Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: 60CaaXgu0x7Bq203vJDWP3ZParM0t5iaIujRKSYG3i4=
Subject key identifier: 15:BA:17:9B:9A:C4:1D:37:93:D7:89:2E:8E:9B:83:43:CC:1D:AF:01
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 0197B7454593EFA0231476CE2A1D587E5DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 1249
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: OBBw4NKXDcoAZv9b+6ypqbH98SniFkTTQ+zG/v53wAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:45:93:ef:a0:23:14:76:ce:2a:1d:58:7e:5d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=15ba179b9ac41d3793d7892e8e9b8343cc1daf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:28:35:6e:b3:ca:80:b0:15:06:b0:15:46:
72:3c:c4:d9:d6:5b:33:8f:aa:83:32:92:e3:1b:77:
fe:3b:44:29:b5:1e:04:13:d8:9a:28:a3:87:41:51:
27:03:16:2f:e5:ae:a3:8c:4e:71:5a:17:2d:79:98:
b2:b6:a8:6b:c7:6a:42:c4:dd:a8:15:1b:3c:e2:96:
50:08:43:db:8a:fe:c7:97:24:e1:03:7d:0f:7b:4d:
a3:8c:fa:ec:f2:9c:ea:09:a4:78:83:c3:0b:e6:18:
b2:fc:ef:a2:da:13:4b:35:78:89:6c:de:5c:f0:d4:
5a:88:b7:58:7d:c1:c7:b8:71:64:75:c2:10:8b:cc:
aa:68:58:8b:84:dd:b8:97:f2:33:87:1e:34:05:4f:
f0:dc:24:87:f8:e3:46:cf:99:bd:ba:fc:b0:16:7f:
4c:19:eb:83:b6:2d:e4:97:cf:3b:c9:7c:52:27:62:
be:06:0b:48:08:93:d2:64:99:ce:34:19:fa:58:7a:
ff:92:c4:b5:fc:49:21:75:49:dc:ad:9f:a9:24:ac:
2c:27:f1:95:f4:cc:82:91:91:46:04:71:f9:0a:24:
14:60:e6:bb:18:8d:e7:c3:2d:d0:ba:7f:74:59:94:
36:ee:0c:81:ab:ac:70:9f:5c:1c:c9:b5:0d:72:bc:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BA:17:9B:9A:C4:1D:37:93:D7:89:2E:8E:9B:83:43:CC:1D:AF:01
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2b:26:61:d5:46:cb:46:90:0c:9f:52:c6:5a:17:7a:e1:2b:
3d:87:41:73:96:58:c1:65:15:a2:9c:57:ba:ee:c5:60:46:95:
a9:4d:da:5f:4e:d5:6e:08:51:d8:5c:09:94:7e:e4:ce:b7:26:
87:6a:d2:2a:0c:6a:2a:32:fa:b9:7b:b9:03:f7:aa:67:38:41:
ff:b2:8e:46:5d:59:f4:10:0d:2a:85:7d:2c:5d:ea:61:2a:aa:
51:6f:e2:8a:69:a6:0b:61:51:11:3e:41:7a:43:88:13:d7:89:
d9:7c:2f:1a:50:47:a9:ce:62:15:a9:d6:12:e0:46:e8:85:55:
42:91:5c:ff:85:90:39:b4:90:34:bd:b6:86:42:bd:52:55:ea:
2c:3b:39:e2:ee:af:eb:da:d0:2b:85:42:58:df:fa:fd:2e:33:
38:0e:bb:92:4c:61:e8:40:cd:19:a0:c0:74:56:0a:9a:e6:bd:
46:26:dc:41:81:4e:26:45:96:10:6c:6c:1d:6d:3b:ba:fe:2a:
8d:f7:95:67:c7:25:bb:da:99:6b:8c:2c:c6:52:4b:fe:6f:7f:
b8:e1:f8:9c:ea:1a:1f:f8:34:25:29:3f:91:b3:4c:79:43:13:
9f:8b:53:4b:8e:40:f7:34:c2:80:4e:fe:7a:ca:12:8c:f0:f3:
09:00:a7:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RUWT76AjFHbOKh1Yfl2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjEzNTYyNWFjMDUxYTI4MDk3N2Y2MzA2Y2YyM2Q2MGM0
MDZiOTAwHhcNMjUwNjI4MTYwMDU5WhcNMjUwNjI5MTYwMDU5WjAzMTEwLwYDVQQD
EygxNWJhMTc5YjlhYzQxZDM3OTNkNzg5MmU4ZTliODM0M2NjMWRhZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJMoNW6zyoCwFQawFUZyPMTZ1lsz
j6qDMpLjG3f+O0QptR4EE9iaKKOHQVEnAxYv5a6jjE5xWhcteZiytqhrx2pCxN2o
FRs84pZQCEPbiv7HlyThA30Pe02jjPrs8pzqCaR4g8ML5hiy/O+i2hNLNXiJbN5c
8NRaiLdYfcHHuHFkdcIQi8yqaFiLhN24l/Izhx40BU/w3CSH+ONGz5m9uvywFn9M
GeuDti3kl887yXxSJ2K+BgtICJPSZJnONBn6WHr/ksS1/EkhdUncrZ+pJKwsJ/GV
9MyCkZFGBHH5CiQUYOa7GI3nwy3Qun90WZQ27gyBq6xwn1wcybUNcrwpqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW6F5uaxB03k9eJLo6bg0PMHa8BMB8GA1UdIwQY
MBaAFCyxNWJawFGigJd/YwbPI9YMQGuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2Ut
ZmU5ZWRiZmNjN2VmLzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jNzQwZTYtY2U2Yi00ZDFhLThlY2UtZmU5ZWRiZmNjN2Vm
LzEvTExFMVlsckFVYUtBbDM5akJzOGoxZ3hBYTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgysmYdVG
y0aQDJ9SxloXeuErPYdBc5ZYwWUVopxXuu7FYEaVqU3aX07VbghR2FwJlH7kzrcm
h2rSKgxqKjL6uXu5A/eqZzhB/7KORl1Z9BANKoV9LF3qYSqqUW/iimmmC2FRET5B
ekOIE9eJ2XwvGlBHqc5iFanWEuBG6IVVQpFc/4WQObSQNL22hkK9UlXqLDs54u6v
69rQK4VCWN/6/S4zOA67kkxh6EDNGaDAdFYKmua9RibcQYFOJkWWEGxsHW07uv4q
jfeVZ8clu9qZa4wsxlJL/m9/uOH4nOoaH/g0JSk/kbNMeUMTn4tTS45A9zTCgE7+
esoSjPDzCQCnBw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:44 2025 by rpki-client