Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: HGGYAo1qD0FsurUjJK9Hlm3HuGsmyDtpquOkp+t/KnI=
Subject key identifier: AD:A1:8D:31:AA:54:EE:84:45:0A:9F:4B:B2:2C:B1:B5:E1:02:54:BD
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 0198D4731F3A2C242BC1BA847DC136614C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 15AE
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: 06A2c8m5poQOirPFAZ/5RsdKKbSPyPa7tCE1H61f7Xg=)
2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1f:3a:2c:24:2b:c1:ba:84:7d:c1:36:61:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=ada18d31aa54ee84450a9f4bb22cb1b5e10254bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:44:6c:c7:9c:7a:83:30:97:f2:a4:47:ef:
a8:fd:b5:ef:16:76:d3:77:4c:4d:70:b4:b3:64:92:
a5:b5:5f:15:54:79:2c:4a:4f:4d:28:a8:5c:6e:f5:
8a:72:7b:ed:f3:89:e8:69:2e:ba:eb:e4:f8:7e:c9:
35:8a:06:4a:ea:5e:44:3c:1a:a7:d5:59:5a:0e:5e:
7d:c3:a9:88:e3:6e:c7:0f:60:48:46:df:62:c8:d5:
4b:d3:46:dd:eb:8f:16:77:6d:43:cf:18:bd:80:90:
00:73:44:e5:84:ec:bd:a7:93:0c:27:ea:26:2e:6e:
6a:10:b8:cc:6f:f2:7c:89:f2:20:11:04:b0:c8:13:
f3:c3:4d:2f:cc:b8:4c:4e:41:ec:5f:b7:cd:f0:8e:
c8:9c:6b:17:5d:f4:50:59:7c:a3:23:ed:cc:1d:cb:
90:cd:ab:b6:2d:05:0c:1f:3b:c1:40:64:1c:18:06:
6b:f7:d5:e4:51:ea:3f:37:5e:98:b7:35:49:d9:28:
64:b2:44:2f:6f:41:f4:3b:61:72:2f:71:f0:db:da:
49:d2:e2:1e:00:51:9f:5a:56:36:ce:64:3c:cd:6a:
dc:3f:ff:03:b9:02:7a:37:ef:08:bb:fe:f5:87:43:
67:bc:76:47:89:00:cb:37:f4:75:18:70:33:29:ff:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:8D:31:AA:54:EE:84:45:0A:9F:4B:B2:2C:B1:B5:E1:02:54:BD
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b8:e2:8a:72:3d:17:77:7c:74:60:68:83:ec:48:ff:60:4c:
9b:1c:8d:78:1e:e6:b2:c5:0a:79:28:76:91:ee:ae:06:24:1f:
3d:6a:98:16:62:a0:30:cf:64:60:2f:bf:1e:8e:69:71:99:79:
6f:04:7d:d2:85:d9:2c:72:ab:17:11:85:9c:c8:71:ec:d9:5e:
34:15:e5:92:3b:21:51:86:7a:00:88:46:26:c6:b2:a6:af:3b:
97:03:07:d0:b3:6a:0c:56:01:2f:95:f3:4f:21:79:cc:fe:81:
d2:ee:b8:5e:b8:ae:85:da:16:18:7a:a8:d3:c2:dc:41:c6:2d:
7b:88:e0:03:48:b5:5a:07:ce:9a:ee:4f:c4:e8:7f:b8:e5:5d:
4d:60:ce:d2:57:a4:e0:c0:b5:63:52:a0:d7:60:99:dc:ef:19:
fc:a9:03:bc:4a:6c:20:e2:d3:ca:ba:47:2f:be:5d:95:ca:c7:
38:5b:1f:a7:28:75:8e:e6:d2:d1:3d:75:36:d6:bb:a5:0f:35:
2d:5f:83:c5:88:93:ca:58:23:62:07:e0:71:8c:c7:7d:c1:73:
99:bb:5d:bd:ef:fc:0d:27:ea:15:f7:cd:ad:00:f5:91:58:2e:
2d:cf:96:1c:cb:fa:c0:ec:80:70:e4:53:c7:f4:ba:43:a6:20:
ac:91:11:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcx86LCQrwbqEfcE2YUwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NWM1YWI5YzA5MWFiM2M0NTA1MDY4YTkyZmZjYjAxOTg0
OWFhNzgwHhcNMjUwODIzMDEwMjUwWhcNMjUwODI0MDEwMjUwWjAzMTEwLwYDVQQD
EyhhZGExOGQzMWFhNTRlZTg0NDUwYTlmNGJiMjJjYjFiNWUxMDI1NGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFlEbMeceoMwl/KkR++o/bXvFnbT
d0xNcLSzZJKltV8VVHksSk9NKKhcbvWKcnvt84noaS666+T4fsk1igZK6l5EPBqn
1VlaDl59w6mI427HD2BIRt9iyNVL00bd648Wd21Dzxi9gJAAc0TlhOy9p5MMJ+om
Lm5qELjMb/J8ifIgEQSwyBPzw00vzLhMTkHsX7fN8I7InGsXXfRQWXyjI+3MHcuQ
zau2LQUMHzvBQGQcGAZr99XkUeo/N16YtzVJ2ShkskQvb0H0O2FyL3Hw29pJ0uIe
AFGfWlY2zmQ8zWrcP/8DuQJ6N+8Iu/71h0NnvHZHiQDLN/R1GHAzKf+/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2hjTGqVO6ERQqfS7IssbXhAlS9MB8GA1UdIwQY
MBaAFJZcWrnAkas8RQUGipL/ywGYSap4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjIt
MGFiNDc1ZjlhOWEzLzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMjYyNjEtZThlZi00ZmI3LTg3MjItMGFiNDc1ZjlhOWEz
LzEvbGx4YXVjQ1JxenhGQlFhS2t2X0xBWmhKcW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLjiinI9
F3d8dGBog+xI/2BMmxyNeB7mssUKeSh2ke6uBiQfPWqYFmKgMM9kYC+/Ho5pcZl5
bwR90oXZLHKrFxGFnMhx7NleNBXlkjshUYZ6AIhGJsaypq87lwMH0LNqDFYBL5Xz
TyF5zP6B0u64XriuhdoWGHqo08LcQcYte4jgA0i1WgfOmu5PxOh/uOVdTWDO0lek
4MC1Y1Kg12CZ3O8Z/KkDvEpsIOLTyrpHL75dlcrHOFsfpyh1jubS0T11Nta7pQ81
LV+DxYiTylgjYgfgcYzHfcFzmbtdve/8DSfqFffNrQD1kVguLc+WHMv6wOyAcORT
x/S6Q6YgrJER8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:31 2025 by rpki-client