Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: qp9+PUyPtZ3BP45A/5lkUbNdbFM2uuKNdKC8buLK/5I=
Subject key identifier: 96:E7:E7:8D:C0:39:23:1A:B3:85:86:67:A5:A9:D3:32:B2:04:BA:BB
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 01988B0EE573F0AE3DA98DED04746DF4F7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 13E3
Signing time: Fri 08 Aug 2025 19:01:05 +0000
Manifest this update: Fri 08 Aug 2025 19:01:05 +0000
Manifest next update: Sat 09 Aug 2025 19:01:05 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: PCe9f3jFSbso6UDgCfzVcLbr1iJ09k951P7ujDlvoi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:e5:73:f0:ae:3d:a9:8d:ed:04:74:6d:f4:f7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Aug 8 19:01:05 2025 GMT
Not After : Aug 9 19:01:05 2025 GMT
Subject: CN=96e7e78dc039231ab3858667a5a9d332b204babb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:f6:7f:aa:83:fb:17:e7:9c:b2:a4:41:dc:
6c:6e:9d:49:2d:b0:3d:44:0a:65:0f:b5:21:c2:c7:
82:c8:07:29:92:f3:de:e6:2a:19:2a:7f:41:36:b7:
ee:4e:a9:65:84:65:31:fc:5f:a3:98:7c:73:1b:ca:
4f:f7:f2:4d:32:e7:4c:2f:45:9a:3e:b4:df:a7:3b:
bc:63:f1:0c:0f:49:3e:e3:22:1a:b5:1c:87:58:88:
04:48:7c:05:46:cf:78:77:0f:de:c3:1e:55:59:48:
df:10:3d:16:10:44:9b:13:d3:87:50:64:f2:4c:d8:
b3:64:60:2b:ac:4f:d3:33:f5:54:6d:76:8f:1f:84:
3a:69:97:19:6b:c3:53:9d:a1:13:4a:fe:18:82:59:
e0:c1:46:e4:f4:bb:8e:ed:01:87:a6:b1:35:f0:2f:
64:df:e4:89:32:2c:0e:bf:9d:f1:cf:2f:1c:aa:b2:
e0:2b:12:1b:ee:24:86:cc:69:52:c2:a2:dd:5d:16:
a0:e8:1a:0f:30:e2:fa:27:32:82:4c:74:56:6f:7b:
2b:bd:bd:9c:b5:90:0f:27:f5:87:72:54:f9:1c:14:
b5:18:c0:50:e4:ee:3e:3f:35:69:12:51:1d:21:d7:
a0:13:2a:30:e1:5f:d7:47:9c:d3:4c:53:22:16:8f:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E7:E7:8D:C0:39:23:1A:B3:85:86:67:A5:A9:D3:32:B2:04:BA:BB
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d6:49:fc:33:ac:8e:77:bc:d2:e3:e8:76:3e:04:72:7c:75:
99:43:ee:6b:dd:d7:7f:1f:ad:8f:af:27:04:dc:9e:f7:71:ed:
a8:4b:1e:30:a5:83:70:bd:f5:15:96:cb:7d:bb:c7:aa:81:ed:
5e:53:18:08:10:4b:eb:ea:ed:95:5c:d7:bb:50:c2:9a:36:dc:
17:ef:0e:4c:6f:85:ff:ff:bb:18:2f:6c:85:ec:7b:ad:c3:18:
23:ba:ac:24:a8:e5:9b:88:b7:15:e5:11:0d:9d:a0:46:ad:86:
3a:6c:0f:22:69:04:48:02:dd:51:97:1e:e8:99:26:9b:d3:40:
6e:0b:bf:21:11:ac:18:92:04:f0:14:b7:2c:ab:ab:6f:18:d7:
42:15:34:07:ae:e7:5c:3a:70:54:63:5d:08:d7:aa:89:60:32:
f6:2a:9e:e3:81:c9:46:f3:98:ab:da:52:0f:97:2a:26:2b:dd:
79:9e:d1:a5:be:66:61:85:49:85:48:d8:ea:24:15:99:3c:53:
7e:c6:f9:65:c6:39:06:60:3e:0a:32:2c:3b:5f:cc:49:96:71:
aa:a5:ab:16:9d:3a:57:ed:88:13:b3:bf:f8:83:3e:b7:2a:ea:
7a:6e:dd:11:40:7e:37:d8:d9:50:97:3d:95:bf:ed:eb:6c:f9:
08:13:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:52:13 2025 by rpki-client