Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
File: LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft (raw, json)
Hash identifier: PszRcwEfryk6IMrSI6YrpVPEtkhIcVqi4nQ7zAvMjF8=
Subject key identifier: FE:4E:99:75:54:BE:4A:59:2B:2B:07:C0:B6:8D:8F:05:31:A9:7D:BA
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 0197B8C5B323EE97A92FBBB0DCDE3D3892BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
Manifest number: 09E1
Signing time: Sat 28 Jun 2025 23:00:53 +0000
Manifest this update: Sat 28 Jun 2025 23:00:53 +0000
Manifest next update: Sun 29 Jun 2025 23:00:53 +0000
Files and hashes: 1: LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl (hash: 3DbNfjgBClybKp7Yy1cf4WaOrsAvXJp3VevGDygu0nM=)
2: jL298tdrN6lW-Z_FSTlwEHl5J2g.roa (hash: N+Czi4kLunJdxEq8yNGyCoMRtrtusytZ4W5vbX9rMgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:b3:23:ee:97:a9:2f:bb:b0:dc:de:3d:38:92:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Jun 28 23:00:53 2025 GMT
Not After : Jun 29 23:00:53 2025 GMT
Subject: CN=fe4e997554be4a592b2b07c0b68d8f0531a97dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:5a:86:f6:d4:71:1d:81:f0:7a:d5:d7:ac:
49:e7:62:1a:38:8a:35:5a:a5:f0:dd:3c:0d:da:01:
e3:ca:07:41:d7:6c:26:a8:b6:20:5a:57:90:08:5b:
f5:ad:7e:9c:6d:18:28:65:06:89:68:c8:65:14:34:
ef:27:d2:c4:4e:bc:30:19:ca:ad:bd:13:8c:ba:74:
6c:dc:88:00:67:26:66:dd:f8:f6:0a:ab:ef:81:c4:
8f:08:ea:22:97:4f:86:a4:47:06:40:03:96:d3:8d:
43:ef:c1:06:bd:bf:13:d5:23:01:e2:36:4b:82:3d:
16:0d:4a:1d:71:ff:fc:a8:1c:93:1a:16:5d:d0:75:
d3:68:28:dc:ec:5d:b1:f4:98:0a:21:be:4f:fb:90:
47:33:88:d7:15:7d:9e:4c:31:3e:d0:98:f8:94:90:
f4:bd:59:a8:85:ca:97:f5:f3:79:cf:18:74:dc:09:
34:fc:14:35:1d:e5:94:d5:84:4c:91:d7:e2:87:0d:
c8:3b:53:ab:00:48:a4:0c:cb:ad:2b:ec:e0:7c:2f:
18:48:95:c1:c8:46:96:00:14:69:0e:a5:bf:42:fd:
20:78:16:d7:a5:ad:70:d7:d7:5c:d3:69:36:bf:bc:
77:0a:cf:d8:a3:3d:ea:b0:2d:ca:e3:f8:7b:69:c6:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4E:99:75:54:BE:4A:59:2B:2B:07:C0:B6:8D:8F:05:31:A9:7D:BA
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:84:53:33:6a:98:08:54:c4:3f:d7:04:4d:98:3d:19:fc:2a:
52:b4:48:f2:4a:c5:85:dd:cf:85:6c:87:91:fe:3c:4f:45:c6:
f2:f7:78:89:30:e4:81:f1:2b:b5:d2:3a:21:36:fd:d3:ef:da:
3b:5e:a9:58:4e:c4:6f:c9:29:aa:af:29:04:60:64:68:90:bd:
d9:6b:40:33:8b:93:c5:d7:40:9d:60:86:25:fe:d4:1f:55:68:
d0:e0:22:b9:ba:6e:47:14:82:bd:74:d8:20:1b:08:5f:b3:09:
b2:fe:16:d6:78:80:3a:a1:4d:e1:1d:26:e1:af:11:c5:eb:e3:
a3:d6:98:db:7d:27:9c:6a:01:d7:b7:c2:21:1c:6e:49:72:6c:
2d:56:6b:41:12:37:4f:4b:c9:86:95:00:6e:43:cb:c1:e3:a2:
67:f0:c4:78:b1:ea:a5:1f:77:b4:b6:66:99:12:41:11:bd:a5:
df:01:bd:4c:87:1b:78:ef:de:7f:84:80:54:64:ff:68:26:27:
bf:6c:12:d9:af:5f:99:ee:82:68:cb:bc:64:f5:dc:45:4c:4b:
79:f7:9f:12:be:3a:52:1b:0b:16:fc:72:e6:98:82:ce:10:84:
45:87:7f:42:cb:cb:fd:1a:10:ae:3a:8d:6e:8d:33:3a:76:a4:
7a:f5:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:33:20 2025 by rpki-client