Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: JE33kcdVQ1qmOmDO5bv+xAVFIcxWGdGlQ3gkOrdFN10=
Subject key identifier: CC:C8:2A:B9:20:65:F4:A9:3A:4C:EC:1D:F6:53:7C:E2:5C:0D:B8:72
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 019A4EF5AE7B71B716EEC13296A760EFAD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 0694
Signing time: Tue 04 Nov 2025 13:01:55 +0000
Manifest this update: Tue 04 Nov 2025 13:01:55 +0000
Manifest next update: Wed 05 Nov 2025 13:01:55 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: wYn9wig0YUl4ADcKasfOqdVqnvg6QzpQYY7Sz/QjrUI=)
2: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (hash: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ae:7b:71:b7:16:ee:c1:32:96:a7:60:ef:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Nov 4 13:01:55 2025 GMT
Not After : Nov 5 13:01:55 2025 GMT
Subject: CN=ccc82ab92065f4a93a4cec1df6537ce25c0db872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:4a:21:36:07:ba:13:a3:09:ad:9c:33:32:
5c:24:a4:57:c7:fd:6f:e6:20:87:60:7e:22:67:45:
c8:6c:05:72:50:ee:6a:c5:63:5a:c2:76:80:cc:38:
c6:ae:a4:a2:e3:df:5b:12:9b:ed:b2:47:b3:85:0a:
a3:ea:1f:15:67:b4:39:c3:f5:45:7a:74:97:9c:aa:
10:43:18:2b:02:da:2e:5d:c8:7b:6c:ce:52:76:0a:
8f:76:46:54:11:fb:60:ff:93:e6:eb:3a:e6:66:41:
b5:44:91:3c:6b:de:e8:49:70:ae:4c:4c:8f:a5:65:
e1:0a:cf:94:20:5d:88:32:cf:e9:c4:3a:cb:c2:8d:
28:87:03:b9:8c:cb:c9:12:3b:de:86:6f:ea:51:05:
dd:04:50:ec:c2:28:fa:7e:ec:69:c0:9b:5d:30:57:
73:37:1d:ec:88:24:01:56:19:21:1b:5f:82:4c:ea:
e4:81:14:dd:e6:93:04:0e:26:72:fd:86:5a:2e:4a:
8a:08:63:da:1a:37:0f:3c:0f:b1:21:50:bb:90:fe:
75:1f:f8:d2:2f:45:02:0f:5e:ed:89:99:c6:4b:64:
9c:b3:5d:e4:2a:6e:6b:df:9f:89:21:60:6a:1e:89:
d6:2d:62:60:b2:96:b7:54:97:c2:44:f3:d4:fb:75:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C8:2A:B9:20:65:F4:A9:3A:4C:EC:1D:F6:53:7C:E2:5C:0D:B8:72
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f2:e4:29:85:58:4b:1e:c6:1a:45:f0:b1:a4:54:a3:b1:56:
92:d9:82:fd:5b:e2:2f:a0:ad:04:31:a7:ed:7c:16:d7:e1:f6:
f2:64:5f:54:82:26:06:db:7a:29:de:06:09:fd:33:d8:0a:98:
c5:0c:d2:7d:89:18:d5:24:ff:0d:00:32:33:d3:ef:a7:59:2b:
a5:ed:0b:81:16:95:e3:b6:43:84:b8:a1:9a:9d:26:7e:0a:ae:
7f:7e:c2:b0:9f:83:3a:e2:a7:48:45:83:55:36:c4:22:51:8d:
f1:b6:f9:7a:82:61:4a:b3:c9:aa:48:5b:43:29:09:da:9d:b9:
08:ac:13:24:81:63:b4:8f:d5:2c:cb:c9:1f:6e:33:2c:62:a0:
81:f0:88:29:18:26:2b:8d:20:5d:33:24:6f:df:fb:2c:8a:1c:
fc:18:13:3e:c4:06:81:34:a0:90:08:43:8b:33:9b:b7:3f:26:
22:14:16:57:d4:2d:45:48:e9:0e:4c:84:5f:85:5a:47:25:be:
36:70:48:98:bc:55:3a:6a:b0:57:57:85:8c:b1:66:e3:04:de:
30:74:e3:89:91:a9:cb:c5:d8:fc:8e:7f:dd:01:85:03:24:bd:
fe:ed:ce:bd:72:b2:75:74:82:c2:a7:b3:58:ec:d0:07:0e:6b:
89:e0:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:03 2025 by rpki-client