
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier: mMznWvEhXg6G1gW1Hp2cLD6wbLQP3CNMFpv/hz5gafw=
Subject key identifier: 82:A2:25:9B:A7:F9:A5:D0:BA:09:4B:BB:65:5F:15:FA:BF:4B:11:7C
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial: 01987F7A097C73B73B2CF0579B5D524ADB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number: 0A96
Signing time: Wed 06 Aug 2025 13:02:40 +0000
Manifest this update: Wed 06 Aug 2025 13:02:40 +0000
Manifest next update: Thu 07 Aug 2025 13:02:40 +0000
Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: eEcubRc6sknXZJWwkdgp28CwUZmh+AJZVEXnlrHxgcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:09:7c:73:b7:3b:2c:f0:57:9b:5d:52:4a:db:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Validity
Not Before: Aug 6 13:02:40 2025 GMT
Not After : Aug 7 13:02:40 2025 GMT
Subject: CN=82a2259ba7f9a5d0ba094bbb655f15fabf4b117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:ed:24:8e:38:42:a7:aa:12:1f:de:c2:bf:
44:c5:a5:cc:3e:33:02:43:91:51:80:54:b5:e4:a3:
54:22:28:81:7c:b2:51:1a:2f:5d:88:5c:50:62:e3:
44:a9:ba:98:78:82:b7:af:38:18:78:2c:ef:df:9c:
77:b9:d5:90:dc:7f:63:16:16:8c:bf:eb:de:5c:e5:
89:89:b4:51:70:f5:dd:6f:39:51:7c:f1:51:40:7e:
4a:45:16:d4:fb:bc:c8:e5:40:4e:9d:d6:df:88:96:
1c:e5:2b:a9:48:1c:12:9a:71:bf:cb:49:8b:bb:cc:
93:5a:35:f7:16:c0:f2:41:48:86:fc:81:5d:1f:5c:
e3:89:f1:36:79:7f:e1:cb:7d:61:22:0b:7f:b7:92:
bb:1c:32:e4:f7:94:ab:1c:68:be:36:9a:75:2e:0b:
76:7d:47:b0:1e:5a:47:88:63:82:57:2b:8e:30:df:
e5:4b:5b:56:57:a0:11:7d:8e:80:92:6d:06:29:29:
10:01:82:ed:00:c4:1a:46:17:16:e9:3c:c4:ea:e7:
f3:66:f0:5c:88:94:82:65:75:1a:df:80:ea:ca:8c:
71:78:2e:63:35:d9:87:80:bd:61:23:9f:ef:0d:a6:
c2:4c:d5:a2:f1:06:a4:5a:04:88:e9:dc:28:ee:2a:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A2:25:9B:A7:F9:A5:D0:BA:09:4B:BB:65:5F:15:FA:BF:4B:11:7C
X509v3 Authority Key Identifier:
keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c6:62:e1:69:4b:bb:ee:d0:04:60:c9:90:d4:c7:11:ce:da:
0c:38:b9:9c:10:aa:ae:a6:db:e2:30:48:24:89:0e:42:8f:d3:
17:0c:5e:6e:70:d2:68:36:fa:b9:52:37:43:be:8b:b4:b1:98:
2c:f5:1d:df:fc:a9:e8:68:c5:56:c6:9e:0c:bb:6a:f0:b5:c2:
45:cc:50:7f:b1:72:51:73:88:c6:52:ae:d4:20:f8:bd:4c:fc:
28:b9:fa:c4:68:cf:c4:ef:06:2b:83:9e:90:4a:22:91:ff:24:
65:d1:50:30:a8:88:35:b3:74:0c:9a:18:8b:1b:c6:4f:99:9d:
de:e4:34:37:fd:82:be:d3:65:89:66:6d:19:83:69:e2:f7:42:
40:24:33:06:16:ab:b6:31:85:70:a9:b1:9a:ab:b7:86:19:75:
b1:cd:63:16:19:36:d4:6c:71:d8:7a:12:2a:e4:1d:74:70:35:
7d:3d:a0:fc:9a:96:ef:05:05:2c:24:bf:66:bf:56:04:19:e4:
16:8d:34:fd:f8:45:00:c2:84:ed:bf:c1:a3:bb:21:e2:4d:8f:
27:80:ac:14:f7:cd:67:ef:be:23:70:f7:17:26:d5:8a:88:39:
c1:81:17:bd:2d:bf:bf:d7:6c:5c:6c:15:11:20:bc:53:f1:6f:
79:f4:ff:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/egl8c7c7LPBXm11SStt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzE2MzEyYWQyYjIxYWE5YTA0ODExZjYyYWQwMzZiZjY4
ODg1ZDkwHhcNMjUwODA2MTMwMjQwWhcNMjUwODA3MTMwMjQwWjAzMTEwLwYDVQQD
Eyg4MmEyMjU5YmE3ZjlhNWQwYmEwOTRiYmI2NTVmMTVmYWJmNGIxMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIntJI44QqeqEh/ewr9ExaXMPjMC
Q5FRgFS15KNUIiiBfLJRGi9diFxQYuNEqbqYeIK3rzgYeCzv35x3udWQ3H9jFhaM
v+veXOWJibRRcPXdbzlRfPFRQH5KRRbU+7zI5UBOndbfiJYc5SupSBwSmnG/y0mL
u8yTWjX3FsDyQUiG/IFdH1zjifE2eX/hy31hIgt/t5K7HDLk95SrHGi+Npp1Lgt2
fUewHlpHiGOCVyuOMN/lS1tWV6ARfY6Akm0GKSkQAYLtAMQaRhcW6TzE6ufzZvBc
iJSCZXUa34DqyoxxeC5jNdmHgL1hI5/vDabCTNWi8QakWgSI6dwo7iqHzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKiJZun+aXQuglLu2VfFfq/SxF8MB8GA1UdIwQY
MBaAFC4xYxKtKyGqmgSBH2KtA2v2iIXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpGakVxMHJJYXFhQklFZllxMERhX2FJaGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83YjlkMmMtN2Q0OS00YTE5LWE1NWQt
M2I0NzY2NmQxMzY1LzEvTGpGakVxMHJJYXFhQklFZllxMERhX2FJaGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC83YjlkMmMtN2Q0OS00YTE5LWE1NWQtM2I0NzY2NmQxMzY1
LzEvTGpGakVxMHJJYXFhQklFZllxMERhX2FJaGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMZi4WlL
u+7QBGDJkNTHEc7aDDi5nBCqrqbb4jBIJIkOQo/TFwxebnDSaDb6uVI3Q76LtLGY
LPUd3/yp6GjFVsaeDLtq8LXCRcxQf7FyUXOIxlKu1CD4vUz8KLn6xGjPxO8GK4Oe
kEoikf8kZdFQMKiINbN0DJoYixvGT5md3uQ0N/2CvtNliWZtGYNp4vdCQCQzBhar
tjGFcKmxmqu3hhl1sc1jFhk21Gxx2HoSKuQddHA1fT2g/JqW7wUFLCS/Zr9WBBnk
Fo00/fhFAMKE7b/Bo7sh4k2PJ4CsFPfNZ+++I3D3FybViog5wYEXvS2/v9dsXGwV
ESC8U/FvefT/Bg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:35 2025 by rpki-client