Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File: LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier: mqsUyIMQS7Lq0/h9qYTFm2KQy1AdmgDYPKaKl/M1Iyc=
Subject key identifier: 34:C9:9E:53:F5:9A:1C:87:36:BE:F8:11:67:1B:62:62:8E:B4:69:E0
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial: 019873E2D580F22BDCBD18FB9990B2DA0C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number: 14E5
Signing time: Mon 04 Aug 2025 07:01:42 +0000
Manifest this update: Mon 04 Aug 2025 07:01:42 +0000
Manifest next update: Tue 05 Aug 2025 07:01:42 +0000
Files and hashes: 1: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: wMVqttIg3r4qW5wkFTv6mHR/axvcENLOGACjjcnSONo=)
2: N2MMA2ajHovb9op5fyA_qeAVz_M.roa (hash: n+Qd6FGkBgmtsqN4tvP533FkHH2YOTsZsw1S1MXov80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d5:80:f2:2b:dc:bd:18:fb:99:90:b2:da:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Validity
Not Before: Aug 4 07:01:42 2025 GMT
Not After : Aug 5 07:01:42 2025 GMT
Subject: CN=34c99e53f59a1c8736bef811671b62628eb469e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:39:66:ce:f3:e2:cc:d0:ac:a3:0a:77:69:
61:7b:f8:02:9b:2f:f9:03:db:2a:77:57:62:a7:0f:
f0:3e:a6:c9:9f:58:bc:e9:e5:d3:ac:b3:7b:c0:ac:
ae:da:59:45:c5:41:6f:f2:66:c0:eb:10:37:da:bb:
c5:1d:40:db:af:7a:d0:2e:f4:12:24:b4:76:b7:d3:
62:42:eb:7d:3f:57:37:9f:05:0c:4c:02:0d:ae:ea:
50:f2:d2:c5:74:75:05:8d:0f:45:03:73:ed:b9:e9:
21:a4:99:9c:17:5b:bd:87:57:b0:eb:11:e6:c2:45:
c5:e1:21:38:b6:52:6d:bb:a9:c6:99:3e:f5:a5:05:
ad:6a:87:33:cb:48:a4:01:3e:89:7e:9b:67:3f:3d:
cf:2f:cd:d7:4f:5f:2f:39:aa:43:cf:e0:b5:7b:42:
ed:b3:c4:db:74:5b:30:11:e8:e6:a9:8b:0f:90:b2:
e0:bc:4d:3c:6b:6b:48:29:29:1e:4b:a8:2d:2d:cb:
ec:d7:72:f2:54:45:47:58:01:31:91:3b:9c:9d:27:
f2:21:1f:16:d7:5d:87:19:aa:d8:08:dc:1b:5f:db:
a0:5a:4d:aa:79:39:ef:6e:19:c8:9f:0d:b6:72:5d:
0e:c0:cb:72:73:0c:ae:1c:16:61:bc:73:b3:dc:05:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C9:9E:53:F5:9A:1C:87:36:BE:F8:11:67:1B:62:62:8E:B4:69:E0
X509v3 Authority Key Identifier:
keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b2:c8:f7:39:7b:5f:b1:c8:d2:1a:23:22:8f:d2:cc:f8:40:
d3:8b:94:5d:73:6f:b6:c3:88:61:15:fb:dc:f9:38:c8:a3:97:
fb:c0:37:f0:4c:89:fe:3f:a4:ed:8a:2f:a5:b2:bb:26:b3:7f:
5d:f5:d3:f2:5c:d6:3d:9c:8b:7b:12:ba:06:d2:cb:4b:7b:1f:
8e:ea:6c:bb:c2:9a:8c:36:f6:8a:06:1b:a6:8a:7c:61:3a:ba:
c1:eb:40:82:cd:5e:7f:b1:ff:d5:b8:38:bf:0c:fb:90:41:f1:
96:dc:6a:b1:9e:b9:5b:63:fa:31:33:5e:59:9e:11:94:30:75:
29:7e:3f:ac:7d:02:12:bc:d2:ae:10:a8:59:ce:60:a2:2c:54:
54:bf:76:77:03:55:11:5e:e5:24:69:70:10:11:4f:03:4f:fa:
99:39:2a:2a:27:1e:0e:a4:f0:5e:19:82:11:17:ff:16:b2:78:
de:19:2f:cf:0a:d0:6e:f9:d6:0c:80:7b:bb:71:38:f6:e1:af:
18:2e:01:3f:b4:34:32:7c:49:bd:d8:da:c2:5f:84:f5:80:b3:
9c:69:8f:cb:3f:b7:03:88:e1:2c:89:ed:35:77:69:a6:46:e7:
a8:6f:94:42:0b:f7:29:6f:eb:89:a9:67:13:4a:09:1a:49:21:
d3:61:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:41 2025 by rpki-client