Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: jf8F/vkbSKtNgrgD/1b+au7TCwl5KVg1UnQN8PMbZE0=
Subject key identifier: F1:F7:28:2F:07:0E:C2:73:32:4D:CD:D6:D7:C9:A1:1D:21:F1:85:EA
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 0198820BAE53BD87E912832A5F71CEF5FCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 12B2
Signing time: Thu 07 Aug 2025 01:01:00 +0000
Manifest this update: Thu 07 Aug 2025 01:01:00 +0000
Manifest next update: Fri 08 Aug 2025 01:01:00 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: QOknKnzh4Yttpz+Bb1hR/ZVH+nWXlhKHOJHRFukhFO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:ae:53:bd:87:e9:12:83:2a:5f:71:ce:f5:fc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Aug 7 01:01:00 2025 GMT
Not After : Aug 8 01:01:00 2025 GMT
Subject: CN=f1f7282f070ec273324dcdd6d7c9a11d21f185ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c1:03:86:58:bc:e4:e4:f9:c6:b8:15:ef:c9:
0d:9c:06:97:bf:23:40:9b:a2:c3:f1:a6:56:2f:b7:
95:10:08:76:40:71:1b:60:9d:18:85:bc:92:32:e3:
62:96:ae:35:5b:67:2b:e9:4e:f6:2a:28:37:4a:9a:
a1:c8:9d:5f:f3:9d:04:e7:1f:a3:e1:05:11:5d:b3:
32:64:92:83:22:f3:3b:63:48:6e:d6:73:9a:75:18:
7f:bb:3b:5d:57:5a:2c:8e:5c:b7:be:3c:d8:99:04:
32:c7:35:34:19:13:0e:dc:99:6e:c0:96:f7:7d:b5:
46:e0:8d:0c:65:cf:74:95:55:c3:e6:96:e2:24:a4:
da:1c:be:5d:8d:0a:45:51:23:ff:02:29:87:66:cb:
66:b7:17:70:e4:70:e0:f4:b0:33:ef:23:de:46:3c:
f6:5c:05:33:4e:90:bc:a4:f4:5f:cf:e2:90:a8:00:
35:07:22:c6:52:05:1d:c9:54:eb:33:b9:6d:8f:11:
38:9f:77:98:66:46:81:bb:06:e4:f5:32:5c:a0:31:
dd:c8:30:38:17:28:22:95:f6:35:b2:20:c7:77:1d:
eb:cd:4b:ac:f3:89:01:42:77:50:94:2b:f0:2e:b3:
f0:bf:40:bb:49:d2:eb:69:1b:00:91:2d:19:2e:d8:
d0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:28:2F:07:0E:C2:73:32:4D:CD:D6:D7:C9:A1:1D:21:F1:85:EA
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:cb:8b:65:25:53:43:ef:04:cf:c1:d9:b5:ed:12:57:af:
29:68:d1:96:c8:f4:f4:a5:9b:94:c1:f7:bf:00:34:b5:71:e3:
38:a1:69:40:0a:14:62:bd:d9:f0:26:6a:1b:73:15:b4:91:48:
c0:4e:da:15:37:ae:c0:d5:a8:09:a7:01:b8:3a:f9:78:85:60:
56:61:fd:be:10:37:b9:e5:e1:71:78:21:db:e3:9a:29:33:f5:
84:8d:30:a6:28:3e:c1:ea:1e:89:a9:cd:7c:9b:df:a6:a9:d8:
24:a4:81:6c:c4:1d:25:ab:d8:49:d1:70:5a:3e:47:22:15:53:
9f:84:33:73:27:ac:7c:b0:ec:96:2f:f3:cc:44:38:30:02:d8:
77:5d:88:f1:89:a3:3a:2c:69:96:1b:18:0f:85:68:90:22:4a:
ef:a8:50:75:88:d0:aa:dd:db:0e:e2:bc:87:71:99:d2:3c:2f:
d2:c8:fb:82:ad:d1:59:61:95:78:b3:85:81:8b:b0:3c:59:db:
ac:5a:82:8d:87:8b:d3:54:c6:87:6c:9e:07:03:46:b5:ec:4a:
fe:23:e0:27:35:1c:93:c8:ab:c4:bb:7c:15:1b:c5:9c:68:7f:
bc:5b:d1:8c:f6:ab:dd:c3:f6:f3:d6:eb:cf:81:c1:6f:2d:9e:
e3:1b:0a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCC65TvYfpEoMqX3HO9fznMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjEzNTYyNWFjMDUxYTI4MDk3N2Y2MzA2Y2YyM2Q2MGM0
MDZiOTAwHhcNMjUwODA3MDEwMTAwWhcNMjUwODA4MDEwMTAwWjAzMTEwLwYDVQQD
EyhmMWY3MjgyZjA3MGVjMjczMzI0ZGNkZDZkN2M5YTExZDIxZjE4NWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cEDhli85OT5xrgV78kNnAaXvyNA
m6LD8aZWL7eVEAh2QHEbYJ0YhbySMuNilq41W2cr6U72Kig3SpqhyJ1f850E5x+j
4QURXbMyZJKDIvM7Y0hu1nOadRh/uztdV1osjly3vjzYmQQyxzU0GRMO3JluwJb3
fbVG4I0MZc90lVXD5pbiJKTaHL5djQpFUSP/AimHZstmtxdw5HDg9LAz7yPeRjz2
XAUzTpC8pPRfz+KQqAA1ByLGUgUdyVTrM7ltjxE4n3eYZkaBuwbk9TJcoDHdyDA4
FygilfY1siDHdx3rzUus84kBQndQlCvwLrPwv0C7SdLraRsAkS0ZLtjQywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH3KC8HDsJzMk3N1tfJoR0h8YXqMB8GA1UdIwQY
MBaAFCyxNWJawFGigJd/YwbPI9YMQGuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2Ut
ZmU5ZWRiZmNjN2VmLzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2UtZmU5ZWRiZmNjN2Vm
LzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0PLi2Ul
U0PvBM/B2bXtElevKWjRlsj09KWblMH3vwA0tXHjOKFpQAoUYr3Z8CZqG3MVtJFI
wE7aFTeuwNWoCacBuDr5eIVgVmH9vhA3ueXhcXgh2+OaKTP1hI0wpig+weoeianN
fJvfpqnYJKSBbMQdJavYSdFwWj5HIhVTn4QzcyesfLDsli/zzEQ4MALYd12I8Ymj
OixplhsYD4VokCJK76hQdYjQqt3bDuK8h3GZ0jwv0sj7gq3RWWGVeLOFgYuwPFnb
rFqCjYeL01TGh2yeBwNGtexK/iPgJzUck8irxLt8FRvFnGh/vFvRjPar3cP289br
z4HBby2e4xsKkQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:12 2025 by rpki-client