Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: eYF0KmJmZOlRfI7L2z3LIpo/lQwIkz1ofOSejBReVAg=
Subject key identifier: E7:AD:74:13:AE:AA:79:29:9B:0A:3B:60:04:9D:F1:AE:7A:AD:9C:F0
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 01988E0FA7D4D5F9C07A3910B6638602D929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 05FE
Signing time: Sat 09 Aug 2025 09:00:47 +0000
Manifest this update: Sat 09 Aug 2025 09:00:47 +0000
Manifest next update: Sun 10 Aug 2025 09:00:47 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: XVzLskJVWsj3SB2x4W/wRo9IRafC6J9h3pw4UqGFIk8=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:a7:d4:d5:f9:c0:7a:39:10:b6:63:86:02:d9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Aug 9 09:00:47 2025 GMT
Not After : Aug 10 09:00:47 2025 GMT
Subject: CN=e7ad7413aeaa79299b0a3b60049df1ae7aad9cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2d:b5:92:11:bb:86:a3:85:3a:33:b8:61:ef:
f2:2a:9e:5c:64:c1:5c:02:d2:6c:a9:84:88:6d:08:
ce:29:ae:d4:e0:52:e4:a0:83:30:73:0a:bd:f3:8e:
15:ae:ce:b7:7d:86:2d:59:05:47:b1:b7:ff:c3:f6:
26:c0:6d:00:55:d1:76:47:4b:53:63:bb:5d:bb:5e:
da:85:9d:d2:32:0a:db:63:ce:48:dc:1b:df:6a:68:
af:ef:9b:40:2b:10:3d:dc:ac:c4:99:dc:5e:1f:1b:
af:ff:e0:0a:4e:90:56:82:ca:b6:cd:fa:89:86:0f:
6a:77:27:7b:71:1c:91:52:b7:81:94:36:38:10:9e:
25:a4:8d:32:3d:25:a9:77:5e:e1:b7:63:62:10:94:
d1:39:41:80:69:ff:33:09:30:be:f6:f7:c2:71:1d:
98:b3:8a:cc:61:26:44:2c:09:91:05:f7:8c:91:50:
a2:5b:0f:e1:f9:a1:ee:25:49:d0:a1:ef:2d:d7:6f:
3b:52:14:9d:99:ae:b4:9a:fc:f9:4a:4f:cb:3e:4c:
51:c9:5a:a5:6c:a4:17:ec:a3:9f:b0:e4:97:e1:5e:
1e:ca:19:a1:8c:e2:23:65:93:24:fb:54:ff:53:8b:
85:19:7a:27:61:49:e9:61:23:50:cd:23:36:66:36:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:74:13:AE:AA:79:29:9B:0A:3B:60:04:9D:F1:AE:7A:AD:9C:F0
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2b:48:3d:4a:4d:77:6d:14:90:c0:2c:58:1d:ef:a7:eb:37:
29:db:ad:b5:04:ae:2c:fb:73:d5:05:8f:29:bc:9b:80:0d:01:
52:e5:37:d7:4e:d7:46:74:f2:65:01:97:2e:82:ff:85:1b:ac:
ad:8b:90:bc:31:1a:dd:b6:d9:ae:02:08:c1:33:92:38:f4:5a:
06:7f:96:1d:4f:ec:62:81:a5:fa:d6:2d:1e:49:08:c5:b0:fb:
3f:02:9a:23:4d:15:8e:80:6f:95:1c:62:44:fd:43:83:89:9a:
1d:78:94:3d:b5:69:05:b1:fe:2b:c1:6e:17:63:aa:4c:b0:2f:
8a:bd:bc:8b:d7:98:e1:74:18:9e:97:e7:10:10:e0:03:45:0f:
fd:a7:92:15:5b:50:cf:90:c4:d7:36:82:a6:12:da:e2:34:cf:
67:59:1d:c2:bc:3d:6b:19:ad:aa:40:3c:04:6d:94:8d:2a:fe:
22:41:f3:94:77:7c:48:d8:47:22:79:5d:88:52:9f:f4:0f:34:
61:a9:62:fa:2a:d0:2b:da:46:51:19:1f:fb:81:5a:c9:16:15:
ed:cf:13:1b:6b:f1:51:b4:bc:81:f1:10:80:e2:48:34:0a:ce:
ec:57:e2:01:1c:06:eb:71:55:e3:f4:99:c2:61:db:16:be:b7:
28:ad:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:49 2025 by rpki-client