Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: O+ijHth++YrzvU3jLdopXaGqVfXdTcA8oaxeKiR+0nk=
Subject key identifier: 71:D5:2C:7E:F4:3A:10:86:CC:9D:C6:00:F8:54:DD:23:01:7C:D8:5C
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019768F2D98243B3BFC9272580401E1941EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 11:00:35 +0000
Manifest this update: Fri 13 Jun 2025 11:00:35 +0000
Manifest next update: Sat 14 Jun 2025 11:00:35 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 4LpTmh28VqT61kUG9OfO6uD6ZbVzkMQLk3HgFmJqS+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:d9:82:43:b3:bf:c9:27:25:80:40:1e:19:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Jun 13 11:00:35 2025 GMT
Not After : Jun 14 11:00:35 2025 GMT
Subject: CN=71d52c7ef43a1086cc9dc600f854dd23017cd85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:38:07:db:27:8f:8f:f3:6b:92:30:01:b8:
31:8f:1f:e0:95:e6:a3:2f:57:43:dc:e2:92:3c:88:
2d:5f:00:44:2e:56:34:dd:71:05:fb:d0:d0:f6:8e:
a9:64:89:e7:10:47:83:22:5c:ba:b1:c3:08:3f:55:
93:5d:19:35:04:20:55:2e:ba:86:21:ec:5a:1d:5f:
0c:65:05:ea:5d:53:fa:72:bd:31:cb:77:42:2d:54:
81:9d:27:05:13:eb:fb:09:e6:36:21:b5:85:c0:65:
b0:eb:2f:28:11:27:c1:30:94:70:cb:7a:1c:6d:7b:
1a:34:f2:f1:ad:b0:aa:83:f4:a4:02:9d:ba:b8:fb:
80:48:9b:c6:1f:5b:dc:86:57:ac:6e:71:e8:39:60:
fb:a4:25:ff:16:9b:83:e5:73:74:09:61:e7:2e:ca:
eb:e2:95:2b:d3:54:4d:48:d2:d4:9c:cd:16:da:31:
21:ef:b9:fb:dd:8e:d0:90:a4:05:d7:dd:cf:39:35:
55:0d:9a:3b:f2:ea:4e:99:d7:2c:91:43:7b:73:90:
47:3e:9e:45:65:3b:54:0b:f0:d2:8b:e5:74:1c:7e:
58:9d:29:c5:05:42:de:bf:60:4a:8d:71:38:47:b2:
ce:ed:d8:9d:5b:a6:19:68:1f:4b:c4:e1:f1:bb:30:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D5:2C:7E:F4:3A:10:86:CC:9D:C6:00:F8:54:DD:23:01:7C:D8:5C
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:51:a6:46:5f:c1:43:39:8d:9c:3d:c9:71:0c:47:67:21:b3:
27:79:cf:e4:c7:d3:ef:59:9b:a4:95:dc:10:86:83:e5:57:ee:
dc:4b:43:a5:13:54:79:03:7a:76:37:fe:7f:61:8e:2f:1a:60:
75:9d:72:c2:25:13:e7:e9:20:80:20:6a:06:dd:34:9b:7b:f0:
11:34:05:1d:7d:93:a8:46:1c:90:47:42:a7:58:6c:bd:c7:e4:
18:ad:14:57:ee:b3:be:00:59:c9:53:c0:37:42:3d:3a:56:33:
c6:8f:17:53:a3:74:96:d9:47:18:ca:39:d0:7d:0e:78:33:50:
58:f1:5f:a4:76:e4:33:7f:2f:89:15:a7:26:27:53:91:8f:55:
b2:76:b7:78:e9:61:20:a8:34:a2:2c:16:b0:f6:4c:e0:67:07:
f3:7c:a2:3d:f8:42:11:b6:5b:e0:6f:a8:ba:fc:b4:4c:60:b9:
6b:58:a8:6a:28:bb:ae:74:bc:b8:99:f1:10:80:bd:73:77:54:
e6:34:7b:33:79:1f:d4:4f:a0:db:a8:06:e1:b5:39:cb:39:e5:
fa:13:44:3a:8e:eb:0e:17:53:97:e5:4b:51:ee:41:2f:eb:3f:
1f:60:5e:c2:7d:c6:93:41:fc:d9:fc:7f:3c:5c:00:ba:b5:fe:
a5:96:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:48 2025 by rpki-client