Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: JVhzC/j7L0vuEJxokGuNuAs43zK6uH43QIBxyzDP6TI=
Subject key identifier: 93:B4:B8:F8:EE:46:A8:BB:09:53:38:B4:99:58:89:C0:F3:F9:76:D1
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 0196715384322025EB4D3573A3E823BFF115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 04E6
Signing time: Sat 26 Apr 2025 09:00:20 +0000
Manifest this update: Sat 26 Apr 2025 09:00:20 +0000
Manifest next update: Sun 27 Apr 2025 09:00:20 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: s7Q9qVAAIf5qACDVGyfMlhX93W91eZnTiq2sQw76N+I=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:84:32:20:25:eb:4d:35:73:a3:e8:23:bf:f1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Apr 26 09:00:20 2025 GMT
Not After : Apr 27 09:00:20 2025 GMT
Subject: CN=93b4b8f8ee46a8bb095338b4995889c0f3f976d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:b2:59:87:6d:e9:d5:86:a9:71:88:01:cf:
46:37:29:86:42:1a:06:90:81:b3:ce:93:74:22:e9:
17:43:fb:e3:0a:ec:c8:2f:9c:53:2d:95:64:4a:6b:
ab:8b:0f:b7:00:7b:fa:6c:14:8a:7c:b9:0f:1e:0f:
48:57:25:8a:08:e1:c0:97:8d:0a:2e:f1:21:fe:62:
89:74:d4:e0:16:a3:4c:f9:b0:68:19:07:47:09:35:
66:25:9b:5d:46:bf:18:0f:ca:18:6e:0f:5c:e7:82:
59:f2:ea:af:58:c1:cd:55:02:b0:a0:ca:7e:4f:6b:
55:7f:60:7d:02:18:81:3f:7f:fc:bc:24:06:22:b7:
0d:4b:e1:9f:e8:3d:a3:2a:60:ba:de:ba:cf:42:a3:
2e:f0:79:1a:54:23:74:32:14:a5:99:61:14:8e:e8:
bb:b3:7c:71:be:87:44:b7:dd:d8:01:cf:c7:dd:52:
95:5d:f3:c1:0d:82:4f:a2:4b:e3:b9:49:4e:34:ca:
e7:08:6a:41:d1:49:c9:64:bc:72:20:49:cb:a6:9e:
08:9d:35:82:76:7a:a9:27:81:f0:b6:33:2c:82:e5:
3d:29:66:4b:ee:0b:fc:0d:5d:d6:38:e7:6d:41:1b:
71:d6:c7:2b:a4:24:26:21:c8:90:ab:ce:45:d3:01:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:B8:F8:EE:46:A8:BB:09:53:38:B4:99:58:89:C0:F3:F9:76:D1
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:c0:f7:68:c7:5e:c2:66:db:9a:a9:81:ea:7b:4f:11:92:
9d:58:f8:f4:da:88:af:93:5e:96:be:a1:f0:79:de:42:35:db:
c6:83:10:66:50:97:a8:d5:2d:cc:ec:f4:7e:7e:37:55:cf:ea:
e1:50:a8:cf:b3:a9:3c:74:08:04:eb:06:cb:92:35:2b:f2:99:
20:1d:47:06:d1:9e:c9:20:78:f8:1c:d8:50:a8:10:25:69:f2:
a1:71:70:5c:b5:de:d9:b0:44:f2:07:1f:bd:05:a1:97:41:c0:
1f:f2:2b:22:69:83:ba:f3:93:4b:ac:67:f4:c9:2d:72:2e:24:
f1:30:c4:ee:24:92:b6:fc:20:6c:5f:7f:3d:8a:9a:0d:d8:d1:
6f:38:83:c4:3d:04:83:0f:2c:e3:04:a3:52:77:99:a6:d9:4c:
f9:9f:64:ac:18:03:9d:e0:8a:5c:53:10:8a:b9:c6:93:11:b1:
5a:8b:bf:21:45:da:fb:81:c7:5c:82:77:1f:ca:5e:7e:e2:bf:
ae:f3:be:dc:4b:49:a6:90:4e:31:0c:2f:0a:96:31:de:5e:1b:
b5:bb:e8:36:92:4e:9d:be:25:97:68:61:e1:36:65:eb:41:3b:
f4:fc:de:7a:10:e9:14:e6:21:56:aa:58:72:d1:01:58:5e:87:
22:9a:d1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxU4QyICXrTTVzo+gjv/EVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYmQ3NjY4OGI4N2MwMzkxNGFlMmEyZTE0OTBjMmYxZTkx
NDE2NjEwHhcNMjUwNDI2MDkwMDIwWhcNMjUwNDI3MDkwMDIwWjAzMTEwLwYDVQQD
Eyg5M2I0YjhmOGVlNDZhOGJiMDk1MzM4YjQ5OTU4ODljMGYzZjk3NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ6yWYdt6dWGqXGIAc9GNymGQhoG
kIGzzpN0IukXQ/vjCuzIL5xTLZVkSmuriw+3AHv6bBSKfLkPHg9IVyWKCOHAl40K
LvEh/mKJdNTgFqNM+bBoGQdHCTVmJZtdRr8YD8oYbg9c54JZ8uqvWMHNVQKwoMp+
T2tVf2B9AhiBP3/8vCQGIrcNS+Gf6D2jKmC63rrPQqMu8HkaVCN0MhSlmWEUjui7
s3xxvodEt93YAc/H3VKVXfPBDYJPokvjuUlONMrnCGpB0UnJZLxyIEnLpp4InTWC
dnqpJ4HwtjMsguU9KWZL7gv8DV3WOOdtQRtx1scrpCQmIciQq85F0wF3IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO0uPjuRqi7CVM4tJlYicDz+XbRMB8GA1UdIwQY
MBaAFCy9dmiLh8A5FK4qLhSQwvHpFBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYt
ZTBmOTMwODA2YmRjLzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82NmI5NTktNDcyZi00OTIyLWEyMjYtZTBmOTMwODA2YmRj
LzEvTEwxMmFJdUh3RGtVcmlvdUZKREM4ZWtVRm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchTA92jH
XsJm25qpgep7TxGSnVj49NqIr5Nelr6h8HneQjXbxoMQZlCXqNUtzOz0fn43Vc/q
4VCoz7OpPHQIBOsGy5I1K/KZIB1HBtGeySB4+BzYUKgQJWnyoXFwXLXe2bBE8gcf
vQWhl0HAH/IrImmDuvOTS6xn9Mktci4k8TDE7iSStvwgbF9/PYqaDdjRbziDxD0E
gw8s4wSjUneZptlM+Z9krBgDneCKXFMQirnGkxGxWou/IUXa+4HHXIJ3H8pefuK/
rvO+3EtJppBOMQwvCpYx3l4btbvoNpJOnb4ll2hh4TZl60E79PzeehDpFOYhVqpY
ctEBWF6HIprRXQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:03:36 2025 by rpki-client