Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
File: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft (raw, json)
Hash identifier: Ukwmjw/HLUHsLol869MUn+Oy+wjKUnpzlgyVWwHODeU=
Subject key identifier: 49:F7:B5:BE:5B:77:3A:6A:69:E9:7E:12:03:10:A4:37:AA:8F:66:16
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 019A51BEA97B308F5F350A331E2BBFBB088E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
Manifest number: 1257
Signing time: Wed 05 Nov 2025 02:00:40 +0000
Manifest this update: Wed 05 Nov 2025 02:00:40 +0000
Manifest next update: Thu 06 Nov 2025 02:00:40 +0000
Files and hashes: 1: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl (hash: SY2kxLgy+DFxxlNqBl8gT/Cn1SFpCyKV6U0HeQmr/ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a9:7b:30:8f:5f:35:0a:33:1e:2b:bf:bb:08:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Nov 5 02:00:40 2025 GMT
Not After : Nov 6 02:00:40 2025 GMT
Subject: CN=49f7b5be5b773a6a69e97e120310a437aa8f6616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:44:49:26:45:44:0c:7a:af:cc:ce:34:89:
50:34:46:1c:1c:1e:0c:b6:58:72:cd:4f:4f:a0:b4:
60:e4:a5:47:88:04:db:21:b9:41:14:9a:77:13:6e:
75:36:3c:20:5e:4c:1e:cf:f2:7b:52:3e:24:2f:1e:
48:bc:8f:a5:a6:08:9f:b5:e7:82:e3:c8:16:e9:7f:
f5:7d:a2:cc:2c:d7:52:16:23:5e:66:fb:eb:74:45:
b6:84:6f:7c:f1:38:19:35:29:df:dc:12:e1:6d:24:
0d:38:3a:f1:0d:5f:e6:ba:15:88:d3:02:bc:15:1f:
af:84:24:c2:de:7c:12:60:87:6e:af:a3:74:e4:3a:
1a:e5:13:18:1e:8f:18:32:98:ad:52:1e:97:ad:bd:
06:e9:cc:6c:a7:fd:85:88:11:e7:ab:c6:80:36:0f:
fd:cd:49:f9:12:04:78:f5:01:0b:13:2e:cf:db:50:
fc:c8:5a:c3:f9:b5:98:59:52:3b:a7:5f:3f:9e:e4:
0e:65:a4:f1:d6:43:ea:4b:10:28:d3:ac:3e:a9:fd:
42:1a:1c:1a:73:ed:71:71:0a:6a:cb:18:e3:6a:81:
86:1c:2d:c4:11:3a:7f:b9:65:3a:b7:8b:e7:ea:25:
51:15:87:c2:6a:ac:3d:21:23:40:2d:7f:e7:ab:eb:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:B5:BE:5B:77:3A:6A:69:E9:7E:12:03:10:A4:37:AA:8F:66:16
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ba:b1:e4:fc:4f:c7:b0:30:93:7c:59:2c:4e:64:8c:d2:43:
98:cb:7b:06:88:16:7d:07:b4:73:35:d3:65:d0:c8:f1:07:37:
1a:0f:8f:8f:68:0d:e8:20:33:90:53:ba:91:75:d9:c6:d2:16:
54:95:84:f6:28:81:7d:7e:ce:e3:0d:4d:28:22:4c:f6:4b:a2:
ba:34:bf:c2:a9:24:d1:bb:22:5b:b0:f9:a8:3f:bb:b3:07:39:
e6:ee:70:ed:ae:69:f2:11:d9:4f:d2:b5:9c:f4:bc:f6:23:46:
15:9f:d1:92:bd:01:0a:b1:bf:66:ee:ec:73:14:82:09:36:45:
ae:ae:fa:4e:9d:d9:a4:69:fc:8a:9c:6b:58:53:3d:3a:6a:8c:
1c:dd:99:49:1a:81:e2:60:da:48:75:c9:a1:aa:b3:8f:c2:7d:
bb:f1:af:87:66:cc:9c:0a:01:e7:e9:f1:75:71:c4:07:5e:58:
7c:33:83:22:f7:86:97:ee:e1:80:a5:83:30:f1:7a:7b:1f:82:
27:4c:70:76:24:47:04:96:3a:38:15:b7:87:f0:93:07:3e:7a:
36:0e:d7:de:b0:fd:ad:ea:15:c8:cf:49:2a:f3:93:5f:d5:8d:
6c:f2:00:b1:36:0d:86:a9:9b:99:bc:71:cc:3f:0a:a0:bb:3a:
a2:01:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:20:17 2025 by rpki-client