7:8e:fc:36:64:a0:66:46:
24:a0:b6:72:ba:ab:c8:b8:9b:58:02:df:70:b4:65:
c3:9a:3c:89:df:c4:20:a7:bf:17:2a:0c:91:a1:d6:
4b:54:27:41:81:18:dc:07:70:f8:8b:81:35:cd:19:
9a:36:a7:4f:c7:be:23:27:a9:0e:62:cf:64:a9:0d:
31:48:97:d6:d7:1b:2e:f1:2c:32:a4:23:43:24:8b:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:FF:EC:DF:A4:90:CF:A8:FF:63:8B:5D:CD:CF:71:1E:DC:2A:D1
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9b:1b:42:9b:93:d2:d0:c1:be:56:1a:de:0a:65:cb:ad:62:
de:38:a9:9d:7b:f2:58:b0:b3:5b:63:e5:5c:b6:8d:76:c4:61:
dc:6b:27:ed:60:f8:eb:6c:30:75:77:b1:bf:5e:06:2c:1c:87:
75:8c:85:22:0e:41:62:9b:66:c1:a1:af:79:9a:84:55:1a:11:
91:36:c9:44:0e:22:7b:d8:46:73:a9:98:e4:15:8d:29:19:2e:
be:77:af:f7:a2:7e:36:32:f0:d0:fd:07:4a:33:8e:18:0b:f3:
7b:3d:02:5b:16:ca:92:48:93:c7:e5:1a:1d:55:14:6b:87:c4:
92:9a:66:77:9e:39:94:4b:7e:83:4d:67:de:8b:09:5b:ac:3f:
70:5b:ee:9e:35:f4:3b:34:67:ae:95:a8:d4:73:18:cb:72:9f:
74:e3:b9:ff:74:e9:fb:8b:4d:42:52:a5:57:81:cc:93:45:37:
f3:e9:3c:9a:02:7d:97:01:e0:aa:e4:fb:7b:96:bb:ba:ab:6f:
ba:22:ba:55:03:15:f0:1f:28:98:d4:5f:f2:32:10:42:5b:e4:
da:bf:60:5c:53:e9:b9:c6:a0:c8:f3:fc:bf:d0:b3:08:64:53:
db:50:b4:29:01:c1:45:8d:f5:49:13:a6:54:cd:97:30:ef:07:
39:67:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:00 2025 by rpki-client