Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: DoXqYDnH0ZEq3a10ahtuCozrDCgs62YrkP4pkNQTRI4=
Subject key identifier: F3:2E:6B:32:80:D1:CE:47:F2:73:24:4C:AD:27:65:43:CE:FE:BB:71
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 0197696109210E0B454A0EFB246551BB4460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 0514
Signing time: Fri 13 Jun 2025 13:00:56 +0000
Manifest this update: Fri 13 Jun 2025 13:00:56 +0000
Manifest next update: Sat 14 Jun 2025 13:00:56 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: 2TRVKghD+Nh3LcKZuveKsmYz9rLuz6/PRb24GOmQ6+w=)
2: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (hash: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:09:21:0e:0b:45:4a:0e:fb:24:65:51:bb:44:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Jun 13 13:00:56 2025 GMT
Not After : Jun 14 13:00:56 2025 GMT
Subject: CN=f32e6b3280d1ce47f273244cad276543cefebb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:21:f7:10:68:9c:5e:2d:e4:ae:84:a2:9e:
f6:3e:fc:89:59:98:71:96:d9:cf:fd:ce:20:65:95:
93:b9:a1:d3:21:6d:2d:27:9f:d1:b4:a0:73:1b:9a:
3f:90:04:aa:5a:02:b4:c2:99:50:15:e4:e2:85:a6:
b4:ad:ff:50:06:39:23:15:7d:a3:f5:a1:ef:31:67:
3b:2f:74:87:f9:43:51:b1:9e:ac:51:d9:f3:90:6e:
31:d5:0a:7f:c8:d7:b4:36:68:49:66:b9:59:5a:46:
e1:45:64:35:ef:4e:14:30:71:01:fc:aa:25:62:b3:
95:28:8c:f6:3b:d3:78:cf:7a:7e:d4:b8:be:e6:29:
f9:02:92:43:23:f8:10:a0:4e:c6:b2:f9:75:fd:14:
14:03:4f:59:2b:dd:2d:fe:7e:7a:a7:d9:5c:9e:6d:
4b:2a:ab:81:7e:34:d8:4b:aa:2f:01:f3:b1:11:ca:
2b:49:13:11:83:de:ad:bc:65:45:16:94:5a:58:04:
75:4c:46:af:0b:16:33:80:7a:f7:23:d0:7b:ad:4d:
44:59:a3:5c:16:6e:fa:61:e8:8d:92:d5:74:81:22:
3f:40:07:19:64:61:1c:cf:95:2e:0a:f0:61:cd:d2:
80:0e:0c:8a:89:ab:76:7c:a2:59:7c:23:29:b8:41:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2E:6B:32:80:D1:CE:47:F2:73:24:4C:AD:27:65:43:CE:FE:BB:71
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6a:60:0f:3c:50:d0:0c:d3:1c:2a:15:2d:90:99:85:a3:76:
d9:f7:d3:6d:fb:8a:53:44:9b:6d:42:16:82:cf:8e:60:dd:22:
9d:f6:45:d3:f4:2e:c9:e7:7e:97:26:94:3b:e6:f8:64:ba:9a:
7d:55:ae:6b:70:af:a8:66:f3:7c:0f:0a:32:f8:1c:da:ba:21:
c8:e9:ff:9d:dd:8e:11:6f:7a:e5:5b:5b:8c:54:c9:c3:d3:30:
9f:a2:d7:6b:48:0c:d2:a0:71:ee:5c:78:09:aa:9f:ee:49:68:
50:0f:d3:ca:b1:5b:6a:d6:96:02:db:45:1b:0b:65:49:b5:d0:
29:e1:4d:5a:c0:52:bc:1c:fb:18:72:9e:65:0f:bb:63:46:0b:
b1:f7:7e:9a:c8:8f:ba:cf:0f:7e:f8:bb:01:cb:87:94:04:02:
33:fe:f0:5c:44:9c:02:fd:c3:c7:b1:b2:62:9c:05:2b:04:2b:
1c:6a:60:06:b0:a5:5a:73:2d:51:bf:e9:28:eb:56:9d:c6:30:
bd:0a:c1:bb:2c:d9:86:82:30:3d:d2:89:4f:0e:b5:86:dc:6a:
ef:45:88:48:75:81:fb:b9:e2:ce:de:d9:92:87:08:9b:2f:cf:
77:d4:0c:3f:10:2f:be:86:af:ab:6a:0c:0d:64:ac:69:38:83:
33:7d:ed:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYQkhDgtFSg77JGVRu0RgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOWU0OTk2MjA3M2Y5ZWZiNjZhNGIzMDM1MDZkYTYzNDE1
Njc0NTAwHhcNMjUwNjEzMTMwMDU2WhcNMjUwNjE0MTMwMDU2WjAzMTEwLwYDVQQD
EyhmMzJlNmIzMjgwZDFjZTQ3ZjI3MzI0NGNhZDI3NjU0M2NlZmViYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs84h9xBonF4t5K6Eop72PvyJWZhx
ltnP/c4gZZWTuaHTIW0tJ5/RtKBzG5o/kASqWgK0wplQFeTihaa0rf9QBjkjFX2j
9aHvMWc7L3SH+UNRsZ6sUdnzkG4x1Qp/yNe0NmhJZrlZWkbhRWQ1704UMHEB/Kol
YrOVKIz2O9N4z3p+1Li+5in5ApJDI/gQoE7Gsvl1/RQUA09ZK90t/n56p9lcnm1L
KquBfjTYS6ovAfOxEcorSRMRg96tvGVFFpRaWAR1TEavCxYzgHr3I9B7rU1EWaNc
Fm76YeiNktV0gSI/QAcZZGEcz5UuCvBhzdKADgyKiat2fKJZfCMpuEE2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMuazKA0c5H8nMkTK0nZUPO/rtxMB8GA1UdIwQY
MBaAFCyeSZYgc/nvtmpLMDUG2mNBVnRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEt
MjFjZDI5MGMwM2YzLzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NzY1NTItZTBjMi00YjdjLTk4OTEtMjFjZDI5MGMwM2Yz
LzEvTEo1SmxpQnotZS0yYWtzd05RYmFZMEZXZEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWpgDzxQ
0AzTHCoVLZCZhaN22ffTbfuKU0SbbUIWgs+OYN0infZF0/Quyed+lyaUO+b4ZLqa
fVWua3CvqGbzfA8KMvgc2rohyOn/nd2OEW965VtbjFTJw9Mwn6LXa0gM0qBx7lx4
Caqf7kloUA/TyrFbataWAttFGwtlSbXQKeFNWsBSvBz7GHKeZQ+7Y0YLsfd+msiP
us8Pfvi7AcuHlAQCM/7wXEScAv3Dx7GyYpwFKwQrHGpgBrClWnMtUb/pKOtWncYw
vQrBuyzZhoIwPdKJTw61htxq70WISHWB+7nizt7ZkocImy/Pd9QMPxAvvoavq2oM
DWSsaTiDM33tWg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:40 2025 by rpki-client