Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: 6kPNKhzbBiUn/pj+6heLzzu60+ljfvjzEuU+rIwtJpw=
Subject key identifier: F6:87:CD:E3:C2:38:A3:69:11:B6:75:3B:D9:62:79:FA:A4:C5:E0:4A
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 0198D5F17206E02189C110DED8369C1B5389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: WLvEa3gMb/HyRPrcYyxWncpHM5T+QCqJFboyM/qOwK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:72:06:e0:21:89:c1:10:de:d8:36:9c:1b:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=f687cde3c238a36911b6753bd96279faa4c5e04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:36:70:d2:6d:12:64:e0:a3:a6:45:57:0f:
9c:03:e6:1d:78:81:40:b4:4b:a9:3b:ce:c1:f3:28:
3e:41:1a:a8:3a:49:6f:54:65:30:92:43:5b:50:65:
af:b5:85:28:7d:60:f5:d6:2b:86:7c:bf:2b:56:64:
b4:c6:4e:d5:e1:58:f2:90:cf:f1:8b:1b:e9:a4:c7:
2c:a1:9e:b1:bb:96:3f:e2:8c:95:5a:09:db:6f:df:
a6:ad:07:b5:71:66:c5:f0:99:6f:51:31:cd:3d:0e:
cb:eb:01:36:ab:15:dd:57:8c:57:65:ed:cc:8e:d3:
16:a7:ab:97:73:09:03:29:ef:0f:3a:91:e6:df:32:
4b:34:a7:ba:ba:a4:73:88:fe:ee:e4:7e:b8:7f:7d:
ad:af:d8:7a:a5:16:8d:bc:7a:07:02:24:55:97:0f:
c6:95:e8:ba:14:4e:09:50:54:ab:77:18:e9:d1:bc:
5d:9f:73:d6:57:8f:f2:7a:fc:b7:ec:2b:89:7e:c3:
e8:9b:d6:86:9e:ba:38:11:a9:db:79:26:10:d9:0e:
8d:0d:60:ee:77:d0:7d:0d:ed:ce:34:f4:ce:9e:3a:
5c:42:04:60:f5:1c:90:ba:53:12:26:1d:3b:b0:9e:
c6:b1:29:4a:20:8e:0f:45:da:1b:98:46:e2:29:ca:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:87:CD:E3:C2:38:A3:69:11:B6:75:3B:D9:62:79:FA:A4:C5:E0:4A
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c2:7d:42:07:e5:16:f3:de:0a:06:16:3d:c0:c4:36:5a:85:
36:04:40:09:4c:e6:63:07:af:39:dd:78:63:d0:82:04:b8:c8:
5a:e3:6f:38:57:28:fd:28:da:51:09:6d:15:d6:23:0e:91:0f:
ff:f6:5d:aa:d3:d1:81:97:bf:a3:f4:94:15:37:af:70:26:f3:
c1:58:b7:25:dc:e9:0f:e4:19:54:6d:55:1b:12:78:de:04:96:
a0:31:4f:e2:f0:48:4f:0e:29:5d:9f:30:40:ec:b3:4c:28:e8:
19:e7:dc:ef:06:cc:22:d4:74:2f:d1:c7:ff:ee:76:be:3a:d6:
bb:ff:b9:64:32:32:49:33:cc:82:7e:4b:3e:5c:d6:47:53:94:
93:05:f6:3c:8c:a6:d2:38:13:91:8f:41:84:8e:a5:b2:23:f1:
73:4d:bf:6f:98:3e:f1:fd:76:23:5d:93:36:fe:19:23:3a:d5:
4a:26:62:9b:c2:fc:7b:40:26:0d:fb:de:66:18:4a:02:96:18:
65:40:f1:9e:13:42:47:2e:22:2e:db:52:a1:ff:a6:db:80:8d:
93:d8:0a:68:45:f6:07:ef:55:23:8b:5b:ad:79:1f:bb:43:52:
07:a0:37:26:44:3f:ca:e3:f0:09:ef:34:16:f3:78:0f:ca:fe:
1f:51:29:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8XIG4CGJwRDe2DacG1OJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1
ZGU0ODMwHhcNMjUwODIzMDgwMDI3WhcNMjUwODI0MDgwMDI3WjAzMTEwLwYDVQQD
EyhmNjg3Y2RlM2MyMzhhMzY5MTFiNjc1M2JkOTYyNzlmYWE0YzVlMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC82cNJtEmTgo6ZFVw+cA+YdeIFA
tEupO87B8yg+QRqoOklvVGUwkkNbUGWvtYUofWD11iuGfL8rVmS0xk7V4VjykM/x
ixvppMcsoZ6xu5Y/4oyVWgnbb9+mrQe1cWbF8JlvUTHNPQ7L6wE2qxXdV4xXZe3M
jtMWp6uXcwkDKe8POpHm3zJLNKe6uqRziP7u5H64f32tr9h6pRaNvHoHAiRVlw/G
lei6FE4JUFSrdxjp0bxdn3PWV4/yevy37CuJfsPom9aGnro4EanbeSYQ2Q6NDWDu
d9B9De3ONPTOnjpcQgRg9RyQulMSJh07sJ7GsSlKII4PRdobmEbiKcoCkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaHzePCOKNpEbZ1O9liefqkxeBKMB8GA1UdIwQY
MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt
NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx
LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8J9Qgfl
FvPeCgYWPcDENlqFNgRACUzmYwevOd14Y9CCBLjIWuNvOFco/SjaUQltFdYjDpEP
//ZdqtPRgZe/o/SUFTevcCbzwVi3JdzpD+QZVG1VGxJ43gSWoDFP4vBITw4pXZ8w
QOyzTCjoGefc7wbMItR0L9HH/+52vjrWu/+5ZDIySTPMgn5LPlzWR1OUkwX2PIym
0jgTkY9BhI6lsiPxc02/b5g+8f12I12TNv4ZIzrVSiZim8L8e0AmDfveZhhKApYY
ZUDxnhNCRy4iLttSof+m24CNk9gKaEX2B+9VI4tbrXkfu0NSB6A3JkQ/yuPwCe80
FvN4D8r+H1Epgw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:19 2025 by rpki-client