Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: dYY6VKLKy2l8ZkLsSW+wzNhvPkajvFPNf2Y4wUTFOk8=
Subject key identifier: F1:0C:5D:2A:84:FB:ED:9F:BE:90:1A:74:5E:C6:2E:77:F9:80:14:4A
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019A5DC382A5C241EDFA7CC91D2AD6885E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0E7A
Signing time: Fri 07 Nov 2025 10:01:25 +0000
Manifest this update: Fri 07 Nov 2025 10:01:25 +0000
Manifest next update: Sat 08 Nov 2025 10:01:25 +0000
Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: yy8zicqa+v7ejjcdFkTYVzZE1jRYwTHkvUDRK2DWUu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:c3:82:a5:c2:41:ed:fa:7c:c9:1d:2a:d6:88:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Nov 7 10:01:25 2025 GMT
Not After : Nov 8 10:01:25 2025 GMT
Subject: CN=f10c5d2a84fbed9fbe901a745ec62e77f980144a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:19:d1:c7:fa:e7:f5:7c:51:60:02:82:cd:
7d:63:f2:b2:cf:22:88:fa:1b:25:04:02:b2:87:02:
12:b1:80:41:80:c6:67:ef:a9:39:44:15:d3:a9:84:
d9:54:9f:b0:b9:2b:70:3c:c4:24:ba:2d:c5:f6:f2:
1c:01:c4:b3:1d:1f:2f:25:2a:78:d5:ac:dd:b7:21:
7b:26:8a:ec:74:c5:46:45:e2:2b:83:11:17:8a:f1:
2a:41:14:ea:f3:8e:70:ef:0a:ca:73:49:cc:37:5c:
81:8b:76:ac:8f:35:56:45:15:73:88:b4:82:08:2f:
09:8e:a4:b3:99:86:8f:fb:ec:92:8d:54:4e:77:38:
97:28:bd:2d:cb:e4:28:42:5e:09:5e:76:2f:8d:1e:
f2:88:92:0b:a2:1e:5b:1e:ae:36:d7:83:be:81:6c:
cb:1e:5a:15:9f:9d:2b:d2:3d:43:18:52:c7:3c:7e:
64:4b:87:7c:59:d1:83:2e:a6:52:02:1f:59:0c:db:
f0:43:7b:75:86:f4:b2:b8:75:f9:bd:41:4c:9e:0d:
9e:3e:3a:c1:69:57:f2:99:49:ab:de:b4:d4:4e:03:
4a:0b:bc:49:a2:d7:79:2f:e4:d8:ff:54:bd:b9:30:
88:b9:d7:ca:cd:ef:84:58:7b:a7:a2:33:5d:77:5c:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:5D:2A:84:FB:ED:9F:BE:90:1A:74:5E:C6:2E:77:F9:80:14:4A
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0c:02:6b:ad:b6:f5:34:7c:56:3c:68:fb:8a:5f:b8:78:9f:
1c:44:8f:1c:fb:92:1c:bf:de:57:1a:77:70:c5:38:f5:23:19:
b3:f2:4b:63:57:da:c6:29:00:cc:d5:8c:90:92:5b:e9:f6:3a:
89:64:3e:44:52:84:1d:f8:3e:35:fb:96:14:af:89:31:79:f0:
af:81:84:cb:b1:40:38:90:01:46:12:b2:a2:44:31:89:82:6b:
9b:11:74:91:52:f0:e4:9b:24:5f:b2:bf:fc:9b:30:0d:5d:a8:
28:95:00:ed:c5:6a:60:4e:82:24:bb:f6:a6:f1:bd:e8:d3:12:
52:fe:8d:ea:92:06:c2:c4:2c:29:f7:d3:ab:e1:27:a9:84:99:
e5:50:04:f3:20:2c:ed:77:e4:a6:0f:0f:3b:fb:f6:da:5a:61:
d6:f1:a6:14:d1:a8:ac:d8:59:7d:a5:86:ff:86:99:23:97:e7:
4a:9e:82:90:26:61:c3:23:4e:29:f1:d4:5b:a6:f6:a5:9f:17:
1b:fc:20:bc:4b:e7:c2:d0:ef:53:c3:d8:71:5a:ce:55:15:01:
1b:08:8d:95:f7:6c:13:a9:3a:01:a3:a2:b3:d7:a1:fc:3e:69:
40:8b:2f:1c:82:d9:40:d2:fd:0e:d1:19:7e:49:61:c1:76:0e:
72:3a:fd:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpdw4KlwkHt+nzJHSrWiF6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWE2YWJmZGIwODc0ZjJmZWMyMjYyY2RlYTMzNzNhZGNi
MmRjNTUwHhcNMjUxMTA3MTAwMTI1WhcNMjUxMTA4MTAwMTI1WjAzMTEwLwYDVQQD
EyhmMTBjNWQyYTg0ZmJlZDlmYmU5MDFhNzQ1ZWM2MmU3N2Y5ODAxNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/YZ0cf65/V8UWACgs19Y/KyzyKI
+hslBAKyhwISsYBBgMZn76k5RBXTqYTZVJ+wuStwPMQkui3F9vIcAcSzHR8vJSp4
1azdtyF7JorsdMVGReIrgxEXivEqQRTq845w7wrKc0nMN1yBi3asjzVWRRVziLSC
CC8JjqSzmYaP++ySjVROdziXKL0ty+QoQl4JXnYvjR7yiJILoh5bHq4214O+gWzL
HloVn50r0j1DGFLHPH5kS4d8WdGDLqZSAh9ZDNvwQ3t1hvSyuHX5vUFMng2ePjrB
aVfymUmr3rTUTgNKC7xJotd5L+TY/1S9uTCIudfKze+EWHunojNdd1z4SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEMXSqE++2fvpAadF7GLnf5gBRKMB8GA1UdIwQY
MBaAFJZaar/bCHTy/sImLN6jNzrcstxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgt
NDk0OWIxZTJiNjBmLzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgtNDk0OWIxZTJiNjBm
LzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQwCa622
9TR8Vjxo+4pfuHifHESPHPuSHL/eVxp3cMU49SMZs/JLY1faxikAzNWMkJJb6fY6
iWQ+RFKEHfg+NfuWFK+JMXnwr4GEy7FAOJABRhKyokQxiYJrmxF0kVLw5JskX7K/
/JswDV2oKJUA7cVqYE6CJLv2pvG96NMSUv6N6pIGwsQsKffTq+EnqYSZ5VAE8yAs
7Xfkpg8PO/v22lph1vGmFNGorNhZfaWG/4aZI5fnSp6CkCZhwyNOKfHUW6b2pZ8X
G/wgvEvnwtDvU8PYcVrOVRUBGwiNlfdsE6k6AaOis9eh/D5pQIsvHILZQNL9DtEZ
fklhwXYOcjr9Fw==
-----END CERTIFICATE-----
Generated at Fri Nov 7 20:23:50 2025 by rpki-client