Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: riDGSSAhEm9iiEFLYgI7O2ESImV5lwamS8i7KJhRdwA=
Subject key identifier: 5B:81:40:6E:F5:83:13:DF:DC:32:7F:D9:37:18:BE:43:66:29:73:E6
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 019A4F995481106D6AFF370E8E74A8F44BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 13A1
Signing time: Tue 04 Nov 2025 16:00:39 +0000
Manifest this update: Tue 04 Nov 2025 16:00:39 +0000
Manifest next update: Wed 05 Nov 2025 16:00:39 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: /tiRnGmJCdIOYE5EWwZ4JxvgNfmJgcfBNnzIaE9Va8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:54:81:10:6d:6a:ff:37:0e:8e:74:a8:f4:4b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Nov 4 16:00:39 2025 GMT
Not After : Nov 5 16:00:39 2025 GMT
Subject: CN=5b81406ef58313dfdc327fd93718be43662973e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9d:60:ef:81:72:04:ae:98:f3:cd:4f:aa:46:
d0:02:7a:e4:51:82:54:2f:85:8e:76:4a:d7:4c:02:
47:ec:6d:40:ac:82:15:9f:e0:78:56:7e:5f:e6:39:
5f:df:47:9a:5d:f2:4f:5f:3a:56:8c:3f:10:0c:15:
e5:6b:fd:b1:39:dc:ec:c7:fd:ec:23:47:3c:91:0d:
34:66:11:9f:5a:31:6f:d8:cb:ed:92:fd:96:91:ff:
c9:56:15:92:30:4a:f1:85:f4:27:f7:74:2d:96:ae:
01:26:96:f8:2e:8b:b3:6d:8e:a8:47:aa:65:c5:7a:
2b:b5:4e:d0:49:61:cd:b2:45:24:0d:c2:64:90:7e:
27:4a:0a:ea:5f:5f:c1:e5:8a:84:ed:71:5d:d9:af:
47:2b:18:d8:25:98:db:81:83:52:5d:ea:34:f2:1e:
a5:40:a0:4e:66:34:bd:74:b1:8b:39:6c:bc:1d:f3:
68:28:4d:19:c8:57:db:b0:2a:92:aa:37:0d:8a:3f:
92:e8:0d:ec:f5:fa:97:e7:f7:4e:8a:41:77:6e:d4:
f0:e3:e1:11:9e:04:b3:3f:4d:53:30:62:78:93:df:
2d:2b:d6:51:f8:0f:f0:8e:e9:55:51:a4:24:04:f6:
36:f8:a7:f6:54:41:12:d8:1c:c6:7e:97:71:fc:15:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:40:6E:F5:83:13:DF:DC:32:7F:D9:37:18:BE:43:66:29:73:E6
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ab:08:80:49:66:e7:1b:df:53:8e:ea:c6:8f:26:16:71:de:
b5:d8:44:f2:d6:66:bf:f2:12:80:0e:af:ed:cc:7f:74:24:96:
d7:96:41:ba:7c:09:bf:cf:fd:e9:7e:8f:09:54:df:4e:55:e2:
c6:9b:f5:d4:15:38:f3:0d:9f:68:e9:74:f7:be:51:01:5b:67:
46:38:2a:c9:c1:40:e4:90:ae:9f:f7:d0:59:06:64:c9:4e:2e:
19:87:d5:0d:e4:6b:b5:eb:2f:dd:39:b5:71:95:4c:ad:5b:a8:
71:68:5f:ba:ef:ee:8c:ad:9f:ea:7b:20:11:9d:a9:c6:8b:01:
18:b5:07:93:5d:f7:ea:04:80:e5:69:ca:bb:10:a0:39:a0:58:
d4:15:8a:3d:2b:fa:52:9a:20:b1:dd:50:92:0a:70:d3:ba:51:
eb:66:da:43:c5:22:6b:d3:b1:be:16:8c:c7:c1:60:37:68:74:
3e:33:fb:58:ef:57:79:35:b0:7e:b4:d0:15:6a:64:79:5a:99:
d4:5d:27:35:b1:72:bd:7e:fb:39:5e:85:d3:7d:91:ee:e0:a5:
c2:1c:2c:c4:f5:8a:5d:7d:8f:fc:81:24:b7:d1:3a:10:4e:69:
ad:e3:65:99:c9:8b:0e:bb:69:8f:3f:06:3f:af:37:9d:b4:c9:
85:fe:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:06 2025 by rpki-client