Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: acFeFZ2OSwPFoIZyvGmg/vLNC4oJW0LK0RdIjhOYTYg=
Subject key identifier: 10:94:9C:D6:1C:33:A6:C4:1A:E3:22:72:1E:5A:A2:D4:B2:95:C9:A4
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 0197722D482844071AF054E207ECDACBA903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 13FF
Signing time: Sun 15 Jun 2025 06:00:59 +0000
Manifest this update: Sun 15 Jun 2025 06:00:59 +0000
Manifest next update: Mon 16 Jun 2025 06:00:59 +0000
Files and hashes: 1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: ExfElSQDHThQJQGTJPtcE4XH76F+TzJAGR5PRS89slQ=)
2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:48:28:44:07:1a:f0:54:e2:07:ec:da:cb:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Jun 15 06:00:59 2025 GMT
Not After : Jun 16 06:00:59 2025 GMT
Subject: CN=10949cd61c33a6c41ae322721e5aa2d4b295c9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:b3:58:44:43:ad:8f:bc:77:8b:db:47:11:
76:e0:9b:ba:3d:30:bd:7a:83:e5:73:00:b0:c2:ea:
36:41:35:cf:00:4b:21:1f:08:37:c4:15:e2:35:5e:
46:9b:08:2e:a2:31:bb:0e:70:41:af:6f:80:39:87:
b6:fe:28:f3:3f:9e:02:4c:f6:40:1e:b6:ba:43:f0:
08:e2:09:fb:40:8d:99:9a:4f:c2:c9:93:a5:b0:4c:
64:82:96:72:a0:6a:71:6e:a7:48:48:da:ba:45:b9:
7c:51:72:2f:c2:1a:50:df:4f:59:f0:95:55:75:d4:
53:41:c9:2d:66:3c:d8:01:f8:c7:d5:33:9a:5a:c3:
48:6f:30:f8:51:22:03:d8:a0:d5:b2:d2:3c:03:53:
13:50:c0:4d:1a:7d:72:34:05:6c:fd:ff:4f:76:60:
8e:00:85:ff:5b:f9:20:84:36:b4:90:a5:84:05:31:
e3:d0:11:7e:37:86:e7:8a:9b:08:ec:a3:1b:e2:bb:
32:26:8c:40:22:9e:cf:23:ac:9a:a3:4a:de:ee:c6:
8d:f7:14:e7:a3:04:33:19:20:68:e5:ae:d0:8a:38:
89:9a:10:37:5e:e8:a5:59:86:b8:16:93:b4:15:27:
82:d7:c1:37:ed:44:94:77:6d:2a:2c:e3:d5:33:a4:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:9C:D6:1C:33:A6:C4:1A:E3:22:72:1E:5A:A2:D4:B2:95:C9:A4
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e7:c0:a4:b3:06:6c:6b:f2:b2:cc:c3:fe:1f:9e:0c:e5:ec:
e3:4b:c4:c7:31:bd:96:3b:c4:a4:af:15:9d:71:45:df:fd:a0:
86:62:b1:90:b7:3b:29:fe:84:b3:41:a1:6a:ee:4e:09:9c:05:
a0:23:c6:f1:39:7b:0b:9d:fd:95:8a:75:1c:15:01:1c:15:11:
da:27:a7:36:d6:48:91:ae:7b:1f:12:2b:66:9a:05:2a:82:32:
6d:50:00:f3:ed:4b:91:a3:83:2d:c6:3c:a7:08:70:00:48:89:
39:87:6d:0b:e8:2d:4e:6f:92:07:0c:54:71:17:b0:10:5c:bb:
31:40:d0:8c:44:6d:80:7a:a6:7d:99:1a:df:d2:23:d9:a4:fa:
8e:52:4c:fb:ad:cc:67:62:30:c8:99:29:1d:7f:b0:09:b0:dc:
ef:94:0f:2b:86:37:c1:4d:6a:05:2d:95:4b:ac:28:a8:a6:53:
f9:6d:77:27:b8:91:f2:ed:39:e5:87:96:c0:b9:4d:b7:fb:16:
f2:f7:49:89:5e:b9:d2:32:f3:12:54:70:1f:a9:f2:34:c1:67:
24:57:1d:d6:ac:d0:49:ea:b2:79:9a:01:09:ca:64:8c:3d:fe:
0f:0e:e1:6e:a4:d5:cd:4d:c7:80:86:48:01:4a:ae:93:d3:51:
cc:1e:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:05 2025 by rpki-client