Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
File: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft (raw, json)
Hash identifier: Ljqq0n+BFj3ff7m+M3Dwxn1CFFSaBU7bVJgRTbYTgSM=
Subject key identifier: D7:58:B0:D8:7F:DC:9A:A2:EE:97:EE:61:D2:7B:EA:46:DA:92:B1:36
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 0198D439AD9DACB37A32B56C99685662E23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
Manifest number: 1B
Signing time: Sat 23 Aug 2025 00:00:06 +0000
Manifest this update: Sat 23 Aug 2025 00:00:06 +0000
Manifest next update: Sun 24 Aug 2025 00:00:06 +0000
Files and hashes: 1: ACAAllRVQZSY6CEwPUn6nHE0pI0.roa (hash: iIJLabdlVKYUojIdfB178Gbcf89MJgK/cIMBkqfpXow=)
2: Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl (hash: /9hMkUi1ETle+OAQjIIoZjyqgGF2YJeORJy0uSEdEY4=)
3: TnQBnRgF1Fd44NNajn0aU2c4k-U.roa (hash: bygzgFDHIVUQArLZudG2dlgz5CAq7YfyRAQZ0W8ymG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:ad:9d:ac:b3:7a:32:b5:6c:99:68:56:62:e2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Aug 23 00:00:06 2025 GMT
Not After : Aug 24 00:00:06 2025 GMT
Subject: CN=d758b0d87fdc9aa2ee97ee61d27bea46da92b136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:aa:eb:89:5f:f1:a4:b4:02:97:0b:35:fa:
d3:fd:d2:09:eb:f3:b7:c8:40:ea:20:55:3b:a0:c7:
6d:de:6c:97:81:25:c7:ca:12:ae:93:1f:27:66:8a:
34:e3:c3:8d:4a:a8:fe:c8:fa:98:d5:82:93:0b:14:
54:2a:07:1c:04:e5:70:cc:aa:41:58:f7:8f:9f:9f:
69:e1:97:c8:cc:cb:72:d2:bf:14:2c:75:67:f5:30:
cc:63:95:56:7d:c7:2c:6f:da:6f:73:ee:cf:f8:a1:
a5:7b:9c:9e:18:b6:04:52:b1:d1:13:b9:fe:49:ba:
20:97:c4:1d:34:e2:5c:49:79:bc:c2:10:10:ac:99:
a1:bc:02:ce:f3:a4:d9:66:47:73:8e:cd:63:3c:c6:
38:30:af:4a:df:66:64:f4:ea:0b:df:72:c5:18:a7:
be:d4:42:98:6e:08:7f:07:63:8c:ed:ba:b6:8c:74:
0d:2e:11:cc:93:3e:78:58:52:ab:df:56:b1:c3:63:
67:dc:33:97:9b:ba:d1:78:c9:68:64:b1:b4:c0:c5:
23:c6:77:6f:9f:0b:54:47:5c:c9:61:a6:d5:ec:19:
8a:2d:6c:32:06:0c:3b:a7:5f:58:c5:63:9c:fd:77:
74:56:a4:34:be:59:39:4a:a5:10:8b:74:6c:9c:3f:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:B0:D8:7F:DC:9A:A2:EE:97:EE:61:D2:7B:EA:46:DA:92:B1:36
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:05:9e:6e:7a:2b:0b:48:ca:0b:d5:11:5b:20:7b:82:13:ca:
c7:fb:5e:4f:4c:4e:f0:f9:48:43:10:4f:1b:01:2d:f5:da:cd:
c2:69:5d:f7:96:a9:96:40:48:48:8a:25:40:67:35:c5:a8:55:
07:1b:70:5b:a7:c0:bc:49:e3:7e:34:61:13:24:37:13:4d:b8:
88:47:d7:85:cc:41:98:b1:2a:e6:04:d0:40:9f:91:db:eb:d9:
87:d7:1e:08:03:f4:da:89:01:a9:3a:83:3e:69:bd:1b:8e:78:
16:82:ec:13:ca:e6:d0:22:67:90:14:33:24:13:39:b7:85:4a:
3f:c8:74:e7:14:e9:95:85:f8:a7:14:ce:06:36:b1:b6:bf:8b:
b3:a2:f7:39:83:b7:3b:1f:67:4a:e4:03:3f:5a:fc:9d:82:b3:
ed:30:52:c6:da:23:05:09:81:ba:2b:b8:50:d9:3e:5c:cb:28:
13:79:77:71:78:a3:44:bc:90:d3:ec:e2:ea:93:db:18:6f:32:
a4:40:78:90:c2:77:eb:cf:fb:90:38:87:6e:46:0f:87:c4:a9:
f7:d8:41:c8:76:a4:f9:b4:70:62:23:b7:95:00:1d:5f:28:f5:
83:3d:32:20:8d:3d:55:b2:5e:e7:35:2a:f2:09:2d:0c:5f:83:
96:39:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:18 2025 by rpki-client