Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json)
Hash identifier: 0ZzWsV0+zfSKesgLXbWwjrlGkPyaO9KKKa7uw1CsC/c=
Subject key identifier: 49:2F:36:0E:ED:B7:F7:AE:7C:B2:3C:F3:57:67:F4:68:F1:0C:78:AE
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial: 019A5007129450A62F85C112B853CCDDCB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
Manifest number: 0478
Signing time: Tue 04 Nov 2025 18:00:32 +0000
Manifest this update: Tue 04 Nov 2025 18:00:32 +0000
Manifest next update: Wed 05 Nov 2025 18:00:32 +0000
Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: drXWyc39l4c1yfGtEqCgLxkrlSFfqwXxfq1Kl1CcusM=)
2: tUeDOLxh54YzVxv0XUKXGVzFhsg.roa (hash: guDk4R7GTLiv83MGpogrsbl+v0V3XO0MlUq9mf/rxx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:12:94:50:a6:2f:85:c1:12:b8:53:cc:dd:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Validity
Not Before: Nov 4 18:00:32 2025 GMT
Not After : Nov 5 18:00:32 2025 GMT
Subject: CN=492f360eedb7f7ae7cb23cf35767f468f10c78ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:da:eb:c7:d8:8c:60:1d:29:06:78:17:7b:
28:c1:d6:98:16:54:14:cd:6d:bd:21:29:5d:66:6c:
2c:3f:5e:f9:ae:60:32:76:18:6d:11:0a:ce:88:e7:
6f:4c:fc:70:6d:1b:b8:4c:0d:fd:66:19:b7:34:42:
bf:55:56:f9:c3:e1:1e:c0:a2:81:fb:c8:70:bf:b6:
19:27:b8:26:57:b3:db:7e:80:2b:cb:e1:bb:f4:a7:
dd:12:13:8f:2c:d8:20:37:20:58:a4:1f:38:e5:e9:
a7:ca:0c:ae:f1:08:b9:97:2c:95:72:35:4d:db:1a:
1b:3f:43:43:00:42:0e:d0:49:af:1c:ca:5e:89:34:
48:ea:94:95:b8:05:81:d6:34:a4:a3:ab:4d:54:98:
61:30:51:d5:73:ed:ff:c1:63:09:08:83:05:4f:36:
f6:c3:92:62:21:d5:5e:c5:f5:89:99:d4:8a:82:f7:
14:19:6f:f2:ed:61:ae:7c:50:5b:60:a0:e5:58:61:
35:2f:ec:16:86:41:d9:ee:97:52:42:92:f9:50:f3:
e9:84:a5:fa:58:1a:b2:2a:21:b5:a6:ad:e0:57:14:
f0:0f:70:b9:9e:f5:06:aa:14:d2:d2:2d:7b:d7:34:
95:1d:74:c9:80:f6:ef:67:54:2a:2f:df:5e:95:3c:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:36:0E:ED:B7:F7:AE:7C:B2:3C:F3:57:67:F4:68:F1:0C:78:AE
X509v3 Authority Key Identifier:
keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d4:76:6f:9d:08:e0:b8:d2:37:26:2e:06:80:bc:d3:67:0e:
19:08:45:38:9d:ba:b5:33:34:06:de:2f:f7:fa:35:e5:ac:cc:
c8:51:04:3e:0e:0a:39:11:d9:c1:79:6c:e1:fe:bc:be:b7:1c:
f8:fa:aa:c9:98:9c:55:1d:f9:55:fa:2b:b7:4f:98:d0:74:40:
08:a6:51:fa:fe:6c:b0:d4:cb:39:89:26:ac:fb:87:11:4a:62:
69:9f:5f:cd:8f:91:c4:07:14:6b:9f:cf:69:d4:eb:fe:1a:34:
e5:92:60:e5:f5:a4:e0:ab:26:8a:1c:e4:69:fd:d7:95:ae:7c:
87:36:e0:f4:e7:49:65:a7:d8:c6:ba:c2:cc:30:39:f8:28:04:
ea:aa:c9:e0:e7:8f:a9:59:85:18:02:87:02:28:74:a8:ce:a7:
e4:e4:f4:32:ce:39:47:82:4d:f9:f9:dd:87:59:ae:40:b2:05:
8a:d6:ce:87:55:66:0d:d3:0b:d2:b5:39:2c:ea:94:a8:ce:e4:
41:a2:b2:51:1c:fb:97:5b:b6:df:d3:bc:f0:46:ca:59:98:99:
b8:ea:99:8c:63:fc:a6:6c:a7:85:ce:38:5b:4d:a0:eb:c8:c2:
20:af:f6:0d:07:f2:00:eb:6a:35:dd:14:6f:ed:82:82:46:bb:
64:45:f8:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBxKUUKYvhcESuFPM3csCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzBiNGY1MjIyYTQ2ODVjNTRjZDI1YzRjYjhkNmY5MzIz
M2FjN2IwHhcNMjUxMTA0MTgwMDMyWhcNMjUxMTA1MTgwMDMyWjAzMTEwLwYDVQQD
Eyg0OTJmMzYwZWVkYjdmN2FlN2NiMjNjZjM1NzY3ZjQ2OGYxMGM3OGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/a68fYjGAdKQZ4F3sowdaYFlQU
zW29ISldZmwsP175rmAydhhtEQrOiOdvTPxwbRu4TA39Zhm3NEK/VVb5w+EewKKB
+8hwv7YZJ7gmV7PbfoAry+G79KfdEhOPLNggNyBYpB845emnygyu8Qi5lyyVcjVN
2xobP0NDAEIO0EmvHMpeiTRI6pSVuAWB1jSko6tNVJhhMFHVc+3/wWMJCIMFTzb2
w5JiIdVexfWJmdSKgvcUGW/y7WGufFBbYKDlWGE1L+wWhkHZ7pdSQpL5UPPphKX6
WBqyKiG1pq3gVxTwD3C5nvUGqhTS0i171zSVHXTJgPbvZ1QqL99elTz4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkvNg7tt/eufLI881dn9GjxDHiuMB8GA1UdIwQY
MBaAFC4wtPUiKkaFxUzSXEy41vkyM6x7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWIt
ODYxNmEzMTBlODAzLzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZTRjOGEtMWViMi00NTE4LThiNWItODYxNmEzMTBlODAz
LzEvTGpDMDlTSXFSb1hGVE5KY1RMalctVEl6ckhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNR2b50I
4LjSNyYuBoC802cOGQhFOJ26tTM0Bt4v9/o15azMyFEEPg4KORHZwXls4f68vrcc
+PqqyZicVR35Vfort0+Y0HRACKZR+v5ssNTLOYkmrPuHEUpiaZ9fzY+RxAcUa5/P
adTr/ho05ZJg5fWk4Ksmihzkaf3Xla58hzbg9OdJZafYxrrCzDA5+CgE6qrJ4OeP
qVmFGAKHAih0qM6n5OT0Ms45R4JN+fndh1muQLIFitbOh1VmDdML0rU5LOqUqM7k
QaKyURz7l1u239O88EbKWZiZuOqZjGP8pmynhc44W02g68jCIK/2DQfyAOtqNd0U
b+2Cgka7ZEX47A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:33 2025 by rpki-client