Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: vGxN3EKUf8kNP79jm1SSd1bj+3PdHYbz9QGaxt70bw8=
Subject key identifier: 65:CB:E2:6F:94:92:71:AC:1A:C6:F3:3C:CD:32:1F:B6:A5:C2:D4:A5
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01987E9C63FAFFFFBB3D1D59BAAB3FE1EF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 0549
Signing time: Wed 06 Aug 2025 09:00:35 +0000
Manifest this update: Wed 06 Aug 2025 09:00:35 +0000
Manifest next update: Thu 07 Aug 2025 09:00:35 +0000
Files and hashes: 1: 9ByEybCE9CIwuPyP4jebxsupnkU.roa (hash: 73w7qQJmQNDu4a4ozvHyeU3dD07eczn+JHcfhr0D3rk=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: C0hbTIQkLy0+ORH0ThOWnBa5LIN9G71q5Z6Ris119BE=)
3: ZGAAIEbHqaO9ocKXBuyPCJHOK4Q.roa (hash: zo/Lf5y0o4dx5HHn9iwdS1BxAwJJz2SLb/lxly7foaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:63:fa:ff:ff:bb:3d:1d:59:ba:ab:3f:e1:ef:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Aug 6 09:00:35 2025 GMT
Not After : Aug 7 09:00:35 2025 GMT
Subject: CN=65cbe26f949271ac1ac6f33ccd321fb6a5c2d4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d8:33:0c:f0:12:fe:f6:97:3f:5f:4a:47:21:
be:85:10:9a:c4:d0:fe:f3:6e:6a:74:d3:3e:f4:4d:
de:ad:c2:18:3a:bc:fd:d5:b5:6a:5d:a9:1f:4c:44:
41:ab:ef:3b:9e:89:77:66:bf:d7:11:ec:7b:ad:b1:
5a:b0:9f:aa:6b:54:ce:83:5e:ca:0a:0d:45:12:8d:
53:87:f3:ba:d6:02:ff:38:9a:5f:a5:fe:2a:c0:01:
f5:93:e0:b6:35:40:2d:e2:c4:87:0b:10:64:79:54:
33:c4:bb:3e:47:7c:a6:f8:88:a7:af:63:f6:70:78:
44:c3:e6:13:13:ca:d6:c0:dd:44:f5:39:65:f2:49:
91:17:f0:d4:0c:78:f0:a1:67:70:ba:61:af:73:6e:
7c:30:2f:a7:6c:aa:78:ee:36:10:5f:34:1f:1f:f7:
3d:82:73:b4:29:0b:5a:33:a2:9a:f1:40:8e:03:06:
64:29:fe:4c:e5:a4:dd:07:7e:1f:6f:ff:6b:54:05:
cb:1e:a4:fc:3f:21:0a:29:89:9c:e1:d3:1a:5a:c5:
50:eb:47:3b:dd:35:c3:4e:28:1d:cd:1e:c0:2c:3f:
d9:6c:a4:87:07:86:ee:46:7c:87:1f:08:18:b7:43:
eb:b9:b5:ff:2a:41:52:ac:ee:98:0b:79:2a:f2:de:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CB:E2:6F:94:92:71:AC:1A:C6:F3:3C:CD:32:1F:B6:A5:C2:D4:A5
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ea:07:e6:81:48:df:d1:d6:4e:4b:46:f1:bd:05:8f:0e:55:
f0:06:e0:33:bc:b8:d3:fa:1f:66:5c:50:56:c7:cc:f2:2d:e8:
43:7d:8b:6d:be:82:5c:fb:fc:52:4f:6b:2b:d7:dc:49:07:01:
dd:22:1f:59:bd:59:87:c8:4b:8d:b9:ad:96:1c:92:8d:60:9b:
65:45:5c:56:8f:26:80:7c:82:8c:33:7d:70:a1:be:9f:33:21:
11:a0:c6:e1:f8:6d:e0:4f:25:a9:bb:29:56:5b:fe:d5:b5:41:
c2:61:55:21:58:77:10:d1:3e:d8:7a:54:62:28:85:a6:9a:a9:
4d:43:f4:36:b3:00:3e:59:7b:1e:2d:06:23:36:45:58:84:33:
d0:57:41:b1:49:bb:d8:dc:f2:aa:42:a5:8f:7b:af:da:8c:08:
92:80:a6:53:d7:7c:23:05:89:85:2d:98:3a:a3:73:e9:52:7a:
f4:33:e3:51:7a:a0:0b:3c:06:83:14:61:93:1f:86:92:1b:c1:
97:25:82:1e:79:f3:4d:cd:f8:22:4a:01:00:37:14:76:80:8c:
48:3e:dd:8b:38:87:f9:ea:f1:83:15:f1:92:4b:8b:cb:53:b9:
23:31:9c:b3:db:bc:2e:c6:60:fd:7f:d7:c9:33:dc:46:ef:27:
25:c6:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:36 2025 by rpki-client