Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: maHfy/vu9M4rh6IDtauJYBZElEiMIEzs2FqdYvjuIHk=
Subject key identifier: 9B:63:26:C8:9D:C3:31:1C:15:15:97:74:49:AA:ED:67:3A:66:5D:CF
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 019873E3580B0D9EBBD43F428FFDEE0768C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 157D
Signing time: Mon 04 Aug 2025 07:02:15 +0000
Manifest this update: Mon 04 Aug 2025 07:02:15 +0000
Manifest next update: Tue 05 Aug 2025 07:02:15 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: +kGnVSS6MKXsNq2JeGa/XVTruN3xHjxxoTTx1hahOlQ=)
2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=)
3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:58:0b:0d:9e:bb:d4:3f:42:8f:fd:ee:07:68:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Aug 4 07:02:15 2025 GMT
Not After : Aug 5 07:02:15 2025 GMT
Subject: CN=9b6326c89dc3311c1515977449aaed673a665dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:1f:a5:7e:f0:fd:f2:86:cc:ba:d4:8b:74:
c8:ce:3b:87:ae:eb:ba:62:a0:69:48:a7:a6:8c:ff:
3b:20:cd:9d:76:05:f2:20:6d:16:49:78:65:98:99:
1e:6b:a9:1d:af:47:dc:b1:b7:7b:84:b9:0c:f6:cc:
c3:e1:3c:36:77:55:9a:7c:ac:14:22:09:ea:5a:39:
21:3d:30:60:84:d7:62:50:6f:b1:d0:85:b0:ba:2e:
6c:15:6b:08:eb:ef:83:8d:5a:31:c6:8b:03:85:53:
a9:f8:98:08:0f:17:90:9e:9b:fa:ca:60:6d:19:a5:
d9:b5:a0:31:b4:52:fb:da:56:4e:17:1e:3c:55:5e:
5a:e0:c4:94:9f:1d:82:b7:1b:49:bd:31:58:50:86:
e8:50:b4:51:8f:2e:d3:22:3a:0d:b4:fa:4f:b1:3c:
15:cf:a2:28:71:6b:fc:ff:70:46:f9:ab:56:d1:92:
df:43:e4:38:2c:b2:0e:4d:75:5e:ec:7f:6e:e6:77:
ba:31:ca:80:fa:eb:fb:6f:ab:c9:98:5e:b8:4c:92:
4e:a6:e9:0c:f4:d1:e4:81:94:ce:f3:82:70:12:e5:
d2:0b:b7:b4:40:e8:f8:bf:11:ca:1e:20:c7:5f:52:
9a:50:eb:d1:80:aa:ba:4e:07:3d:9d:c2:5c:b5:31:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:26:C8:9D:C3:31:1C:15:15:97:74:49:AA:ED:67:3A:66:5D:CF
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:54:92:b3:fe:f5:b2:5e:36:23:d5:4e:26:7a:80:d7:57:41:
5a:2e:89:5f:be:43:e3:7d:bf:d3:d3:74:87:26:30:69:46:8d:
7a:7d:ae:48:1a:bd:9f:b5:59:aa:41:aa:f2:a3:18:f4:11:8a:
0a:7e:a2:cf:b0:fc:8a:53:a3:46:63:08:3d:e1:cf:e4:8d:ee:
ce:fc:8a:99:0d:83:cc:cc:f1:78:0b:53:b9:04:10:13:0b:e9:
3d:f4:3c:89:a0:ee:38:10:8b:f9:8d:b2:bf:0e:cb:91:c4:d0:
4c:c7:4d:e3:04:7c:09:ef:af:5b:af:41:44:e7:ee:c9:2a:04:
e3:d5:02:48:11:a0:8e:41:69:1e:63:5f:f3:8f:76:af:99:6b:
a8:e7:ae:31:47:04:d3:dd:d9:f6:53:0c:28:06:ec:f3:bb:42:
1c:dc:2c:07:14:ee:67:5a:91:36:82:79:7a:20:c1:ab:4e:39:
07:e8:08:f2:67:a4:66:bf:6f:1d:01:c1:31:e9:cd:13:4b:1d:
7f:e7:14:cd:1b:a5:64:f0:dc:76:8c:6e:4a:74:96:da:8d:d1:
ec:88:38:d2:18:29:6d:1d:2f:77:cc:d3:b9:a9:d6:39:b7:6b:
25:0e:28:7e:13:c5:91:dd:28:4b:c0:61:7e:ae:65:1f:b7:aa:
7e:95:2c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:48 2025 by rpki-client