Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
File: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft (raw, json)
Hash identifier: XDd2zhDIZyxT3+xq7MeLuLQumc27+Sa4temEku1crBo=
Subject key identifier: E2:FA:6D:90:73:95:2D:DD:E6:46:D1:10:C9:75:B5:BF:24:2B:BB:45
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 0199FCC615E892A0A950D9B5CEB4144EF17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
Manifest number: 122B
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl (hash: QN83WPKOOjWgl6/jpBy/Zh8/pGKP5keNXw+43xrrpkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:15:e8:92:a0:a9:50:d9:b5:ce:b4:14:4e:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=e2fa6d9073952ddde646d110c975b5bf242bbb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:6a:54:6a:10:47:bc:65:72:a1:1e:ce:20:
57:52:a4:21:8b:6c:e7:9c:86:ec:27:e1:bc:a3:5e:
61:90:c3:a7:38:6c:1c:b8:55:ad:6c:87:c9:b7:cb:
ef:af:f2:dd:a1:8d:04:13:d3:3a:30:e8:7f:04:5f:
04:f4:0d:6e:ef:59:1a:7e:2f:99:0e:80:e5:b7:81:
6a:06:c6:47:7b:f7:3c:64:19:b5:81:7c:0c:2a:dd:
a9:a5:5b:aa:65:a8:88:df:7e:c9:57:d4:98:13:54:
c4:9b:99:cc:3a:f8:ae:28:40:39:36:5c:36:9d:ce:
df:5a:a9:70:39:22:ca:8b:09:a4:12:a0:ff:3e:89:
e2:62:30:e9:54:4f:b4:5f:7b:4f:3e:3a:bf:6f:2e:
c9:a8:6a:07:9d:af:08:1d:85:bf:12:02:b0:8b:1c:
29:99:fa:a6:3d:d1:47:44:6d:ff:ff:1c:e8:06:48:
fa:7c:ce:0e:78:4b:0e:94:91:89:a4:8e:d3:3d:e0:
83:28:e2:f7:a3:6f:ec:13:c5:d0:5c:af:15:38:5c:
94:e6:c2:cf:9a:fc:1c:c5:96:df:15:04:74:43:b3:
c8:be:72:d3:2d:62:c3:50:8b:5e:5e:22:76:9b:48:
6b:06:08:f1:67:69:9a:30:27:0a:66:88:cf:a0:d6:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:6D:90:73:95:2D:DD:E6:46:D1:10:C9:75:B5:BF:24:2B:BB:45
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:85:4a:4f:e3:dd:3f:57:c3:3d:25:84:5e:77:56:6c:d7:49:
92:81:2f:32:dc:ee:b9:f8:60:59:3b:9c:e7:01:90:c4:49:25:
b8:5a:94:db:25:20:36:f9:9b:7d:67:d9:1b:21:28:d4:f2:6a:
6f:77:d7:9d:c5:26:42:9c:8a:cb:7b:2c:db:03:61:95:b6:65:
9b:02:48:df:2a:ed:7d:fe:ee:79:f8:bf:c7:2c:87:53:89:af:
c9:d6:09:45:bb:db:12:a5:3d:d1:ee:9e:fe:13:3b:bc:0f:36:
f1:60:7d:33:a9:66:05:7e:73:c4:2d:72:d0:28:43:38:6b:78:
d4:ac:28:4b:d2:bb:ce:7c:b8:9d:e8:b5:d7:eb:55:3d:52:29:
dd:2e:99:51:db:10:4e:5e:b1:42:d7:2d:74:66:17:b0:01:ce:
32:69:2b:84:e8:51:83:92:5a:66:45:25:b1:8a:d7:6c:a1:c8:
a9:45:58:0f:7b:e5:e3:5c:f5:d5:f9:ad:08:46:e1:60:a0:bf:
85:0e:63:68:79:08:13:e3:34:fe:3c:a3:e2:60:7a:1b:6c:da:
e1:9a:9f:13:d9:b6:9d:8d:db:64:81:88:7c:98:48:d1:60:d2:
c1:57:c5:22:17:ef:1d:bc:44:f6:d2:d5:98:45:ae:6a:eb:06:
2c:6d:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:01 2025 by rpki-client