Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
File: llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json)
Hash identifier: cxnnXfF50YBMyBULaQ51W5UPTbK7pvQIgUL8Xh0OQXs=
Subject key identifier: 21:EB:F9:D9:53:0F:16:66:34:3B:0C:15:1C:46:D3:58:9D:F4:A8:48
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial: 0198D4A795DE6760175B828264FEDB17D6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
Manifest number: 13B0
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa (hash: Ij7xKzGQVqQU38kvjmTNToko/fNpur4SF9xRWlCB2/Q=)
2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: plGQ1YYJKrsT5fLYvDESQ8NaKlA297Fj7YVrVFmTI6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:95:de:67:60:17:5b:82:82:64:fe:db:17:d6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=21ebf9d9530f1666343b0c151c46d3589df4a848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:a5:35:49:e5:a3:40:5d:47:54:ea:b6:8d:
dc:9a:31:99:c3:6e:d1:50:82:ce:8b:8a:79:7e:81:
5e:dd:d8:b0:0a:24:eb:6e:30:a6:20:d3:a8:00:11:
36:a8:52:eb:a5:cc:7a:fc:92:3b:e1:be:f4:d1:a3:
b5:10:89:54:b1:a6:7b:f6:0f:b8:e2:45:95:a5:f8:
30:36:31:fd:f6:47:25:d5:f8:5a:2d:80:97:cd:2d:
83:4b:32:49:03:45:64:5b:46:f0:ca:8a:14:d9:19:
9f:d5:ef:3a:68:72:e2:ee:50:f3:21:63:ec:f5:92:
91:7a:cc:2b:17:9e:21:30:24:62:92:51:7c:84:1c:
a9:9b:28:8a:32:2c:92:d6:e1:7c:da:74:09:5e:ba:
06:12:a9:2f:3b:6c:c8:be:3f:c3:50:18:e9:1b:3a:
b1:36:62:bc:40:fd:98:63:da:fc:e4:21:c9:48:09:
de:97:d5:8a:fc:f2:07:8c:7b:57:c4:ac:57:ee:f7:
34:a4:b8:2b:5c:db:e7:66:02:cd:3a:5a:a5:2d:2c:
2e:92:10:e0:06:ed:cb:3d:be:1b:db:d5:eb:6e:e5:
5a:21:97:91:78:3a:75:27:a9:c1:f5:e6:56:6b:46:
03:72:77:30:49:74:f6:b1:c2:c4:ec:50:8f:39:ac:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:F9:D9:53:0F:16:66:34:3B:0C:15:1C:46:D3:58:9D:F4:A8:48
X509v3 Authority Key Identifier:
keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:95:94:ca:1c:2c:cc:08:dd:96:69:9e:c9:68:bd:8c:16:48:
eb:1a:f4:ae:73:70:89:ed:e0:7e:50:20:06:3c:e7:8c:65:ee:
32:ca:c8:23:0f:ec:d4:cb:f6:c9:0d:12:34:85:9b:df:d8:dd:
ad:36:77:d6:df:31:df:a9:36:4a:16:13:18:9b:1a:d6:93:32:
d7:df:6e:46:d9:9d:86:ea:85:3d:a6:2d:f8:69:93:8b:93:ee:
c8:82:96:05:a3:18:46:cf:e8:21:dd:6c:1c:b8:e1:41:fc:09:
49:7e:e5:94:4a:4c:4a:eb:43:78:fb:4f:65:78:60:37:8e:30:
32:32:ef:ec:fc:77:f9:c9:29:36:dd:12:5c:0d:83:76:0c:5f:
0e:71:f5:57:f7:d5:38:96:b9:35:57:a6:a5:dc:82:43:da:5a:
cb:88:22:0a:e5:35:ab:65:02:e5:a5:7d:9e:e2:e8:88:35:dc:
db:a6:fe:41:17:dc:c6:52:75:5c:a2:a7:b6:90:15:ea:e5:2b:
df:f5:1b:25:19:cf:df:4c:b4:be:ad:7d:06:92:23:46:ac:f2:
16:8d:21:d6:d7:db:c0:af:a9:68:3b:7a:8c:23:89:f4:c6:8d:
e5:fd:f3:e4:37:cb:2c:46:ec:bf:d5:dd:05:f4:e2:ea:82:85:
d6:62:4d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5XeZ2AXW4KCZP7bF9a+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTEzNWRkNDI1MTlmZGRhM2RkM2ZkYWE5ZGIzMzU3ODE1
ZmFkNzUwHhcNMjUwODIzMDIwMDA5WhcNMjUwODI0MDIwMDA5WjAzMTEwLwYDVQQD
EygyMWViZjlkOTUzMGYxNjY2MzQzYjBjMTUxYzQ2ZDM1ODlkZjRhODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YalNUnlo0BdR1Tqto3cmjGZw27R
UILOi4p5foFe3diwCiTrbjCmINOoABE2qFLrpcx6/JI74b700aO1EIlUsaZ79g+4
4kWVpfgwNjH99kcl1fhaLYCXzS2DSzJJA0VkW0bwyooU2Rmf1e86aHLi7lDzIWPs
9ZKReswrF54hMCRiklF8hBypmyiKMiyS1uF82nQJXroGEqkvO2zIvj/DUBjpGzqx
NmK8QP2YY9r85CHJSAnel9WK/PIHjHtXxKxX7vc0pLgrXNvnZgLNOlqlLSwukhDg
Bu3LPb4b29XrbuVaIZeReDp1J6nB9eZWa0YDcncwSXT2scLE7FCPOax9zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHr+dlTDxZmNDsMFRxG01id9KhIMB8GA1UdIwQY
MBaAFJZRNd1CUZ/do90/2qnbM1eBX611MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEt
MDdlZTI0MmUxMzZkLzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80NmQ5MDMtYWZkYS00MjFiLThhNjEtMDdlZTI0MmUxMzZk
LzEvbGxFMTNVSlJuOTJqM1RfYXFkc3pWNEZmclhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZWUyhws
zAjdlmmeyWi9jBZI6xr0rnNwie3gflAgBjznjGXuMsrIIw/s1Mv2yQ0SNIWb39jd
rTZ31t8x36k2ShYTGJsa1pMy199uRtmdhuqFPaYt+GmTi5PuyIKWBaMYRs/oId1s
HLjhQfwJSX7llEpMSutDePtPZXhgN44wMjLv7Px3+ckpNt0SXA2DdgxfDnH1V/fV
OJa5NVempdyCQ9pay4giCuU1q2UC5aV9nuLoiDXc26b+QRfcxlJ1XKKntpAV6uUr
3/UbJRnP30y0vq19BpIjRqzyFo0h1tfbwK+paDt6jCOJ9MaN5f3z5DfLLEbsv9Xd
BfTi6oKF1mJNig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:41 2025 by rpki-client