Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File: llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier: DzPGgio56BkrteYGSCyRhVuhB9P3dYowW/ktn+dkRm8=
Subject key identifier: 11:36:5D:34:12:EE:46:87:A6:0E:FC:4C:45:74:97:DE:49:2E:42:E9
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial: 01987D8A1E786A907815C866520B17662296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:01:00 +0000
Manifest this update: Wed 06 Aug 2025 04:01:00 +0000
Manifest next update: Thu 07 Aug 2025 04:01:00 +0000
Files and hashes: 1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: 8Qo1RZCbQ6U5YpayouTDMaFVFPWuDfscxT/iItrczcc=)
2: xB2QvC1lnSEbHZpo5CzUz22HzVs.roa (hash: iOoP9/OWnHogDFUgN5EWWw0h5813UdNcLLWGJLi6Jv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:1e:78:6a:90:78:15:c8:66:52:0b:17:66:22:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Validity
Not Before: Aug 6 04:01:00 2025 GMT
Not After : Aug 7 04:01:00 2025 GMT
Subject: CN=11365d3412ee4687a60efc4c457497de492e42e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:81:7d:7e:46:5f:35:17:bc:64:a0:4b:2d:
fa:88:e7:58:6e:9e:65:93:b8:ce:49:9a:70:e1:61:
cf:e8:19:50:6e:5c:1a:2d:cc:da:4d:3e:7f:a9:a0:
8f:e3:1a:2c:da:f4:bc:53:da:c2:97:ce:5d:92:bc:
9e:e0:6c:3b:bb:25:13:68:57:c8:19:23:3c:2b:2f:
c9:d8:f0:45:46:fd:33:c8:5d:65:c1:cd:5c:df:63:
4c:c4:c6:35:11:c5:aa:76:e2:86:92:d4:ae:80:54:
ee:a8:eb:7c:1a:51:ab:85:ac:04:13:25:1c:54:00:
69:cd:cc:e4:c7:b9:eb:aa:ce:5b:bd:a0:d4:41:3c:
ed:a1:8e:bf:0a:e4:fc:96:bf:38:ba:b6:f7:de:1d:
3a:87:83:6c:0a:8a:06:83:66:38:92:3b:ff:73:06:
b7:60:b4:18:8b:e2:70:2f:c2:f5:f8:7f:41:86:bc:
e1:a0:da:75:7d:f4:ab:39:49:0f:09:66:aa:ca:9c:
32:8e:86:53:b7:a4:83:34:4c:06:7b:cc:1a:af:51:
7c:bd:35:ed:83:02:79:16:8a:a5:bc:5f:22:34:28:
a3:8b:0b:89:5f:60:67:fa:a6:5a:0b:e8:31:e8:3f:
c5:48:fc:15:5d:13:db:74:51:69:27:f7:11:00:44:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:5D:34:12:EE:46:87:A6:0E:FC:4C:45:74:97:DE:49:2E:42:E9
X509v3 Authority Key Identifier:
keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:83:87:37:9d:db:96:c9:87:a9:6d:e0:05:d4:80:2d:b0:f4:
77:96:b1:0a:99:66:8a:84:07:3c:6f:aa:c0:1e:f0:fd:f5:d1:
fd:c6:38:4a:09:a0:1d:a8:b1:a8:ee:62:49:b0:41:78:5e:ab:
c1:f5:45:d5:7b:1f:70:57:8b:db:91:1f:24:d4:38:f0:f5:54:
9e:e0:cc:b3:cb:a0:c8:95:44:18:1b:6c:a4:32:93:4f:96:58:
75:1d:da:a4:0d:00:dd:20:59:a9:80:cc:35:9b:83:df:2f:75:
f3:c9:95:be:40:b3:cd:92:c9:17:68:c4:68:e2:80:c8:f3:b8:
3e:99:b7:21:ab:d7:d2:64:c8:f6:4d:3e:95:01:3b:e8:9f:63:
44:ac:50:a3:c9:ae:f5:f0:36:2d:d9:a3:41:6b:72:85:9d:1c:
84:8d:a9:d8:04:f9:a2:48:f3:02:6f:c1:23:ec:51:65:d1:69:
d2:33:dc:55:cf:09:3e:ba:93:db:66:0f:c3:2a:a5:a4:26:43:
e8:28:c3:13:87:10:9e:a2:4b:0a:87:80:25:91:f8:d8:06:7a:
90:cb:12:2c:71:29:81:83:21:df:47:f3:8f:31:de:68:39:bc:
07:a5:60:6c:5c:73:d7:a1:c4:8d:3b:f2:28:95:8d:eb:b7:e7:
62:d1:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:26 2025 by rpki-client