Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: 2RjqJ3Z2YKOppcMc9M/8YG3Zl9kz8ad2NBc6qOLvsWY=
Subject key identifier: 3C:92:17:CC:82:2B:C1:B5:7D:B0:07:DB:BB:72:4C:46:B3:59:BA:DD
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 019A4DE21D412101ED33B2482E831A902483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0C48
Signing time: Tue 04 Nov 2025 08:00:55 +0000
Manifest this update: Tue 04 Nov 2025 08:00:55 +0000
Manifest next update: Wed 05 Nov 2025 08:00:55 +0000
Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: /zoAuQsQ0cRbuKbj3CeE26RWrEOdtPaL2IXgqdbry0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1d:41:21:01:ed:33:b2:48:2e:83:1a:90:24:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Nov 4 08:00:55 2025 GMT
Not After : Nov 5 08:00:55 2025 GMT
Subject: CN=3c9217cc822bc1b57db007dbbb724c46b359badd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fe:49:8e:cd:01:3f:e6:d1:6b:f9:e7:05:f8:
6f:a4:7d:5b:59:ee:7e:16:ee:43:9f:c3:b2:a1:51:
51:44:b2:b4:a6:0a:1a:a9:03:ca:c3:f5:74:42:60:
4e:b8:5c:ab:3f:99:f2:03:f8:1e:2c:f6:ed:98:fc:
49:f4:a7:d1:02:af:df:af:ee:fe:2c:8d:7d:ee:a2:
e7:34:3c:76:af:3a:1e:ab:f0:e4:89:97:6d:a8:2f:
d8:9b:ff:b9:94:7a:1e:8e:c7:c8:09:91:6f:db:65:
d8:e9:7c:64:2c:0d:13:64:7a:d4:f7:5b:c1:e1:91:
3b:2b:be:08:4b:2f:0a:f0:c7:e2:74:64:ac:78:aa:
db:82:a5:a5:3b:fe:46:dc:ca:26:f5:05:1e:aa:34:
2d:29:27:6f:5e:8a:ff:85:24:88:e1:65:b6:f5:9f:
5a:67:dc:3d:f4:c3:56:31:05:0f:35:94:a8:40:6c:
a1:90:44:ec:79:19:2e:20:9d:3f:0b:65:9c:e4:81:
86:31:ad:6e:fd:fd:ed:32:00:40:cb:a3:d4:ba:1c:
3b:19:cd:6d:8f:61:10:73:48:36:d3:69:62:8f:23:
d8:0d:34:88:6d:78:55:66:65:86:ea:f7:ae:6f:ee:
4c:37:af:14:39:4c:e4:c0:33:a5:5d:97:bf:e1:98:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:92:17:CC:82:2B:C1:B5:7D:B0:07:DB:BB:72:4C:46:B3:59:BA:DD
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:39:91:18:ca:0c:31:95:ef:74:2f:6c:60:ec:c8:ac:5c:
96:eb:98:c3:c6:46:4a:d4:f7:15:c3:46:86:8e:31:ea:e1:a3:
cf:35:3b:d0:61:fd:38:2a:54:b0:c2:bc:ae:50:0e:cc:89:13:
a2:b2:0c:5a:55:ce:2e:c3:79:3d:0a:e6:85:6d:43:7d:5a:ae:
78:b5:0f:54:2c:0c:22:cc:46:b4:12:ac:25:3c:58:94:32:73:
e0:84:6b:83:85:b2:d9:9a:15:34:11:8c:39:87:83:de:25:cc:
fa:29:4e:d7:e7:16:3e:4c:e4:ca:29:da:41:10:cf:9c:50:91:
f4:e3:df:b1:4d:27:00:20:7a:0e:da:78:0f:7e:9e:69:c1:e6:
0d:6c:f0:34:8a:8f:47:c2:b0:a8:bf:dc:96:60:17:f6:e0:a9:
8f:b4:d3:d5:84:ad:cd:5a:f8:0e:d3:5c:ed:14:16:9a:cb:52:
f1:d0:22:15:96:51:2e:bd:70:53:c0:ff:f1:13:5d:d4:e9:8a:
f0:7a:74:ad:a8:e3:f2:9e:23:11:c2:80:05:42:77:49:e4:b7:
ce:4c:be:dd:09:fa:cd:65:ef:98:fc:43:6f:38:e4:bc:90:2b:
44:97:27:71:c5:16:17:b0:bc:35:11:06:2a:a5:49:f7:3f:a4:
06:eb:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:12 2025 by rpki-client