Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: 7i4j0TU6uvpobHVs4HapmEBI+W5CFdTHtinJ1ss3T7Y=
Subject key identifier: 3B:AB:1B:30:B8:B6:F7:8E:AF:E5:90:81:21:91:CE:5F:A3:F3:21:81
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019A4EF56BADF5A32FD20405C874D6629727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 1673
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: J4gZ6MWssqo9odP+TpUn4nFfmjYH3IK057BjoO+ML4c=)
2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=)
3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6b:ad:f5:a3:2f:d2:04:05:c8:74:d6:62:97:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=3bab1b30b8b6f78eafe590812191ce5fa3f32181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:d3:ab:d9:8a:36:bb:2d:12:88:29:61:fd:
62:f4:1e:1d:a0:8f:a6:9e:b5:24:69:61:55:6c:36:
6a:7e:73:a7:8b:83:08:93:09:49:df:c0:8d:e2:cd:
31:87:a9:c2:a8:4f:7c:d2:ef:c3:0b:7b:f3:19:fb:
f4:b6:e4:e1:65:88:16:a1:85:90:01:55:fe:04:15:
7b:80:b8:03:21:b3:59:1f:9d:cf:59:ca:8c:d9:e1:
95:ae:34:d0:09:57:f3:a1:c6:b1:7a:0e:57:35:8a:
9b:31:7e:ee:5b:66:83:ce:55:6d:43:37:1c:62:cf:
51:8a:38:6f:8e:1a:c4:53:eb:60:f5:3c:65:4f:b0:
d5:a9:4a:23:d3:6f:c7:ae:e7:5d:a2:2d:7a:fc:59:
8b:28:0a:50:90:7c:ea:ce:94:a0:30:73:e0:96:30:
2d:dd:4d:74:11:8e:48:f7:80:44:cb:30:d9:cf:cf:
c7:61:cd:42:8e:5d:5f:c9:b2:83:01:2e:82:2b:ae:
53:1d:8b:5b:fb:78:29:f4:82:00:0b:44:57:64:a4:
7b:7f:dc:52:fa:26:d6:73:47:d2:15:bb:d0:53:07:
05:ba:76:31:72:dc:0e:a9:d4:8d:23:bb:d0:ae:ac:
22:54:16:5e:f7:28:cb:6f:46:df:6e:19:ba:4a:68:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:1B:30:B8:B6:F7:8E:AF:E5:90:81:21:91:CE:5F:A3:F3:21:81
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:1e:65:0a:4d:c1:ff:58:4b:9d:57:db:62:94:45:a3:2b:
75:07:95:f3:fd:0d:98:07:31:37:a5:58:3e:c2:29:73:fb:cf:
82:2a:5b:26:64:bc:23:d1:18:7f:d5:1a:21:d4:f5:80:51:c2:
ba:e4:d7:c7:6b:95:cf:63:1c:bb:e6:cc:84:73:49:9e:3a:da:
d0:26:53:4e:5c:25:a2:e6:d7:58:95:29:3e:d3:46:b6:21:be:
43:dc:28:f9:43:69:93:6c:1a:f4:87:ec:cd:87:09:44:5a:a4:
aa:6f:0d:ef:56:ff:7b:c2:83:5a:1d:f3:34:dd:95:27:b0:6e:
99:ed:78:30:f0:14:83:50:66:54:84:5d:bf:0d:13:15:aa:ba:
44:b0:65:60:be:e8:76:d0:6a:9a:59:85:2a:53:79:b6:88:c5:
c0:d5:d7:a9:64:78:a2:31:aa:0d:58:a4:80:c0:ab:75:05:4f:
cb:38:70:b7:25:d7:9b:c0:ac:a5:2f:f5:9c:95:22:d5:d5:72:
8a:dc:2e:19:4d:62:63:c2:94:7a:27:29:50:dd:f4:af:88:7a:
ad:b3:e1:1c:58:92:ea:ad:40:5e:02:48:07:05:f2:91:cf:76:
4f:93:72:df:70:38:d8:f4:02:0b:c3:af:96:51:5a:c6:ff:78:
75:18:ff:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Wut9aMv0gQFyHTWYpcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjAzNTcwNzIwMmQ0MDEzYTQ0NzliZTUxMTJkN2ZhMjI3
YjcyNzUwHhcNMjUxMTA0MTMwMTM3WhcNMjUxMTA1MTMwMTM3WjAzMTEwLwYDVQQD
EygzYmFiMWIzMGI4YjZmNzhlYWZlNTkwODEyMTkxY2U1ZmEzZjMyMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XbTq9mKNrstEogpYf1i9B4doI+m
nrUkaWFVbDZqfnOni4MIkwlJ38CN4s0xh6nCqE980u/DC3vzGfv0tuThZYgWoYWQ
AVX+BBV7gLgDIbNZH53PWcqM2eGVrjTQCVfzocaxeg5XNYqbMX7uW2aDzlVtQzcc
Ys9RijhvjhrEU+tg9TxlT7DVqUoj02/Hruddoi16/FmLKApQkHzqzpSgMHPgljAt
3U10EY5I94BEyzDZz8/HYc1Cjl1fybKDAS6CK65THYtb+3gp9IIAC0RXZKR7f9xS
+ibWc0fSFbvQUwcFunYxctwOqdSNI7vQrqwiVBZe9yjLb0bfbhm6SmhdXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDurGzC4tveOr+WQgSGRzl+j8yGBMB8GA1UdIwQY
MBaAFCywNXByAtQBOkR5vlES1/oie3J1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEt
MDYzMDhhNDQ4NTZkLzEvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEtMDYzMDhhNDQ4NTZk
LzEvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsUeZQpN
wf9YS51X22KURaMrdQeV8/0NmAcxN6VYPsIpc/vPgipbJmS8I9EYf9UaIdT1gFHC
uuTXx2uVz2Mcu+bMhHNJnjra0CZTTlwloubXWJUpPtNGtiG+Q9wo+UNpk2wa9Ifs
zYcJRFqkqm8N71b/e8KDWh3zNN2VJ7Bume14MPAUg1BmVIRdvw0TFaq6RLBlYL7o
dtBqmlmFKlN5tojFwNXXqWR4ojGqDVikgMCrdQVPyzhwtyXXm8CspS/1nJUi1dVy
itwuGU1iY8KUeicpUN30r4h6rbPhHFiS6q1AXgJIBwXykc92T5Ny33A42PQCC8Ov
llFaxv94dRj/8w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:47 2025 by rpki-client