
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier: Mi0OkeDhVwKHepWNjWdXUV+I+q/8XBWUl06mYXoN3Ps=
Subject key identifier: 52:E8:71:4F:7E:A0:F6:4A:57:B5:A4:7E:53:9B:B3:BE:25:55:87:73
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial: 01987C779200516346FD324EDA35153D2AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number: 0529
Signing time: Tue 05 Aug 2025 23:01:07 +0000
Manifest this update: Tue 05 Aug 2025 23:01:07 +0000
Manifest next update: Wed 06 Aug 2025 23:01:07 +0000
Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: WWmr6theqc9CSeaKRqJvXJIFepLX7pgNtyFC9kBUnyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:92:00:51:63:46:fd:32:4e:da:35:15:3d:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Validity
Not Before: Aug 5 23:01:07 2025 GMT
Not After : Aug 6 23:01:07 2025 GMT
Subject: CN=52e8714f7ea0f64a57b5a47e539bb3be25558773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:fa:92:a5:4e:f1:47:db:83:4f:3c:ab:10:
f5:8d:ee:af:d4:44:58:94:a2:93:39:92:7d:b0:37:
48:5d:b0:00:50:c2:8e:57:28:0e:0a:46:76:1f:8b:
6b:56:24:0f:66:d0:91:84:9e:04:e4:1e:2a:87:24:
ce:68:42:b4:30:b5:50:22:22:d8:e0:06:24:54:77:
68:f4:99:28:f2:d4:c0:30:7b:a7:ef:f9:8c:c9:d7:
97:1b:30:4f:9c:05:6d:c6:89:ef:df:43:5a:e2:cf:
79:3c:a5:bb:05:86:c8:41:a7:0c:13:1e:30:a7:c8:
bf:9d:00:5f:f3:cf:e9:6e:58:aa:0c:7c:e3:3b:0b:
9d:c7:eb:55:86:52:8a:18:21:90:0a:fc:22:70:f4:
6e:8b:c0:da:3d:07:f6:9d:34:cf:b3:f7:b7:b1:07:
72:73:31:23:49:7d:09:05:59:6e:1f:0c:1c:b1:43:
2b:59:39:84:0e:51:5d:b7:29:92:f7:18:72:20:78:
bf:57:1f:e5:36:29:00:2b:6a:72:e2:06:53:a0:32:
e5:48:e1:1a:ee:0a:e2:38:f8:60:ea:2f:09:8d:ba:
1a:5d:e5:ab:3d:f4:f2:bc:59:87:89:38:b4:e9:d0:
a8:c2:39:d0:68:6d:88:5b:9f:ed:36:c5:e0:e5:89:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E8:71:4F:7E:A0:F6:4A:57:B5:A4:7E:53:9B:B3:BE:25:55:87:73
X509v3 Authority Key Identifier:
keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b4:40:bd:31:7b:42:d3:8e:86:42:b2:b3:ce:ff:d9:8d:7b:
31:2d:d1:07:1c:1c:ca:7e:a5:7c:74:bd:20:c0:c6:77:0d:bf:
89:35:bd:32:da:b5:09:ee:98:4e:7d:29:07:fb:b0:20:81:2c:
97:23:41:1a:fa:cb:08:85:71:ac:c2:73:53:fa:78:7f:01:2a:
19:d9:7d:38:14:d0:68:ff:8f:20:cb:5a:21:4a:45:bf:30:fb:
93:07:06:dd:fc:9f:f6:6a:e2:bc:d4:d5:ef:ca:5d:77:f1:ec:
d6:b5:cd:d5:77:48:b3:6c:35:8a:4f:59:07:fb:52:ab:0b:60:
0c:96:0e:62:03:60:8e:0b:da:8b:39:aa:de:74:6a:4b:5a:a1:
f3:b2:a0:ee:e1:79:c0:2d:1d:a5:3a:52:8f:20:6f:6c:71:b9:
43:23:01:c5:71:32:cd:26:38:98:9c:8a:08:35:71:26:59:36:
7a:c2:2a:77:d0:5b:70:00:26:a7:2a:41:13:71:db:4e:91:30:
9e:20:f6:7e:6b:3e:82:a8:07:41:8b:db:a9:ce:78:7b:3f:d2:
6a:4f:3f:86:be:5b:9d:74:0e:1f:fe:e6:b1:47:33:a1:8b:b1:
32:40:fa:2c:db:9e:7c:79:c2:e8:9c:bb:83:68:de:19:3a:0b:
43:69:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:43 2025 by rpki-client