Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: njX+QXyTMtxYF4h6yV6JLMlJlBsMUXnLxofM0jHHFI8=
Subject key identifier: 9F:74:19:B2:58:49:26:27:AB:E7:90:DD:B7:E4:92:01:B9:88:9D:99
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 0198A04D07AD73A69F8512E395271309572A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 1593
Signing time: Tue 12 Aug 2025 22:00:59 +0000
Manifest this update: Tue 12 Aug 2025 22:00:59 +0000
Manifest next update: Wed 13 Aug 2025 22:00:59 +0000
Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: xqn65a3JCuw3nIY2rhBtpgRDK0Bg3YoXAfLVSRKWlCA=)
2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:07:ad:73:a6:9f:85:12:e3:95:27:13:09:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Aug 12 22:00:59 2025 GMT
Not After : Aug 13 22:00:59 2025 GMT
Subject: CN=9f7419b258492627abe790ddb7e49201b9889d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:21:c7:af:e4:14:5d:b6:80:a6:fd:19:d5:
ca:cb:2e:03:cf:49:8e:b8:bb:b5:66:8f:b4:80:78:
dd:b7:aa:55:40:1c:27:b6:6c:74:90:a9:cc:06:fc:
3a:24:6d:9f:cf:01:9a:ef:18:57:7b:7a:ed:77:6b:
27:d6:dc:42:e1:76:f9:26:e2:f0:ad:8c:c9:a5:0f:
8c:ca:34:b6:26:3f:ed:c0:77:64:bf:4d:23:a5:8f:
41:b3:47:2f:cd:b6:84:cd:25:4a:be:02:46:63:4e:
0a:f5:d6:b9:5a:ea:cd:72:f8:cd:8b:ea:a0:dc:c8:
02:c2:9c:6b:f8:d5:b6:8d:db:39:bf:98:f1:fb:59:
9e:56:fd:e8:ee:53:24:6d:07:30:e6:d8:bc:22:f2:
ce:c8:fb:93:1e:18:ba:c0:97:1f:ed:e5:9c:3e:e9:
55:78:c1:bc:d4:70:58:a8:92:28:e4:ad:e5:8a:f9:
a8:aa:02:4a:b3:68:69:f1:f8:48:3f:63:b8:a0:c2:
33:97:d9:d2:bd:93:c3:8c:ee:21:10:81:95:6c:1a:
33:f1:91:69:33:8f:46:f2:77:4a:9b:d3:cb:21:ff:
75:d1:70:73:8b:00:e9:14:11:cc:f2:ef:b6:19:71:
1f:d8:28:ea:ee:6b:de:1d:8a:ed:da:24:b3:ed:1c:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:19:B2:58:49:26:27:AB:E7:90:DD:B7:E4:92:01:B9:88:9D:99
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:14:5c:77:f6:e7:6d:5b:f1:38:52:5f:1c:8d:5f:d9:ff:1e:
d8:66:cf:d9:d7:78:28:49:46:25:c2:da:16:07:d5:33:c1:ae:
c3:9d:d3:80:a3:b7:29:2f:df:be:87:5a:71:cf:d6:3d:ce:93:
f5:38:e4:2f:a0:1f:40:6b:ac:f4:24:f7:c1:f9:03:11:21:bb:
24:0f:3d:da:d7:fb:e8:42:06:3c:0d:1f:75:ac:c2:8e:20:bb:
b4:bc:57:af:cf:8c:62:cc:68:88:d1:40:d7:6c:7f:5f:1c:4e:
11:1c:d5:0a:8c:e9:c4:c8:12:1e:4b:cb:83:52:79:e0:ff:4d:
3a:9e:50:1b:10:db:f6:5f:ca:8c:01:28:db:1f:8c:8d:f1:c5:
9f:25:e4:3f:ec:cf:32:ae:da:96:31:3f:a3:6e:07:52:d5:c8:
cb:48:78:4f:47:6b:3c:80:d3:87:6c:41:74:ca:3a:35:38:4c:
ea:b9:99:f7:25:9e:92:ae:0f:33:ab:76:ce:06:bd:be:d5:e0:
1d:e0:28:68:c1:4d:ee:fe:04:1b:89:34:d7:d7:45:9b:85:69:
a9:98:c4:d2:9e:e6:e9:be:aa:ed:b0:33:4b:72:02:44:6e:4e:
22:90:46:0f:38:66:b5:ef:28:a5:b0:dc:18:33:36:c0:af:ab:
96:8e:96:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:11 2025 by rpki-client