Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: FV66kFG9t7nDCB88ErsyiX3Wlv8iiQ8cWDZYgNaovyg=
Subject key identifier: C0:CB:9D:F2:22:51:D8:0D:01:C2:70:0D:42:F1:AC:FE:C4:20:21:59
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 01988A69A1490760BF7F6BE7DB3E24E37A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0D88
Signing time: Fri 08 Aug 2025 16:00:34 +0000
Manifest this update: Fri 08 Aug 2025 16:00:34 +0000
Manifest next update: Sat 09 Aug 2025 16:00:34 +0000
Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: teDY16a5/sWotrHk9ZNvZEzr54m1JNbpBfZ0lX3j2Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:a1:49:07:60:bf:7f:6b:e7:db:3e:24:e3:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Aug 8 16:00:34 2025 GMT
Not After : Aug 9 16:00:34 2025 GMT
Subject: CN=c0cb9df22251d80d01c2700d42f1acfec4202159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:a5:fb:48:94:cf:a7:0a:43:9e:20:d6:6b:
5d:15:c6:ab:e5:ce:37:03:22:c0:23:4b:1a:bb:64:
10:cb:de:c6:c6:27:38:55:72:c6:34:76:08:d5:a2:
eb:d8:ce:63:3c:33:d3:e8:2a:0a:d8:e9:9e:cc:40:
f9:b1:85:1f:b5:c4:2f:22:e6:a8:a7:8c:d1:2a:e5:
d2:fe:fc:78:cd:40:72:85:f7:94:a3:e3:6d:d5:42:
a8:82:c5:76:c0:10:f2:e9:5a:e0:00:71:10:ba:38:
0d:b9:01:c6:24:10:b7:b6:82:d2:aa:47:9c:34:79:
6d:47:a2:75:48:84:31:a4:e2:0e:e3:f4:49:17:8d:
45:51:62:d4:ed:6c:0c:2c:30:6b:0c:76:8a:69:a8:
1c:2e:fe:54:0e:7b:78:e1:0d:04:17:5b:44:bc:82:
da:f1:28:31:54:65:92:92:eb:fa:0f:3f:e4:12:2a:
62:54:3b:f6:09:79:1a:2a:37:02:32:d1:77:0a:c9:
1a:56:a2:d9:4e:47:9a:3f:45:9a:75:e1:0c:6e:b3:
92:fb:a4:1f:dc:0d:ce:6e:be:57:18:b4:1e:c4:ad:
8f:97:3e:98:e1:f6:9a:ce:ad:c5:d9:8e:c5:5c:38:
80:17:2d:c6:85:2a:c7:9e:5b:04:2f:7f:57:22:4b:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:9D:F2:22:51:D8:0D:01:C2:70:0D:42:F1:AC:FE:C4:20:21:59
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3f:bb:4f:3d:8f:03:98:da:b0:1d:ab:a1:1c:f2:80:43:7d:
b6:72:49:f8:60:0c:9f:02:1c:7f:90:fb:d5:fb:70:9d:5e:57:
75:f3:33:22:86:9c:2b:1f:ea:c0:bd:5c:f4:e9:ac:96:12:0a:
47:7e:b0:30:0b:f3:91:39:d7:8f:28:53:4e:6e:d1:ac:12:79:
fa:cf:ec:04:9a:6a:ee:15:7d:f4:76:d0:c5:1e:d9:0e:39:ed:
d2:b3:01:5d:ca:d0:b6:f2:a0:62:63:c3:f1:e4:19:cc:56:13:
7e:36:f7:a7:b9:86:70:fc:6d:a3:90:43:b4:fb:d1:05:68:dd:
b0:f7:c2:0d:63:7f:a5:ba:db:37:34:30:59:0a:54:da:f4:fa:
24:f9:a2:15:82:28:ff:be:2b:1b:e2:3d:9a:0d:f0:20:ca:17:
87:5e:38:ef:7a:3b:59:99:43:1e:33:1a:42:e6:e8:d8:b6:91:
dc:b0:b6:ac:fa:ca:ed:a2:98:f2:4f:23:57:7f:5b:14:4a:b4:
1c:fb:df:6a:2f:0c:29:c2:27:a4:22:3c:93:50:99:9c:87:81:
80:9b:ae:d0:a7:c6:96:45:d7:b7:09:bd:87:28:58:fe:34:24:
64:e0:c4:0b:80:c0:1d:49:36:19:04:63:56:00:f5:5c:ea:49:
72:61:df:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKaaFJB2C/f2vn2z4k43oxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWE2YWJmZGIwODc0ZjJmZWMyMjYyY2RlYTMzNzNhZGNi
MmRjNTUwHhcNMjUwODA4MTYwMDM0WhcNMjUwODA5MTYwMDM0WjAzMTEwLwYDVQQD
EyhjMGNiOWRmMjIyNTFkODBkMDFjMjcwMGQ0MmYxYWNmZWM0MjAyMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qul+0iUz6cKQ54g1mtdFcar5c43
AyLAI0sau2QQy97Gxic4VXLGNHYI1aLr2M5jPDPT6CoK2OmezED5sYUftcQvIuao
p4zRKuXS/vx4zUByhfeUo+Nt1UKogsV2wBDy6VrgAHEQujgNuQHGJBC3toLSqkec
NHltR6J1SIQxpOIO4/RJF41FUWLU7WwMLDBrDHaKaagcLv5UDnt44Q0EF1tEvILa
8SgxVGWSkuv6Dz/kEipiVDv2CXkaKjcCMtF3CskaVqLZTkeaP0WadeEMbrOS+6Qf
3A3Obr5XGLQexK2Plz6Y4faazq3F2Y7FXDiAFy3GhSrHnlsEL39XIksNuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDLnfIiUdgNAcJwDULxrP7EICFZMB8GA1UdIwQY
MBaAFJZaar/bCHTy/sImLN6jNzrcstxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgt
NDk0OWIxZTJiNjBmLzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xMjQxN2YtNzY2NS00MDk4LWEzMzgtNDk0OWIxZTJiNjBm
LzEvbGxwcXY5c0lkUEwtd2lZczNxTTNPdHl5M0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez+7Tz2P
A5jasB2roRzygEN9tnJJ+GAMnwIcf5D71ftwnV5XdfMzIoacKx/qwL1c9OmslhIK
R36wMAvzkTnXjyhTTm7RrBJ5+s/sBJpq7hV99HbQxR7ZDjnt0rMBXcrQtvKgYmPD
8eQZzFYTfjb3p7mGcPxto5BDtPvRBWjdsPfCDWN/pbrbNzQwWQpU2vT6JPmiFYIo
/74rG+I9mg3wIMoXh14473o7WZlDHjMaQubo2LaR3LC2rPrK7aKY8k8jV39bFEq0
HPvfai8MKcInpCI8k1CZnIeBgJuu0KfGlkXXtwm9hyhY/jQkZODEC4DAHUk2GQRj
VgD1XOpJcmHfhg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:49:07 2025 by rpki-client