Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier: vi8CCwG6uO4hpQ43+y44j1P1aRa8TY9bFAzeL8qHf4E=
Subject key identifier: 4E:9F:C2:DB:B1:F5:B1:07:FA:90:BF:B7:AC:61:14:08:21:0C:2E:52
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial: 0197B77CBDAB50F07746F0FC1C23A9D4B886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: OGzCEXyaBEE/q+/f2mo3Uu+WlHf0Jpbtf2ICNxYtHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bd:ab:50:f0:77:46:f0:fc:1c:23:a9:d4:b8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=4e9fc2dbb1f5b107fa90bfb7ac611408210c2e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:d7:48:d5:98:4c:d9:28:9e:28:71:dd:0c:
b3:76:56:75:2a:07:26:c3:34:07:39:f0:76:e9:4b:
78:46:08:9e:9e:5b:23:91:b4:c3:9f:34:03:05:0d:
75:64:ed:43:42:dc:34:30:64:ec:5a:4a:46:07:8f:
f3:45:98:52:35:f7:bc:5d:56:87:3e:ed:bc:d1:64:
68:7d:7d:ec:38:0f:c3:69:d9:38:6b:07:c9:b8:41:
a7:e2:e0:7b:98:7f:69:24:d2:fc:20:f1:ac:60:28:
b6:04:1f:56:11:84:db:4a:d0:77:05:2c:cc:4f:fb:
c4:b9:46:5f:33:ac:df:a8:bd:1a:12:2c:cc:c2:ca:
3f:e0:b7:f5:10:f7:cb:b3:f7:b3:c9:6a:67:e8:dc:
b7:36:d7:8d:47:7c:ff:db:e9:7a:12:ca:e3:64:8b:
d1:dd:e8:ad:b5:42:24:ef:41:fc:49:fa:6c:ad:d1:
91:89:e3:fa:ba:88:bc:65:f4:6d:51:35:99:e6:5c:
ac:6e:62:62:01:6a:ee:d6:6a:c6:1f:08:f0:d4:da:
e2:b9:60:ad:73:8b:82:ea:8b:f1:3a:b3:d7:7a:95:
8d:16:f0:67:f4:44:d8:47:f7:67:56:90:58:83:74:
c2:9d:70:89:91:7a:24:af:33:c9:8f:55:5d:84:d3:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:C2:DB:B1:F5:B1:07:FA:90:BF:B7:AC:61:14:08:21:0C:2E:52
X509v3 Authority Key Identifier:
keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7c:b0:b8:c9:64:89:73:97:1c:a2:2f:b3:d8:fb:07:0c:3d:
22:da:16:5f:ce:96:42:c6:3e:c6:d5:db:32:1c:e6:f3:74:32:
61:f1:59:a6:55:ea:55:24:73:0e:9a:cc:57:f5:4c:21:a2:47:
9a:77:c6:0f:a6:ae:0e:07:65:f2:3d:03:33:3e:30:7a:d4:76:
d1:28:a5:94:00:c8:b9:ec:ad:47:87:3e:55:59:29:43:e3:f6:
61:f7:b7:08:f3:35:a1:2c:d7:3e:ba:c8:a4:1d:56:a0:37:98:
c7:d2:40:11:03:75:ba:df:88:81:eb:a3:d0:82:b3:52:b8:08:
1a:13:4d:be:3d:25:e3:ed:83:53:00:58:cf:77:9f:44:ec:11:
2e:3f:9c:7d:00:36:ce:34:09:0d:fe:13:87:2b:40:38:d2:bd:
fb:c9:ab:66:13:d0:38:84:d6:9a:e3:a2:71:bc:4c:ce:0e:78:
4a:cb:ef:41:73:49:48:e6:d6:11:d2:65:9b:d3:95:78:8a:79:
5f:2b:6b:a5:ac:90:da:bf:3c:d8:3f:b7:97:88:b2:f0:07:5f:
4c:58:d8:19:61:7c:c3:73:a1:1c:34:a0:70:88:6a:f4:b9:47:
ba:46:56:fa:24:a6:a3:40:9d:ec:67:fa:7a:5c:9d:7c:a3:d2:
ca:87:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:05 2025 by rpki-client