Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier: 5o1U1z6itsNMLlbCCyWA4BBaQbD+kF2LqMOQ+72CmYc=
Subject key identifier: 47:32:EF:7E:09:FE:6E:FD:EB:2D:61:62:A1:E7:B7:F7:B2:35:C5:D8
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 019A52D1C5FF151AAB3A63A90052F22FB3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number: 0997
Signing time: Wed 05 Nov 2025 07:01:10 +0000
Manifest this update: Wed 05 Nov 2025 07:01:10 +0000
Manifest next update: Thu 06 Nov 2025 07:01:10 +0000
Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: Snowycm+ebBK51CexwJJCykVSLl9XteNbI8C+WX7pO0=)
2: Vjktac0EQutqMz1o5f1-TeAG4AY.roa (hash: 8mwOPd8uKHxcwF0athR1g43eU49G81HPQuicA6jXBsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:c5:ff:15:1a:ab:3a:63:a9:00:52:f2:2f:b3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Nov 5 07:01:10 2025 GMT
Not After : Nov 6 07:01:10 2025 GMT
Subject: CN=4732ef7e09fe6efdeb2d6162a1e7b7f7b235c5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:49:48:f8:be:bd:b0:5d:b6:8b:a5:61:89:
52:24:af:ce:f4:91:38:cc:4b:2b:be:ee:5a:c6:08:
25:35:eb:b1:b4:5e:fd:5a:04:2d:7d:53:92:4f:03:
13:70:2e:8c:24:f8:e5:14:af:1a:7a:76:dc:72:da:
68:aa:92:3c:53:59:9c:8f:50:43:c2:ce:3d:5f:c2:
a3:20:d5:f2:cf:e4:d1:3b:4e:af:bb:a9:42:91:87:
90:21:2c:33:1a:9f:73:37:a6:ac:ba:62:1a:e2:6c:
9e:d7:92:2a:48:b6:c9:f1:6b:87:a3:63:0f:64:08:
7d:90:23:49:6f:4a:32:03:e6:08:0d:87:55:2c:e6:
83:f5:57:ab:f4:d0:15:e8:c1:f9:f0:bf:4f:db:01:
13:88:03:a8:54:aa:cf:1b:43:36:2c:fa:46:82:0b:
49:71:9f:bb:0a:c3:49:92:41:cf:0a:57:94:94:e6:
e3:c2:3d:8e:da:eb:da:60:37:ba:7a:67:d0:15:24:
9d:22:76:4b:c3:d1:f5:70:05:1c:84:b4:46:34:94:
9c:ec:79:60:b5:ea:35:ea:fe:ea:c1:65:7d:2e:2e:
68:69:e7:15:98:a5:b1:c2:d6:27:3f:52:4f:ae:2d:
70:cd:d7:07:83:f9:6d:7a:29:10:4d:da:43:c5:56:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:32:EF:7E:09:FE:6E:FD:EB:2D:61:62:A1:E7:B7:F7:B2:35:C5:D8
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:af:0c:0d:11:15:c6:38:a5:1d:45:aa:d7:4a:8e:cb:a4:6d:
eb:c2:63:a7:8a:03:45:ec:ac:e0:f7:35:a0:ec:ce:ae:82:eb:
bf:22:ae:a7:a7:8e:2e:08:ed:96:ec:8b:ae:24:7d:b8:5f:d7:
82:9c:71:3d:ac:f2:16:60:6b:60:c6:21:c1:52:6d:4e:13:f5:
fa:dc:f1:a5:f2:bc:66:48:ac:00:97:01:27:a3:ec:f5:2d:bf:
ce:25:0e:28:ec:86:bf:c2:d2:a5:f9:da:60:c8:51:4d:4d:33:
db:5e:82:8e:84:2d:2d:94:61:b7:74:0b:c5:89:89:a6:78:d1:
e0:a6:a0:27:ce:35:ef:a0:96:b6:82:f9:d5:50:09:33:69:56:
ba:9d:ae:31:70:11:0f:d4:35:d8:d4:de:98:4e:ae:3c:07:f7:
5e:1d:1b:1a:bd:e5:82:2c:5d:de:9b:4b:f5:fa:a9:4b:7f:e9:
6d:d6:05:35:0c:11:db:6f:b2:44:8b:71:ee:96:2c:6c:bc:33:
2e:e9:41:dd:d4:9a:34:56:39:ff:ac:1c:97:8a:d8:f0:cb:83:
63:67:61:fe:d9:56:9e:c3:62:48:b0:a6:71:29:c9:4a:9a:50:
f3:a8:2b:9c:24:5e:3a:ce:c8:0a:91:61:22:6d:54:bb:a8:89:
29:a9:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:56 2025 by rpki-client