Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: 6HlmTL9Hs4l+rek+u9nDNcLYNT0ukCpGF2djj+MQNhI=
Subject key identifier: 30:E5:75:A1:F4:43:98:A8:43:4D:5F:5E:26:B6:4A:A8:F1:14:29:E6
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 019A4E8679DA7CF883E22AFCEE3A41F478D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:27 +0000
Manifest this update: Tue 04 Nov 2025 11:00:27 +0000
Manifest next update: Wed 05 Nov 2025 11:00:27 +0000
Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: gEHQK2nlvBjPqNxOTEmHs841WDBecUPnHIXW8ipBU4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:79:da:7c:f8:83:e2:2a:fc:ee:3a:41:f4:78:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Nov 4 11:00:27 2025 GMT
Not After : Nov 5 11:00:27 2025 GMT
Subject: CN=30e575a1f44398a8434d5f5e26b64aa8f11429e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:a7:7b:be:5d:8a:03:0a:38:9e:6f:6c:58:
62:17:70:41:1d:49:93:2b:36:bc:74:19:1a:83:ac:
53:d4:af:20:af:e4:87:66:d5:51:a0:64:8a:95:68:
83:d3:26:38:70:99:fc:41:f3:4b:0f:1f:5c:56:be:
f3:1e:c9:80:6d:97:29:8e:e7:89:2d:2c:fe:28:d3:
85:a9:a1:e8:d8:1a:1a:bf:99:b4:9b:74:8a:d6:16:
a8:a7:b8:90:f3:60:e8:9a:af:d1:26:59:db:3c:c3:
eb:e6:0a:59:85:8a:bd:57:0f:0b:4f:d4:8b:da:88:
9e:ec:cb:29:13:f2:97:23:3f:6a:02:fd:57:f5:9e:
16:6e:33:7f:f0:03:ec:8a:b8:73:80:46:2a:47:66:
be:fd:07:50:93:6b:c8:b2:fb:6a:06:af:c3:5b:e8:
bd:9e:cc:20:fc:c9:dd:07:a3:f7:03:53:b4:05:98:
14:13:ce:97:00:76:f7:88:e1:5c:6f:52:e7:07:44:
99:a6:64:6c:0d:e9:23:48:78:0f:57:b8:6f:a1:50:
80:6d:eb:e3:d6:03:14:a0:f2:ea:b7:b5:80:7f:44:
bb:5c:56:36:27:9f:96:d9:6e:0a:d2:14:f4:ac:97:
1b:eb:3d:37:71:d8:75:f4:c7:40:24:89:97:1c:68:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:75:A1:F4:43:98:A8:43:4D:5F:5E:26:B6:4A:A8:F1:14:29:E6
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:10:2d:26:7b:25:3b:16:b5:a2:f9:c2:59:f8:18:b0:fc:a8:
ce:43:47:09:74:79:3f:93:3d:78:75:2b:7f:4e:5c:52:97:3f:
b6:af:8b:42:19:23:bc:36:06:d5:49:18:b6:e8:ce:e5:7b:70:
84:13:00:ba:c4:8a:0d:bc:50:d9:d8:ec:55:88:2d:81:40:33:
ee:2d:c5:5b:9c:ec:63:3e:aa:19:7a:49:3e:28:f4:d1:60:a6:
1f:84:5e:a2:f4:8b:67:65:2c:c7:95:8a:c1:06:e6:94:be:6d:
80:88:d4:21:78:49:0f:fc:65:6f:ae:1a:8b:80:fd:22:ff:ff:
02:a3:6d:9a:3e:65:67:ad:20:4b:b8:3f:30:00:a0:f1:b9:27:
67:fd:da:03:b9:cf:a9:ad:11:78:93:ba:83:87:ba:04:df:8d:
7e:76:da:47:9f:45:64:fa:dc:26:4f:fe:b6:53:34:38:9a:b3:
15:bb:f9:52:f1:d2:e0:d2:e0:8d:04:ea:93:17:fe:61:12:4a:
0a:81:5d:45:dc:8b:a4:1c:14:a3:75:d8:9d:c4:83:e4:e5:58:
b7:8b:54:38:d0:37:c9:79:65:ed:6a:60:c4:76:b0:c7:ac:05:
28:dc:b0:97:09:2e:80:da:70:ac:fe:e3:b3:c6:02:e4:98:a9:
31:71:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:14 2025 by rpki-client