Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: ZMZOkZT0Bd8keSVIcCOdiQThUbhxkjrcWPOhshMCS1A=
Subject key identifier: 1A:93:4D:35:88:2A:3F:87:A7:CE:28:B7:B7:72:70:5A:6A:CF:B1:BE
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 019771BF5085ADC493758CD185FB96110A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 1225
Signing time: Sun 15 Jun 2025 04:00:52 +0000
Manifest this update: Sun 15 Jun 2025 04:00:52 +0000
Manifest next update: Mon 16 Jun 2025 04:00:52 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: ILJwD1X9rg7EA5RTRTFngcbTHnmy855RDmtaqrqUbx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:50:85:ad:c4:93:75:8c:d1:85:fb:96:11:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Jun 15 04:00:52 2025 GMT
Not After : Jun 16 04:00:52 2025 GMT
Subject: CN=1a934d35882a3f87a7ce28b7b772705a6acfb1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:02:20:c7:5f:90:d3:e4:c0:67:bd:f1:b4:
46:9e:b4:e8:5b:d4:45:7d:08:94:94:84:68:8d:2b:
75:02:13:56:99:9f:00:a0:ea:12:e4:17:b3:db:39:
0a:58:f6:4a:ab:de:64:b5:34:5c:42:90:b6:90:c8:
aa:ee:e2:59:6b:9b:ea:ac:b9:fc:b6:fc:c8:ef:16:
2e:3a:af:8a:d9:34:51:22:66:4a:8d:88:aa:b4:ee:
a8:1f:56:c6:30:a6:ab:28:45:0b:ed:ad:57:f6:4f:
0d:17:2a:36:cd:b7:9b:7c:e4:4a:aa:fb:51:8f:d2:
5d:5b:8c:f1:6a:9f:5c:af:3f:65:1d:61:45:d0:6b:
96:58:31:50:36:19:08:82:68:27:bf:bf:4c:8e:b3:
4f:0a:d0:c5:2f:56:23:2e:cd:b0:c2:b7:15:2c:a8:
1f:06:6b:01:ec:9d:94:8c:32:7f:7b:a2:a4:6d:de:
d2:0f:0a:f6:7b:fe:7d:4d:93:03:3f:7e:f3:08:57:
9a:4b:fa:bb:c0:56:02:ed:80:a9:c6:92:b2:dd:15:
18:47:1b:3d:53:85:f2:d4:7a:be:0b:90:d1:7e:cc:
97:f4:cc:50:6d:9f:bc:52:00:bb:15:d7:54:65:2a:
55:0d:00:3c:57:76:1a:96:3b:38:2b:92:5f:54:1e:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:93:4D:35:88:2A:3F:87:A7:CE:28:B7:B7:72:70:5A:6A:CF:B1:BE
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:18:f7:fa:f6:02:64:97:21:f3:93:15:83:76:bd:e8:ad:7a:
bf:15:07:fc:80:31:35:36:af:78:e5:d4:7d:cc:e2:3e:29:25:
06:29:9b:f2:16:f3:e9:91:1b:27:8e:c6:5a:96:1b:87:98:6b:
11:6d:61:d6:66:9b:45:96:43:f3:ad:c5:bd:89:b0:97:e1:14:
06:ff:af:40:82:9c:25:01:d4:c6:53:d8:3b:2e:95:e9:92:18:
2a:f0:78:fc:e7:b9:0b:fe:ed:bd:9e:37:4b:06:a2:a6:0c:c9:
50:1d:ba:7c:2f:51:85:b3:fd:20:bc:25:86:d9:97:3c:bc:c5:
a1:86:99:2f:99:64:79:a0:83:14:72:cc:27:ed:c0:c2:16:69:
e7:92:3e:be:1c:61:f2:7c:da:cf:60:bd:c4:5f:7d:d6:51:59:
31:8a:48:d2:68:b8:56:44:8c:9f:af:02:82:5a:24:40:8a:5c:
a0:3d:6a:2d:a2:bb:6d:ab:47:c3:dc:dd:a1:57:c4:85:8b:d0:
bb:2a:b1:c1:c6:93:06:3f:ef:1f:31:67:71:7d:d3:e6:f4:67:
f5:22:e7:fe:02:16:e7:a3:96:ce:50:97:f2:96:4a:22:45:e0:
1c:05:8a:ed:8c:a1:79:aa:e6:42:7b:3a:fe:e4:91:51:2b:28:
9f:ef:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:39 2025 by rpki-client