
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json)
Hash identifier: OUT4HiD5X32MvmalJH49wYJXD7icUfQHWt8Vr7uDyVM=
Subject key identifier: A3:43:9D:8F:C0:8E:6E:54:E3:1C:B0:40:4A:6C:87:9C:23:08:97:F1
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019893DABD4043CFF23D35BDA02926501B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
Manifest number: 0E38
Signing time: Sun 10 Aug 2025 12:00:42 +0000
Manifest this update: Sun 10 Aug 2025 12:00:42 +0000
Manifest next update: Mon 11 Aug 2025 12:00:42 +0000
Files and hashes: 1: 8gg7kQMVPMp5CW_2Zh8YAWMAQ5w.roa (hash: f3wtA4WN/DWLyQp37wYwvHxSkXSyAaxvA1pdEj3pPLE=)
2: Icbwhc8S4XsUNrA3DAVlOZ_S-dI.roa (hash: KivdxCjSWzKBuTPXWGtW7RGejxkaq7uv1LCmzlsIUeA=)
3: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: gw1GkB3NdzLumotsUPasbsn+3PpJYJMYseQCziFLoYI=)
4: MjFS6dB7OMbfF7YRvnb57-2T17g.roa (hash: H5eKU5P15YBVQ9g0o2US0fKUyvY/W21Aot95Lw/6/co=)
5: V3nOHEnCJP-Y80iAPhFlmBROCqE.roa (hash: u4LP1rpbwcMhaXZxdRjmUDhrY5qRbzrSLpn+2r2q6YI=)
6: ZdB9xKTpmE5hnLIq03x2S--VZhk.roa (hash: sJNWpiCDd7rJ3H/Q1tfBrOgTL8SsbyZ5IthK8cBTE8Y=)
7: teJ51KVPIWV36Tlu6BnhXD2AUD4.roa (hash: iirQ6/n4/0a+w6plKlxP3E2dDeNQoZhhCXUm/2+ugFU=)
8: z9geQajqLX4fEuy3PNQy0IwzzgY.roa (hash: JIvL3zAmwpher+kvj+pICp4mH45/hSa/ISO69pribAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:bd:40:43:cf:f2:3d:35:bd:a0:29:26:50:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Aug 10 12:00:42 2025 GMT
Not After : Aug 11 12:00:42 2025 GMT
Subject: CN=a3439d8fc08e6e54e31cb0404a6c879c230897f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:c4:47:04:2b:a4:bc:f7:c7:82:ba:36:06:
ac:6c:4b:76:dc:b0:f8:4b:43:5d:4e:b6:01:8b:78:
b5:a8:54:55:f6:31:51:e7:55:5a:f4:7f:3a:dd:7f:
33:e5:8c:fd:21:6e:7a:62:c1:84:a7:16:e5:31:d3:
0d:2d:af:59:ba:f7:bf:e0:a5:c7:0b:38:b1:16:5c:
db:a2:48:bd:df:a7:0d:ac:2c:42:c9:81:28:a1:ef:
eb:e5:3f:14:9f:c6:a6:26:73:66:1b:38:45:91:87:
e0:63:88:6e:cd:69:26:37:d3:4e:90:2f:f7:4b:da:
5b:52:e5:87:0f:3c:a7:4e:0c:a3:28:20:b2:5f:8f:
4e:57:54:33:19:95:ff:81:63:61:38:77:00:90:21:
13:fb:fc:43:e7:67:e5:28:5b:59:23:84:fc:d4:2f:
20:3a:79:e1:92:8a:39:1d:cb:85:83:35:a5:ed:4e:
45:fd:01:7c:d2:3f:c9:f8:a8:72:67:ff:05:25:a2:
e8:7c:39:dd:fb:67:1b:6c:13:a2:6a:9b:dd:fc:51:
01:96:f5:21:3b:80:bd:84:31:a7:3f:7a:e1:10:d7:
68:51:75:f6:11:bf:8c:00:37:07:c1:43:99:38:bf:
5d:d1:d0:59:b2:71:ba:58:fa:7a:43:fd:f9:8f:95:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:43:9D:8F:C0:8E:6E:54:E3:1C:B0:40:4A:6C:87:9C:23:08:97:F1
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:92:90:6a:ec:58:ba:d4:59:28:7d:3e:d6:bd:31:60:01:a4:
49:f3:7e:a2:a3:7c:96:34:4e:29:41:c8:53:d9:26:57:9a:29:
66:1e:b3:ab:b0:2a:b4:2d:c9:d2:3f:8b:17:c0:15:eb:33:2c:
e9:cd:61:99:2b:76:43:cb:b6:59:a5:a7:cb:ac:5c:12:62:bc:
2c:de:f4:20:a9:39:a9:da:0c:59:b1:c4:3c:a7:86:55:7e:38:
10:72:ab:c2:8b:f9:ab:54:09:59:52:fe:02:4f:ee:a3:ac:33:
21:19:e5:3f:23:87:ea:bf:a6:1b:03:2e:84:e3:47:78:bb:cf:
ab:58:e1:80:19:d5:62:8b:90:0e:94:8c:0e:58:fc:0e:ae:d0:
40:a3:21:e3:54:42:e4:68:e2:fe:f2:4e:cc:11:39:ca:79:bf:
0d:2f:5d:f8:e4:72:4e:6a:b5:27:09:69:6c:c8:f9:e7:15:c4:
40:e3:cd:be:34:8b:0c:98:a6:1a:8f:18:a4:e0:0d:2b:07:5f:
98:7a:84:e3:20:cf:74:21:fc:bf:67:51:5a:e9:fc:48:31:69:
87:79:58:8d:b6:3d:05:ed:1d:60:bd:1d:a6:30:94:4a:4b:e7:
7e:ca:33:84:de:91:ac:c9:8f:04:55:71:92:ce:51:e1:12:84:
11:15:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:34 2025 by rpki-client