Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: jl+S86ncABDz9lY0W47oPBoVY4A6b5bqddUVyaNKTUQ=
Subject key identifier: D8:C4:8E:E1:B3:AB:64:88:50:2A:B0:AF:DA:18:72:D3:EF:43:2C:8D
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 0199FBEA9F04A3E3EC7B16068FD5F0C85EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 1647
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: JfoIKP5+PKy9x9R0FE81vSktZE4LXNPVyItyCZfHpWI=)
2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9f:04:a3:e3:ec:7b:16:06:8f:d5:f0:c8:5e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=d8c48ee1b3ab6488502ab0afda1872d3ef432c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:47:eb:00:6f:9b:85:b4:ff:d1:48:5b:d6:
31:c3:0b:71:26:3c:78:c2:24:26:f7:27:ce:7a:43:
cd:27:64:36:13:a4:ca:da:4d:92:87:cc:1b:3f:cd:
6c:f7:ce:9b:70:90:ef:7f:47:a9:05:13:6e:b5:02:
03:38:0b:b8:11:ec:eb:84:dc:dc:16:d5:f2:d2:9c:
09:66:d6:b3:9f:44:a7:2f:c1:5b:62:ae:1d:ae:9a:
2d:05:a7:6d:66:3f:4c:9d:8a:ba:f7:85:54:07:2f:
3c:e0:0b:be:9f:0b:87:ec:96:44:9a:fa:e3:58:fd:
4e:59:a4:8a:5a:72:dd:59:d1:f7:76:35:1c:9f:b1:
83:d6:03:fd:88:ef:95:2e:60:43:89:04:6f:10:ab:
9e:c4:45:05:84:8d:2b:23:6e:d6:bc:be:41:20:de:
6d:2d:f0:cf:32:b4:da:c0:ca:e1:f0:89:b1:c5:b5:
ae:07:88:43:0b:c0:0e:b0:b0:60:17:a2:51:cc:b5:
bb:aa:9a:9b:71:5e:f1:63:11:1c:76:a9:18:d9:22:
e9:b8:86:1f:57:55:b8:8e:d6:de:cf:3a:1f:4c:a5:
ac:64:53:dc:3e:88:de:d1:5c:2d:5c:2a:c3:f9:6d:
e6:c0:b7:ab:f3:3e:50:fb:dd:a6:b7:53:ca:43:34:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:8E:E1:B3:AB:64:88:50:2A:B0:AF:DA:18:72:D3:EF:43:2C:8D
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:31:3e:69:9a:8e:0d:b2:2e:f5:ff:36:28:0c:bf:f8:2e:ff:
5a:a5:e5:96:04:d8:f0:e4:59:d7:dc:b8:18:ef:ed:2b:75:d9:
9f:88:ca:92:e3:bb:99:77:04:84:83:4d:42:08:20:f7:36:ad:
cf:4d:52:45:50:97:85:5b:ab:ea:86:70:7c:c0:4c:e6:e1:1d:
a2:3e:46:bc:c2:9b:68:40:a5:f2:c9:cf:7a:d6:94:07:a0:66:
46:95:05:8a:fe:2d:b6:e1:06:56:85:90:52:dc:f2:38:76:09:
f1:d9:82:91:fc:9f:24:4c:c2:66:da:34:e7:ab:3f:b0:73:27:
39:98:4d:51:92:2f:2e:a2:27:bd:0d:8a:76:9a:9c:6c:2a:68:
d1:66:ee:6d:8d:13:9a:27:63:e0:51:cd:f6:aa:e8:ee:50:14:
1e:98:4f:2d:99:b3:e2:40:58:f3:a5:c5:60:8d:c8:8d:af:00:
58:9f:e3:84:bd:df:f7:57:f8:0c:7a:04:40:2b:72:a8:6d:67:
1b:17:3a:60:92:50:68:2c:2d:46:18:a7:50:3b:8d:d9:0c:10:
a3:17:86:81:7c:83:b1:79:d6:bd:e5:c7:48:5e:ce:31:9e:ea:
63:d4:5a:93:35:17:74:be:28:08:13:ea:90:e3:7a:f8:ac:9c:
d3:05:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:57 2025 by rpki-client