Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: OQC9YjM/t4ggyiIPFn0YVGbZPobV630wSqBBdavauOE=
Subject key identifier: D6:30:28:16:40:B6:A2:F4:D9:AF:52:ED:12:F3:04:95:64:98:DD:0C
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 01987750C2ECFD99D6846F6B58385D6EE550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 23:00:38 +0000
Manifest this update: Mon 04 Aug 2025 23:00:38 +0000
Manifest next update: Tue 05 Aug 2025 23:00:38 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 4cg9BA4BeLHCgY6nTfxF0UQWQTWAjBXXoM/3+1B6PjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:50:c2:ec:fd:99:d6:84:6f:6b:58:38:5d:6e:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Aug 4 23:00:38 2025 GMT
Not After : Aug 5 23:00:38 2025 GMT
Subject: CN=d630281640b6a2f4d9af52ed12f304956498dd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:2c:45:30:02:bd:92:1b:12:4c:9f:4a:66:
52:5d:48:27:92:f4:7a:4f:ea:a4:69:54:83:f7:1d:
b4:81:df:6c:93:a6:fe:93:4e:e6:a2:38:68:9f:dd:
c7:8c:64:90:70:fe:7e:e6:9d:84:1a:b8:e0:d2:23:
98:d1:ee:bd:45:51:01:55:43:a2:ff:f0:0d:a6:a1:
c9:46:dd:9f:28:42:29:d4:4e:43:02:f4:4c:b3:b9:
29:59:ef:ae:68:9d:b8:9f:11:ac:82:a8:06:3e:1d:
15:bd:51:11:d0:26:9d:56:9a:6f:f3:d0:a9:fc:7e:
57:15:f6:14:72:3a:cd:21:3c:f5:04:93:9d:4f:60:
81:05:e9:70:73:32:92:93:09:2b:35:8a:4f:82:2c:
51:dd:0e:c4:29:08:9c:6c:72:88:78:2e:6b:17:75:
75:90:62:7c:a2:f3:f3:f4:61:2c:01:fc:5f:25:46:
cc:74:34:d7:99:7a:26:17:c9:4a:0e:68:39:3b:a3:
04:5d:12:00:98:33:13:39:a0:ba:d0:06:62:e5:aa:
5f:76:fd:96:27:10:a8:0d:11:6d:9e:1c:ee:e4:1a:
f8:57:e8:ef:ec:d9:75:97:a9:6f:d7:83:8a:67:4f:
0f:71:3b:57:ce:c0:45:82:35:1b:aa:d0:36:75:7b:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:28:16:40:B6:A2:F4:D9:AF:52:ED:12:F3:04:95:64:98:DD:0C
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:49:9e:3e:ce:f2:69:0d:b1:3b:2d:a2:10:b0:cb:6b:1f:72:
c8:4d:3d:96:5a:1e:31:78:4e:28:5c:67:ce:0e:93:9d:d4:62:
81:8a:1b:34:7f:87:2d:6a:ba:19:aa:51:7b:38:32:9b:ab:d9:
56:ad:2d:ba:31:b9:c5:30:94:d6:d3:a1:cf:f9:fc:18:10:9f:
18:11:3f:35:58:d7:11:82:97:7a:0b:d3:4e:35:b3:24:cd:51:
cc:6c:58:21:1a:00:2b:20:c3:49:e0:c5:3b:3c:e1:f6:f5:80:
92:99:1e:bc:95:91:43:d1:40:d1:30:1f:c5:d1:49:be:20:a7:
ae:e1:82:75:80:77:8a:15:43:68:64:84:04:94:84:d8:cb:5e:
8f:c7:43:2f:59:0a:f5:87:ff:a3:0c:58:22:04:bd:95:6d:52:
6d:15:39:6b:9f:2f:33:3e:4b:d4:c8:3d:0a:25:51:8a:a3:fd:
81:4b:f5:34:88:74:76:92:3a:35:1a:e7:a4:36:20:2c:25:99:
23:18:74:de:1e:65:0f:4e:f3:2a:9b:78:50:ce:2b:29:1e:61:
26:7a:9a:bf:1d:45:d9:1f:e9:14:51:84:b4:fa:3c:95:dd:52:
18:c8:06:e9:da:e5:d1:86:25:6c:71:e8:3c:22:dd:fa:8d:7d:
ad:88:3f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:14 2025 by rpki-client