Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File: llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier: 2WOdO5vthbe7EpBOBHMoKmsOnkUVp+/0ZfIUfqITyIg=
Subject key identifier: 05:BC:AA:0D:A5:B4:BF:83:E1:E8:C3:5B:7C:64:BB:48:4E:8B:E2:A9
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial: 0199FBEAD59C11E183A5F54B44A6E082FC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: 7Ib31wp286EgLw2E/R1q8qxxrCiS22tk7w4HCCtUZi0=)
2: xB2QvC1lnSEbHZpo5CzUz22HzVs.roa (hash: iOoP9/OWnHogDFUgN5EWWw0h5813UdNcLLWGJLi6Jv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d5:9c:11:e1:83:a5:f5:4b:44:a6:e0:82:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=05bcaa0da5b4bf83e1e8c35b7c64bb484e8be2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:7b:6f:98:06:7c:b3:66:27:7d:bb:88:df:
9f:18:c6:8f:a4:28:d6:84:e7:da:43:4b:1f:f3:3e:
a6:4c:ed:2f:34:30:33:94:4e:26:f1:33:18:b2:78:
d5:52:e8:1d:6e:00:63:f3:f8:c2:24:5f:ea:8f:11:
ad:23:ca:59:f7:c0:7c:f7:95:12:2e:19:e7:1c:9b:
ee:c9:c5:ca:b7:48:52:1b:5c:82:2a:1e:f8:75:ba:
05:6b:db:18:df:73:a1:32:87:76:88:fc:5c:79:69:
aa:24:dd:f0:73:41:62:70:73:88:c9:00:35:f5:a7:
e5:8e:4d:b5:b9:ef:2b:5f:42:93:12:0a:55:4d:95:
bf:6d:99:0c:8e:3f:dd:f8:74:f2:d8:be:3e:82:9b:
c5:1c:8f:04:12:40:90:a1:05:bc:3c:74:8a:50:eb:
5c:37:0c:22:72:a6:a4:0c:9e:ab:07:1e:ec:f7:12:
f2:4b:d6:e9:a8:82:fa:a7:06:3d:13:c2:88:92:6a:
e8:24:1e:e6:f3:79:1c:a8:d6:e3:25:ec:36:d8:28:
1d:26:12:da:2c:13:87:f6:83:ba:90:30:8d:6a:9e:
f6:d2:4b:d9:2d:f1:49:86:c9:be:87:29:fb:32:6f:
71:27:f4:5e:4a:44:51:8c:bc:15:55:5b:92:99:e3:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:AA:0D:A5:B4:BF:83:E1:E8:C3:5B:7C:64:BB:48:4E:8B:E2:A9
X509v3 Authority Key Identifier:
keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:56:61:b6:74:d7:b0:8f:03:47:31:bf:f3:c3:a1:95:70:e7:
b4:e5:64:17:27:d8:2a:df:51:73:56:bf:06:6d:11:8f:0a:eb:
c7:2c:fb:cc:5c:43:69:8a:de:19:19:3f:62:73:31:49:29:e3:
f3:f8:a7:e4:f6:eb:fe:a3:74:a2:7a:8a:8f:71:98:d1:af:12:
2d:67:c0:de:29:a7:27:d9:ac:f2:64:e9:87:27:73:65:a1:42:
cd:f8:6d:d8:27:27:40:85:a6:ca:1e:e0:37:61:42:11:75:29:
f1:e5:79:b0:88:17:fd:2a:83:f2:bf:c3:fa:d3:bb:11:7c:bb:
55:6a:6a:79:fa:8f:78:3c:e8:8b:8c:b2:e0:50:41:a6:e9:37:
78:0d:ce:42:b0:ad:d8:6d:a6:fa:06:52:19:a4:e2:97:32:8b:
da:10:d0:95:31:82:53:e6:94:ad:26:83:e0:52:50:13:54:f4:
8f:dd:d2:19:7b:ba:25:1a:3c:8a:67:00:ed:2a:91:df:6a:76:
d6:2b:e7:4d:59:58:18:e3:65:2b:a8:7d:e6:d1:81:ce:ef:ec:
a8:34:95:c9:25:6d:cb:3c:ab:91:78:fc:b0:16:51:64:a0:a1:
69:d0:d5:6a:43:2d:62:bc:84:b9:62:ac:90:6b:bc:5e:51:49:
1f:41:01:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:46 2025 by rpki-client