Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
File: llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json)
Hash identifier: 8iROLGFN5QJQK1DYjIe+OUB71SWdJXIbi4ZaviCb+10=
Subject key identifier: CB:17:E0:86:D2:1C:BF:AC:E4:D8:37:00:CA:A5:FA:5B:A0:D0:52:C2
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial: 0199FC21AD3DE46EF1AE2291399AAF61D4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
Manifest number: 1449
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa (hash: Ij7xKzGQVqQU38kvjmTNToko/fNpur4SF9xRWlCB2/Q=)
2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: M2lVAp1XHbf9W6zBCpMuPZAygsawqIVJoCvK28n5qbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ad:3d:e4:6e:f1:ae:22:91:39:9a:af:61:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=cb17e086d21cbface4d83700caa5fa5ba0d052c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:a1:e2:e2:d4:b6:81:d7:1f:fa:90:03:cb:
f6:0c:7b:24:e3:52:59:b4:8a:19:bc:08:57:78:d7:
2b:32:3b:34:db:a9:47:4d:22:4d:6d:db:93:61:55:
80:56:33:12:49:45:83:a7:2b:da:4a:ac:51:57:6c:
09:f6:8f:c4:15:04:fc:e0:23:2e:d1:71:84:73:ef:
0a:0d:fa:96:40:97:f4:b4:51:9f:c2:5b:b5:59:d6:
34:33:1e:1e:4b:6e:90:ea:a1:2f:62:28:41:0c:38:
85:20:5d:6e:b6:8b:c0:ec:cc:97:93:ee:87:cf:78:
c3:3a:63:6d:29:a3:42:1e:83:a3:6d:54:f4:af:7e:
1d:71:d9:42:f9:c3:15:e8:55:5e:b7:9a:11:c5:88:
d4:62:98:da:f7:7a:a7:e7:a1:aa:c0:b1:f4:21:5c:
6e:ad:7a:75:a4:4a:b5:53:7c:96:ff:dd:29:8c:5c:
42:b1:d5:1f:63:64:35:9c:37:4e:73:1f:79:88:a6:
8c:22:a3:7e:58:1c:e5:48:f7:72:35:d7:ec:30:1c:
fb:69:89:27:ff:13:6f:31:dd:56:b0:0d:63:ff:4b:
23:d5:ff:22:06:f5:56:f3:53:56:d0:96:c9:f5:69:
10:83:c2:5e:7a:2a:11:53:da:55:10:7e:f0:c6:fa:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:E0:86:D2:1C:BF:AC:E4:D8:37:00:CA:A5:FA:5B:A0:D0:52:C2
X509v3 Authority Key Identifier:
keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:ec:50:e3:ea:73:61:7d:40:4a:00:13:0c:89:ea:22:da:
32:25:67:f7:39:8a:a8:6d:41:92:d1:54:23:ef:19:31:86:09:
6b:63:16:3b:f2:4a:d1:8d:1d:98:41:b2:ab:6f:50:59:ed:0f:
b1:af:7b:59:82:0d:49:df:16:26:a9:07:6c:de:4b:25:9f:d1:
68:7a:52:2f:b2:98:b6:5e:3c:76:8c:3e:42:7a:3b:90:82:6c:
72:ce:ea:02:6e:58:b7:3d:70:81:31:02:52:98:d2:9b:35:cd:
4d:cb:37:56:c3:48:d1:cc:63:f4:bf:b7:1b:44:a3:d2:8b:13:
ae:4f:71:8f:16:77:d5:63:f5:e8:2a:20:a9:30:48:04:76:ac:
85:cd:3e:96:56:97:7b:a8:95:65:c9:b1:86:26:c8:dc:7d:06:
f4:0b:4f:ec:b5:9e:9f:85:6d:19:44:fd:7a:3d:52:d4:87:f7:
db:27:b5:86:f9:fa:b8:65:ae:d9:f3:17:d1:cb:a7:cf:04:5f:
42:61:e5:58:60:5d:50:f6:4e:7c:82:c4:c8:96:a5:be:fb:57:
14:1d:a9:e4:6e:32:ae:ed:c8:01:2b:c4:ed:ff:e1:2d:aa:cb:
71:22:34:7f:57:27:33:fe:5f:b7:be:3d:e6:aa:93:3e:e7:4e:
93:7f:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:18 2025 by rpki-client