Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: dFXpUJa9R76eEoPm5kgyMoByOQT5NGfXPmgEUihnn2Q=
Subject key identifier: 36:AB:EA:AF:8C:64:D6:00:B3:53:A9:61:05:5B:1C:88:34:F3:E0:EC
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 019872CF0FB24C5A5587C8E628345D62B396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0B52
Signing time: Mon 04 Aug 2025 02:00:29 +0000
Manifest this update: Mon 04 Aug 2025 02:00:29 +0000
Manifest next update: Tue 05 Aug 2025 02:00:29 +0000
Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: CUpnbJpIQj+Swyj9jCfSAk4rH4x5DrSGed43sliVyps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:0f:b2:4c:5a:55:87:c8:e6:28:34:5d:62:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Aug 4 02:00:29 2025 GMT
Not After : Aug 5 02:00:29 2025 GMT
Subject: CN=36abeaaf8c64d600b353a961055b1c8834f3e0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:47:e4:b7:66:ff:e6:2a:36:c8:b0:6b:a6:
60:6b:82:4c:18:ef:b2:a1:54:0b:65:04:b6:64:74:
0a:f0:c5:f0:ec:9b:35:b9:8b:0b:b3:93:98:85:d7:
93:32:77:45:af:93:fd:37:6c:5c:39:b7:44:c3:e8:
43:27:3e:45:3e:af:b1:cb:29:3e:b6:16:da:11:7c:
3f:89:fb:e8:25:73:05:70:40:99:a3:b1:aa:a2:09:
3e:02:1e:41:20:49:6b:62:de:09:5c:ac:12:6b:30:
a9:23:ef:12:7e:96:7d:71:67:2b:86:45:eb:64:da:
2e:2c:84:7c:2a:1a:26:d4:f9:39:80:d1:50:87:2e:
34:af:c2:84:d0:4e:1b:62:8a:17:28:53:f0:73:12:
23:6a:84:13:32:e2:cb:12:49:a4:c9:e6:db:74:78:
7c:58:f4:cf:53:ad:99:55:d1:10:f5:aa:62:dc:d5:
a0:2a:f7:96:b5:7f:bd:49:17:21:c3:9d:8c:7c:48:
05:f8:9a:a9:89:4a:b0:60:f7:3d:59:ad:05:95:ce:
5e:4d:dd:59:ad:5f:09:50:e2:f8:8e:b1:3e:fa:1f:
2a:ad:68:23:b9:76:d4:9a:5f:21:b9:d9:81:78:e9:
58:6f:48:67:6f:30:6d:50:05:a2:34:4d:1b:56:2a:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:EA:AF:8C:64:D6:00:B3:53:A9:61:05:5B:1C:88:34:F3:E0:EC
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b3:99:88:11:cb:cd:94:7e:90:08:11:c6:4c:7f:40:cc:d2:
76:43:1b:e4:c5:f4:c7:36:f4:27:d5:1b:29:e8:71:63:ef:e4:
d3:7c:d4:99:53:c8:d2:bb:6c:36:29:57:8c:81:69:71:d9:af:
36:75:86:9a:d9:20:3b:bf:f9:08:ac:b6:47:cf:04:a5:20:5e:
e3:d3:50:2b:22:82:32:41:2b:2a:e0:37:5c:b3:ca:a3:30:15:
f6:23:df:59:b7:af:4e:8a:62:b5:7d:95:56:de:29:16:8e:d3:
57:2f:30:ab:48:79:2e:15:92:a1:5b:20:b6:a9:0c:a2:7e:98:
fc:09:cc:7b:d5:4b:36:ca:74:42:07:b9:fa:1f:da:d4:c1:cb:
5e:7f:47:78:2f:17:e1:21:b6:88:cc:15:66:96:58:38:58:e1:
ad:18:15:a6:29:4e:18:bb:e7:60:28:3a:8a:8b:0d:46:bf:99:
33:f6:fb:07:f6:d5:6d:eb:97:03:f8:98:ac:05:08:37:4f:d9:
bd:03:eb:ff:13:f0:13:d0:67:04:9e:85:e8:94:5a:49:4c:82:
fe:0c:e5:4e:b5:de:59:25:ff:72:58:c8:d7:ed:50:81:30:7c:
74:c3:62:33:59:c1:85:89:a4:29:0c:35:3d:7b:16:9a:1a:bb:
ff:9b:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:44 2025 by rpki-client