Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: 0JkeeQXIu8TkmGskeG702chq1z4+0plXwDL54GQTChk=
Subject key identifier: 3D:B5:AA:DC:12:6D:62:3D:11:5C:E8:27:34:85:76:20:57:5C:94:32
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 0197B820FE8394BD2B7ABF5AF3738821A57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: 9ES+GpCcPgdJ8XmD9sCz8SUFGFNIZ+BJwRkziz5RG3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fe:83:94:bd:2b:7a:bf:5a:f3:73:88:21:a5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=3db5aadc126d623d115ce82734857620575c9432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:68:6c:49:c9:30:6e:d7:a5:e0:68:9a:b0:
f6:43:6c:71:35:c7:a5:bf:d5:4c:fc:93:3a:c1:7b:
93:47:f0:d6:5f:c2:6c:e3:a2:de:bc:79:4b:f7:b9:
62:d9:a8:72:2a:e0:61:ff:6e:ac:42:f7:f7:b3:a9:
a8:ca:47:30:13:f1:34:57:e5:fe:14:ad:0e:2f:0f:
4a:8a:22:c9:68:08:25:49:61:c1:a0:36:16:55:10:
a5:49:07:3d:6e:34:91:fb:90:2c:79:84:1d:03:20:
cf:52:50:68:04:3c:4f:e2:c3:29:30:3c:60:ab:dc:
45:c8:8c:00:c9:78:d3:26:55:c0:f8:ca:b5:8d:fd:
c6:60:d2:17:66:95:68:35:4a:e8:05:8e:e1:6c:6d:
1c:08:4a:54:8a:2c:5e:e1:50:69:4f:99:90:e4:30:
25:10:7e:02:77:eb:c4:89:96:9c:02:41:0f:5b:7e:
52:a5:1e:a6:bb:c1:48:9f:df:c5:83:38:74:d2:f8:
93:cf:89:84:60:35:81:07:e0:fd:64:a3:42:2b:4f:
5a:92:2d:c6:87:0f:99:d2:6a:07:fc:f3:8c:97:cd:
79:cd:b6:af:06:7a:c3:34:8b:6c:90:97:ce:3e:b0:
7c:1d:2a:61:18:d4:8f:f8:24:e8:2a:dd:aa:1a:d1:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B5:AA:DC:12:6D:62:3D:11:5C:E8:27:34:85:76:20:57:5C:94:32
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e9:74:99:c6:5a:ac:36:2a:3b:ec:3e:57:f4:bf:dd:19:55:
3e:23:7c:5a:3a:d0:47:ce:62:a5:14:21:8c:ab:57:0a:86:cb:
20:94:e1:52:1f:4c:f8:2d:70:db:c5:03:93:72:09:97:f6:3d:
f5:f0:6f:dc:20:07:d9:ec:34:3b:4e:66:19:e4:05:50:53:52:
07:99:b4:33:f6:60:78:d1:f8:17:a9:60:43:26:69:b7:a7:77:
be:0b:3d:6f:0f:24:a2:ff:ea:8c:84:0e:bd:aa:69:7e:3b:41:
fa:d0:af:23:ca:ec:d5:94:1c:0b:28:5e:8d:0e:29:e0:8d:ad:
81:6f:a9:1d:03:d6:31:f1:82:bb:78:fb:5a:d2:8b:35:15:b8:
bb:ee:f5:ae:9d:71:90:19:cf:e1:5c:fd:ec:dd:8e:fa:ec:a9:
74:20:f1:9a:dc:9f:9e:9b:ab:50:ab:d2:d6:98:72:1b:4e:12:
0f:6b:45:b8:33:36:69:b1:e5:95:d8:67:49:93:13:b3:8a:df:
d4:99:33:3f:b9:74:c8:9e:b1:0f:09:0c:bf:86:91:f4:11:50:
c1:f7:ac:ef:b9:ec:d5:53:d9:dd:68:3c:d4:ac:06:71:eb:5a:
15:81:5c:92:7f:99:a6:0e:30:b0:99:ad:e0:fd:71:16:bf:12:
31:06:30:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IP6DlL0rer9a83OIIaV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1
ZGU0ODMwHhcNMjUwNjI4MjAwMDU5WhcNMjUwNjI5MjAwMDU5WjAzMTEwLwYDVQQD
EygzZGI1YWFkYzEyNmQ2MjNkMTE1Y2U4MjczNDg1NzYyMDU3NWM5NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsydobEnJMG7XpeBomrD2Q2xxNcel
v9VM/JM6wXuTR/DWX8Js46LevHlL97li2ahyKuBh/26sQvf3s6moykcwE/E0V+X+
FK0OLw9KiiLJaAglSWHBoDYWVRClSQc9bjSR+5AseYQdAyDPUlBoBDxP4sMpMDxg
q9xFyIwAyXjTJlXA+Mq1jf3GYNIXZpVoNUroBY7hbG0cCEpUiixe4VBpT5mQ5DAl
EH4Cd+vEiZacAkEPW35SpR6mu8FIn9/Fgzh00viTz4mEYDWBB+D9ZKNCK09aki3G
hw+Z0moH/POMl815zbavBnrDNItskJfOPrB8HSphGNSP+CToKt2qGtFFgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD21qtwSbWI9EVzoJzSFdiBXXJQyMB8GA1UdIwQY
MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt
NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx
LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhel0mcZa
rDYqO+w+V/S/3RlVPiN8WjrQR85ipRQhjKtXCobLIJThUh9M+C1w28UDk3IJl/Y9
9fBv3CAH2ew0O05mGeQFUFNSB5m0M/ZgeNH4F6lgQyZpt6d3vgs9bw8kov/qjIQO
vappfjtB+tCvI8rs1ZQcCyhejQ4p4I2tgW+pHQPWMfGCu3j7WtKLNRW4u+71rp1x
kBnP4Vz97N2O+uypdCDxmtyfnpurUKvS1phyG04SD2tFuDM2abHlldhnSZMTs4rf
1JkzP7l0yJ6xDwkMv4aR9BFQwfes77ns1VPZ3Wg81KwGcetaFYFckn+Zpg4wsJmt
4P1xFr8SMQYwVg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:29 2025 by rpki-client