Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier: 5TYzEvzUx2dC6cP6ff/hd7ojHGLJg5QNwsi/VIliIbA=
Subject key identifier: 17:97:A7:42:E4:9A:56:B9:A4:77:F4:B7:88:74:DA:83:49:EE:75:01
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial: 0199FEB4CE51837BFFD993115B40983D4B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 23:01:26 +0000
Manifest this update: Sun 19 Oct 2025 23:01:26 +0000
Manifest next update: Mon 20 Oct 2025 23:01:26 +0000
Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: DpDYQhtXpoZ5JyoyOFdSWFn3He3K8czcAjrtCbgKfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ce:51:83:7b:ff:d9:93:11:5b:40:98:3d:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Validity
Not Before: Oct 19 23:01:26 2025 GMT
Not After : Oct 20 23:01:26 2025 GMT
Subject: CN=1797a742e49a56b9a477f4b78874da8349ee7501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:a9:c0:a6:eb:30:57:99:35:5e:3a:30:bf:
9d:01:e3:bb:d6:96:4d:f6:6f:ee:07:a1:ae:ea:e9:
2c:35:57:b9:4b:4c:aa:57:55:fb:f3:c3:16:33:f9:
3f:18:c2:f1:52:39:4e:1d:b3:68:fb:1f:98:54:9a:
35:b4:37:8c:4c:08:d0:9e:31:ca:70:91:96:a7:b9:
0c:52:a4:e8:c3:70:2d:c6:30:ac:ef:fc:64:d0:94:
52:c4:94:b4:e9:88:27:d5:66:84:cc:12:89:17:fa:
a4:6b:29:45:ba:18:bb:4a:b0:d6:b1:35:62:ea:81:
f8:9d:85:fc:e0:0f:2e:33:2c:3b:45:a3:07:56:57:
a2:89:e5:f3:36:09:f4:9d:af:3c:ce:72:06:9b:06:
19:85:bd:d7:1d:b9:28:86:e6:ea:26:d3:ea:d6:a9:
ba:74:f0:95:0e:a8:a0:d4:93:a9:cd:95:9f:e1:08:
c3:b1:68:7b:fa:d2:4f:ab:fa:ca:83:77:8b:b9:e2:
88:f6:db:d8:61:3e:7c:07:86:d1:e4:94:07:39:0c:
a2:f0:d5:c8:6e:89:ae:ba:ac:0d:f0:41:4b:29:2e:
fd:b9:ae:ae:bf:35:ad:53:b7:8c:31:82:92:15:99:
3c:7c:49:72:99:30:1f:a0:70:75:96:da:e7:6e:34:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:97:A7:42:E4:9A:56:B9:A4:77:F4:B7:88:74:DA:83:49:EE:75:01
X509v3 Authority Key Identifier:
keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ca:24:94:37:6b:16:8b:3e:6a:c1:9f:8b:c5:f5:2e:47:2c:
46:41:c0:1e:d0:82:95:22:0b:b6:5d:9a:22:3f:89:b7:d1:13:
bf:9b:37:cf:09:7f:dd:ae:a7:83:7f:07:f4:ff:94:c3:2e:1c:
23:80:18:11:b9:9a:44:3b:fc:78:8a:43:a5:1b:e3:c8:ea:b9:
69:97:e2:ee:0b:4e:61:12:01:ce:71:79:b2:e6:1f:a2:92:ec:
01:91:15:53:02:d7:e5:e3:65:ae:44:4a:b9:f2:bc:b4:70:7c:
d0:c1:0f:d5:f8:0c:49:cf:65:c7:be:5d:16:c9:d6:cb:49:01:
c7:ac:14:7c:2a:ed:a3:43:c9:08:aa:cf:a8:92:1e:55:dc:5d:
fa:68:d4:d2:8d:da:4b:59:95:e6:57:07:1e:03:b3:b7:db:7f:
79:e7:0f:af:c3:72:64:d0:9b:27:c2:25:d1:27:e1:1c:cc:c7:
02:8b:0c:b8:fb:ca:dd:55:e2:ac:f0:7b:7c:1c:fa:99:1e:ca:
33:aa:bb:73:68:97:8b:e4:04:85:57:6a:2d:11:b1:21:1e:fd:
c3:3f:34:72:3b:36:d7:47:7c:35:7b:07:92:3f:b8:31:22:d5:
db:62:35:aa:c7:94:48:a2:60:66:d8:72:e3:70:04:b2:2e:9d:
76:e1:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:45 2025 by rpki-client