Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: OvSH8m3H7L+wrSAGeHd8aCLZbOes3aq30qf29mDnoR0=
Subject key identifier: 17:B0:3C:64:D9:CA:0C:42:57:DC:16:B1:82:9A:CE:7E:30:54:E3:CF
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 0198D515AC84477E8F91EAA882193CCE0468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 12DD
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: ATzhhfiv2LI4IVEkwVIKF9rC0+asfBbNTQ2XfYW7RKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ac:84:47:7e:8f:91:ea:a8:82:19:3c:ce:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=17b03c64d9ca0c4257dc16b1829ace7e3054e3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:61:70:8d:ce:0d:f9:b5:5b:56:43:1e:18:
9f:38:f9:ec:27:04:a0:5f:77:50:a3:7e:f3:38:cc:
62:56:6f:45:3c:99:d2:80:d5:df:d6:e4:41:1f:f7:
f6:e9:43:b1:18:ed:f3:ab:13:91:54:db:fd:4f:54:
55:d9:22:96:4d:3f:b0:4f:2d:a6:90:09:56:2e:98:
18:ba:63:85:05:3a:b4:0c:16:8a:ea:0a:31:57:b3:
8f:96:c3:c3:a5:c4:06:0f:61:5b:c6:a1:aa:fc:b3:
6e:42:09:5e:35:b1:85:15:ae:9c:d0:cc:c0:7f:25:
2d:85:d7:3f:a6:d6:c5:b2:ec:7b:05:63:88:89:8a:
eb:77:b9:7f:ea:86:b4:ee:1a:33:1b:5f:b8:ff:5d:
a8:ad:26:ae:dc:cf:dc:7e:cb:1d:01:ea:41:04:78:
cf:53:5e:5a:0a:80:3d:6a:48:73:01:40:96:2c:8e:
a4:f1:a4:c9:ef:37:b0:51:f6:29:3d:71:af:62:49:
fa:e4:0a:90:41:05:26:ae:a6:f5:af:1d:29:d9:ab:
06:f7:b3:6a:77:da:ac:91:b4:c6:1c:da:84:af:08:
08:7a:72:4b:79:e0:a6:52:90:9b:d5:fc:b9:90:2f:
5d:fe:13:8c:ba:9f:47:74:52:78:37:3d:e4:a6:2b:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:3C:64:D9:CA:0C:42:57:DC:16:B1:82:9A:CE:7E:30:54:E3:CF
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ef:b7:26:b9:81:d7:a8:a2:62:ed:4a:56:2a:35:d3:a6:94:
c6:fd:4f:a7:b1:6b:e6:76:2c:89:5a:b5:e9:5e:77:ef:e1:43:
04:c7:2b:68:10:11:47:ac:df:ca:33:ef:54:fb:f1:7e:dc:94:
47:67:b3:d2:ae:dc:3c:2e:df:48:0d:16:71:d2:49:eb:49:a3:
49:df:ca:3c:f2:a4:08:ee:77:91:fd:fe:15:81:a9:e4:1c:49:
e1:fd:33:48:88:bb:13:39:f5:1c:c9:d1:f8:e3:59:ce:a0:d0:
02:ba:ee:47:8f:a3:4b:83:c9:ef:36:fc:ca:7b:50:10:2c:2c:
b7:d3:1c:eb:9e:ec:e2:ce:b8:11:3f:74:c8:8e:bf:5a:cc:ff:
79:86:f3:2d:12:a8:51:60:b7:ee:de:56:28:ec:e1:68:8e:dc:
27:a5:ab:86:ca:af:7a:79:9e:72:01:42:17:ba:00:f1:5d:11:
a8:f0:3b:8a:aa:19:de:ee:28:53:ff:06:81:05:e3:26:84:eb:
0b:45:9d:7d:45:81:b3:d1:a1:ac:94:b3:b6:6c:e5:72:d9:31:
a0:52:41:20:31:d6:8a:c9:de:33:ac:33:d2:20:d2:51:d8:ad:
54:04:6b:ba:3b:6b:63:f0:32:98:bc:bc:e3:d2:b2:00:d8:cc:
49:e0:93:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:34 2025 by rpki-client