Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: ZQ5MzGUEsCqlG2aXDeDXkybLD0WaEJMVS9uHjfZOhIs=
Subject key identifier: FE:B0:BB:0E:2A:CD:AD:6A:90:4A:B7:E5:37:C3:02:64:D9:D1:88:1C
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 019A4EF55C67420174F9C7142DCDE1A86DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 05EB
Signing time: Tue 04 Nov 2025 13:01:34 +0000
Manifest this update: Tue 04 Nov 2025 13:01:34 +0000
Manifest next update: Wed 05 Nov 2025 13:01:34 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: MSuaGpzJa1kD8Myi5aezBGyb5B33QVdomM/Z4b8i76I=)
2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5c:67:42:01:74:f9:c7:14:2d:cd:e1:a8:6d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Nov 4 13:01:34 2025 GMT
Not After : Nov 5 13:01:34 2025 GMT
Subject: CN=feb0bb0e2acdad6a904ab7e537c30264d9d1881c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:31:a7:22:fc:78:57:a6:85:a8:4d:e1:71:
37:f3:ff:f6:48:c3:9f:4f:da:27:f7:59:a0:46:aa:
54:eb:a4:dd:b9:98:d2:df:eb:1a:0d:88:61:79:95:
4c:ab:7d:17:93:f9:4f:18:12:5e:96:fb:f6:c3:2c:
a3:42:18:f0:71:3f:9c:f6:bb:13:b4:4e:3b:22:47:
6b:18:1c:4a:73:11:63:4a:d0:5f:42:5c:10:42:c2:
7c:27:17:d5:97:c4:14:15:dc:d9:83:8b:7d:a3:74:
67:23:65:72:48:bd:7c:09:52:92:3c:30:68:bb:89:
7d:a2:af:dd:97:68:02:85:95:a2:59:f4:49:aa:8f:
f4:e9:e0:0d:8e:96:79:42:b4:01:00:d1:12:37:7e:
55:44:3d:52:32:b1:4d:ff:b2:28:ff:e6:ce:32:94:
6f:30:7d:d8:17:bf:b2:df:04:b4:e8:4e:ea:6f:d6:
a3:e9:1b:75:93:7d:5d:75:cc:70:08:3a:86:5c:59:
5a:00:e0:0a:01:38:8d:c4:04:14:9f:d1:c8:5f:0f:
fd:bb:e4:a5:9d:6b:85:60:eb:75:42:56:f1:88:89:
ea:9c:85:bb:86:01:3d:08:86:5b:6d:ba:68:75:5a:
37:7c:3b:f8:21:61:e8:94:e1:ad:81:2a:6c:17:2b:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:BB:0E:2A:CD:AD:6A:90:4A:B7:E5:37:C3:02:64:D9:D1:88:1C
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9d:a2:35:26:16:8a:c5:53:70:13:3a:4f:da:cb:74:97:ea:
51:4a:87:bd:5c:1b:30:35:c3:b3:6e:07:0b:4f:3a:81:4f:fd:
cc:ef:1c:3c:f8:fe:ce:1a:1a:fe:67:fe:68:78:a8:6b:34:fd:
47:35:03:99:f9:66:8f:9a:28:e9:02:cd:37:dc:d1:58:f5:bd:
d5:0a:70:44:ac:34:7b:83:f6:56:6f:20:6c:f0:ea:89:b1:42:
d7:8c:c0:78:65:8f:a9:99:8d:a9:6d:98:83:83:9d:2f:49:67:
dd:a2:bb:70:53:40:90:34:fb:ed:ed:2a:c1:34:2e:0d:48:92:
a6:1c:61:6a:f6:8e:ce:62:ed:43:a3:51:66:0a:1c:aa:dd:09:
4c:1d:a5:ee:91:6b:35:5a:83:67:b8:e0:95:d9:48:8c:8c:7a:
19:14:7a:5d:75:25:db:10:36:2e:8e:78:18:06:12:a6:f1:52:
61:bd:b9:36:cb:51:9c:05:b8:6a:cd:13:4f:f0:8b:25:e4:12:
75:09:e7:a0:6c:cc:70:89:9c:47:f4:ba:c9:61:b5:28:87:cc:
8d:46:ab:09:a3:f8:7d:3b:04:12:23:c3:66:1a:52:be:73:1c:
b1:29:d4:9a:6a:d7:3c:b2:25:2a:f4:d7:fd:19:9a:81:da:0b:
4e:ec:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:16 2025 by rpki-client