Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File: LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier: eH+hTcmkyze49N74bc3JTavY0IfhaQN7pXQTPTyvLKw=
Subject key identifier: D3:C8:F3:9F:FD:32:62:9A:D4:A4:24:76:96:4A:B5:36:FD:C3:CC:39
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial: 019A4EF4A95407F23B6F550852C41F8B347F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number: 15DB
Signing time: Tue 04 Nov 2025 13:00:48 +0000
Manifest this update: Tue 04 Nov 2025 13:00:48 +0000
Manifest next update: Wed 05 Nov 2025 13:00:48 +0000
Files and hashes: 1: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: lkV8AEGawWmoTM5sdUlrIRRaAEveGmvhe+jGLf8yCoU=)
2: N2MMA2ajHovb9op5fyA_qeAVz_M.roa (hash: n+Qd6FGkBgmtsqN4tvP533FkHH2YOTsZsw1S1MXov80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a9:54:07:f2:3b:6f:55:08:52:c4:1f:8b:34:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Validity
Not Before: Nov 4 13:00:48 2025 GMT
Not After : Nov 5 13:00:48 2025 GMT
Subject: CN=d3c8f39ffd32629ad4a42476964ab536fdc3cc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:d5:a6:e4:88:81:74:6a:15:33:aa:da:ba:
f0:80:9f:2f:52:30:0a:6a:e4:cb:a7:0d:4e:59:9d:
0d:e4:24:bd:f6:c8:cc:e3:fb:f4:6f:80:03:19:58:
41:ba:f7:f1:54:ee:35:3c:16:03:86:c5:49:30:de:
e1:09:bd:3c:4f:44:72:ed:ee:57:63:7c:bb:59:c3:
0c:fd:47:61:47:19:23:bd:fa:4a:68:d1:22:1c:84:
64:22:44:9d:d3:d7:ad:44:ee:87:fc:66:9c:c7:3a:
04:ab:1e:30:ca:4f:a5:37:95:bf:15:a4:a7:ac:41:
ca:23:29:bc:36:e0:34:f9:89:e5:b9:9c:6e:c5:42:
99:6a:c9:6b:18:43:bf:23:97:8f:3a:74:8a:50:f4:
3a:7d:db:30:ef:fb:6a:bd:a7:8f:62:84:66:e2:91:
1c:ee:e5:a6:1d:69:64:ab:e5:cb:8a:91:35:37:08:
02:e4:3f:18:6e:49:20:72:5a:ec:f3:48:2e:85:3f:
1d:24:15:a8:b1:a2:3a:72:17:15:27:cd:51:0a:a9:
60:fb:b5:8d:8a:fc:1c:f6:80:ba:68:18:df:cf:b2:
f5:83:30:d1:e3:e6:50:9c:3d:b5:99:22:60:f8:04:
f7:b4:1e:03:09:0b:27:78:5a:dd:80:c0:46:0d:fc:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C8:F3:9F:FD:32:62:9A:D4:A4:24:76:96:4A:B5:36:FD:C3:CC:39
X509v3 Authority Key Identifier:
keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6e:d5:8f:20:bf:3f:a6:04:ae:c6:7d:8c:4d:df:fa:5d:58:
32:3c:c4:da:5d:ce:fb:b8:60:b4:54:33:0f:13:0c:27:74:49:
b9:de:c8:f2:c3:77:9e:05:6e:f1:df:64:24:46:1e:a1:d7:30:
90:9e:e8:1b:b8:dc:b5:0f:ef:f2:53:3f:ac:05:13:7c:d4:74:
9c:76:b0:fd:2f:a2:24:0d:52:d1:a9:fc:4e:05:e8:84:26:25:
49:de:5a:c8:ad:2e:c9:21:ef:9f:0e:12:c7:09:31:ad:82:2d:
f3:9f:d4:ec:c5:19:5e:8e:a7:c8:b8:a9:ee:43:77:b3:07:0d:
ab:ae:63:42:78:14:71:f3:b9:e0:88:c0:a2:71:0c:91:7d:bb:
3b:79:16:96:67:04:a6:67:6d:87:6d:04:f3:30:d1:b6:ab:96:
4c:33:e8:d4:e7:3c:49:3b:c8:81:16:87:2e:1a:0b:7a:67:69:
38:a2:9a:ca:9f:1a:bb:cf:e5:2d:17:dc:29:7a:5f:bd:bf:b5:
50:41:d1:12:71:eb:ab:8c:4a:42:9e:c9:05:63:8c:20:9d:59:
c7:d9:dc:cb:c3:02:60:11:62:64:51:97:c2:64:66:b8:7a:40:
6d:f3:5b:9e:d9:4b:0a:f4:60:e6:65:01:86:bb:9c:a4:ce:8b:
3c:03:86:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:45 2025 by rpki-client