Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: CvYPZAUARcU8eGV6PtxJaAW/4VTpClNpfdFRORMLN+k=
Subject key identifier: 40:6A:64:6A:D4:D0:D8:95:AC:B5:66:8B:7B:3C:FA:67:6C:94:86:7C
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01976F62B8EDA48EC9AFC6E695D79761B362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 04BC
Signing time: Sat 14 Jun 2025 17:00:30 +0000
Manifest this update: Sat 14 Jun 2025 17:00:30 +0000
Manifest next update: Sun 15 Jun 2025 17:00:30 +0000
Files and hashes: 1: 9ByEybCE9CIwuPyP4jebxsupnkU.roa (hash: 73w7qQJmQNDu4a4ozvHyeU3dD07eczn+JHcfhr0D3rk=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: Ue1nxWyHBoeLl3h9RUeg3emXvsRlFTGga0L/dZ2PYSA=)
3: bEpAFTKCNxwMFh242P25dpMRFQU.roa (hash: tZcdul/sD62igS+FQVO9jCgrVXqompB4QdjISAhOaRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:b8:ed:a4:8e:c9:af:c6:e6:95:d7:97:61:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Jun 14 17:00:30 2025 GMT
Not After : Jun 15 17:00:30 2025 GMT
Subject: CN=406a646ad4d0d895acb5668b7b3cfa676c94867c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:59:d5:24:f0:0b:c3:ea:42:6d:02:c9:4e:
d1:05:2b:37:e4:b5:70:7f:f2:4d:e8:e4:68:b9:f3:
f8:12:88:fb:ef:37:2c:03:60:86:08:b1:b4:f9:e2:
4e:c5:b0:f0:5c:d9:1c:2f:51:84:70:ae:ce:b8:c3:
6a:75:4d:c1:09:53:e2:a2:a2:f5:33:99:8b:08:80:
11:f3:96:ef:27:20:eb:7c:94:c5:6d:f6:f0:6c:2b:
79:59:c3:d1:c0:f1:12:bd:dd:db:27:a1:ed:30:e5:
c9:f7:c8:83:2c:a6:be:0d:81:65:7b:8c:aa:08:57:
8d:25:21:c6:c5:91:71:89:d7:f9:0c:43:e8:4b:91:
49:0a:f0:75:f7:43:c5:63:97:65:e1:69:f2:f9:d2:
dc:5d:ce:d0:22:ba:37:12:7a:20:53:69:5d:78:da:
b9:5d:16:7a:de:d2:b2:f5:1f:93:7d:02:fc:ea:70:
2a:9a:0c:ad:af:e2:2f:d5:a1:9b:b1:16:06:44:c1:
c2:bb:16:ce:1e:4e:7f:9c:35:55:14:eb:d3:c0:75:
e9:31:1a:54:73:85:0e:48:57:f7:ce:d4:e9:5a:3e:
60:32:f5:d8:63:30:b1:47:18:d2:78:f9:54:12:59:
5b:74:0f:6f:58:e8:0c:b1:7f:d9:62:b1:c5:60:5f:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6A:64:6A:D4:D0:D8:95:AC:B5:66:8B:7B:3C:FA:67:6C:94:86:7C
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c9:e3:7c:f1:e7:14:77:31:41:b2:b3:ab:7f:73:2b:ce:5c:
89:06:28:fa:66:09:77:22:ca:23:b8:c5:17:26:93:91:6a:4d:
09:30:d6:af:46:d7:16:45:f6:aa:0d:b5:ed:c1:22:8a:5c:d7:
a5:89:3a:d2:7d:08:55:d1:1e:ce:0e:24:7f:6a:fe:31:20:f7:
3d:2f:19:6a:f5:84:d2:b9:44:ea:09:48:ea:91:57:f6:68:26:
93:37:e0:d5:1c:d6:33:92:8d:53:34:d4:2e:a3:56:e6:65:fc:
75:4a:4b:84:a9:97:66:c7:c9:59:94:2b:73:95:fc:1b:61:5e:
9a:ef:6e:af:45:86:67:fa:ff:90:72:be:bf:09:69:b4:bf:2b:
ce:ea:35:99:7d:ef:12:a0:3f:87:bd:f4:c7:e4:93:0b:1f:4a:
18:a8:f1:fa:97:d3:97:c8:24:fe:05:45:7b:b8:76:a6:e3:f7:
48:a9:8f:79:3e:79:c9:36:7d:36:b1:58:05:9a:cb:53:b1:b4:
78:fe:d1:b1:a7:1a:e6:4b:66:53:18:12:0d:80:ff:06:6e:12:
38:3f:ca:1e:2b:04:c6:b9:81:2c:13:a5:2a:5c:39:54:41:58:
24:bd:9d:86:94:40:9e:36:d4:6c:05:a9:65:81:d6:6e:7a:76:
6c:e2:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:42:36 2025 by rpki-client