Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json)
Hash identifier: OYVPYxJMTcfmCPVX6PHknuevW/XaHojDpsgX55pphO8=
Subject key identifier: 71:52:EC:16:5B:E6:43:7C:6A:8B:02:1E:92:ED:91:86:1D:43:56:12
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial: 0199FB0EDF94643D2A1591965627ED39344A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
Manifest number: 044C
Signing time: Sun 19 Oct 2025 06:01:19 +0000
Manifest this update: Sun 19 Oct 2025 06:01:19 +0000
Manifest next update: Mon 20 Oct 2025 06:01:19 +0000
Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: dSG2v3weLUwc6md61erHVVZCwH4Sp00JzUvb0PnHzc8=)
2: tUeDOLxh54YzVxv0XUKXGVzFhsg.roa (hash: guDk4R7GTLiv83MGpogrsbl+v0V3XO0MlUq9mf/rxx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:df:94:64:3d:2a:15:91:96:56:27:ed:39:34:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Validity
Not Before: Oct 19 06:01:19 2025 GMT
Not After : Oct 20 06:01:19 2025 GMT
Subject: CN=7152ec165be6437c6a8b021e92ed91861d435612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:32:1d:c1:f4:81:5d:0e:c5:bb:b4:69:df:
ac:96:01:a0:ff:04:92:5e:fc:50:b8:12:0a:87:22:
21:a3:61:d4:47:ed:97:b9:ef:f8:be:7c:01:3b:a6:
63:31:65:db:76:de:3c:bb:dd:84:a5:05:f4:48:d5:
16:b8:47:f6:45:70:eb:64:44:32:b4:99:49:36:88:
ba:b9:69:2e:20:46:ae:40:64:c4:3b:92:94:35:27:
66:21:93:0d:a1:54:c5:81:e1:1e:a3:2d:48:e7:4c:
a0:85:31:6b:3e:28:6a:64:2e:3a:31:ff:30:d0:08:
92:c4:a2:54:77:b2:b7:45:cd:99:f4:07:2e:cb:cf:
03:8a:b9:78:3f:9f:e2:a8:c2:71:62:31:77:fe:65:
39:58:b6:86:85:83:1d:65:d5:6c:07:69:52:16:c5:
e6:2d:48:63:e6:13:12:7a:22:f4:a3:5a:f3:69:a2:
81:04:2d:14:f1:54:f6:35:f3:03:9d:8c:f9:36:4e:
ff:02:10:2f:57:27:cc:ff:56:d1:e3:aa:e4:0e:da:
27:8c:9f:73:c0:fe:e2:6b:91:bd:9c:b8:59:4a:9b:
fe:d0:8e:32:f0:3b:f2:e2:62:e1:a6:62:28:49:48:
be:e7:eb:a5:bb:38:23:ca:42:c6:a7:36:99:a2:9c:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:52:EC:16:5B:E6:43:7C:6A:8B:02:1E:92:ED:91:86:1D:43:56:12
X509v3 Authority Key Identifier:
keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b4:01:8b:28:85:3b:e9:37:a7:0e:c1:3b:21:52:c8:69:44:
26:64:ad:0a:57:f5:97:13:2e:62:05:97:eb:6f:29:3b:8f:9f:
0d:01:04:f3:58:39:cd:7b:e3:11:0c:07:84:89:c0:ef:41:78:
b7:7c:04:99:7b:61:ba:f6:fc:3d:44:a2:de:4c:a4:27:6e:d2:
35:47:9d:1a:f7:b1:7b:4e:f9:01:15:12:7e:83:b1:06:b5:36:
a7:66:b8:2d:ce:a3:32:0d:db:80:69:a7:cf:27:5b:6a:0c:a4:
f2:3e:2f:6a:e0:d6:22:23:94:a6:f6:ef:90:3f:cc:8b:99:e0:
6f:72:64:91:23:12:3f:59:e9:33:95:c8:0b:3e:8c:2e:e6:e3:
ea:61:70:f1:22:80:71:51:a9:4f:c3:e6:e4:3d:f4:03:3a:af:
41:09:0a:b6:86:bd:a3:e9:22:9d:9c:53:13:bd:8c:4c:9d:04:
be:98:ab:f1:7b:fd:45:6e:39:a6:20:a9:d1:1c:54:fd:d8:d3:
60:54:c5:19:ed:d2:c4:38:b8:fb:f1:db:52:c9:da:4b:07:4c:
01:e3:f4:5d:af:25:ce:23:2b:8c:cf:ae:20:7f:79:08:89:03:
8a:92:eb:bf:d1:4a:cf:31:8b:cb:1e:1f:bc:89:e7:b1:d8:79:
d4:3c:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:21 2025 by rpki-client