Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: qz81t/SnHC/JX6/S+k/VxT3/i7atJlG4CpxMx7zCmpU=
Subject key identifier: 43:29:4C:98:5C:14:A7:60:18:52:42:D0:8F:CF:19:2F:02:F8:B5:82
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 0198D583856571F939649ABCA9C9230DFAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 0623
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: I926amhe2vzTQHRw2PJ0gTdhrvkpvPW4E4darIPlvsg=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:85:65:71:f9:39:64:9a:bc:a9:c9:23:0d:fa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=43294c985c14a760185242d08fcf192f02f8b582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:da:a1:e8:47:3b:9c:3c:e9:e9:40:6a:31:
c5:ac:c1:30:47:86:b8:73:ff:3f:c7:b3:d0:a5:89:
12:df:dd:90:53:04:51:da:e8:92:73:1a:96:ce:06:
4b:88:da:d7:8e:11:d1:8a:06:c1:5d:be:87:ca:18:
f5:51:18:2a:97:b6:32:f4:62:4f:ee:e8:74:31:38:
4c:cb:b1:bb:cb:2a:75:f4:cf:f3:85:2b:b4:0f:cc:
d8:be:25:eb:50:ed:b5:c3:b5:55:e8:20:af:e5:71:
cf:65:c6:1d:dc:e3:f0:ea:bc:1d:c5:2f:a7:6f:77:
d7:06:fc:90:da:3c:3e:d5:81:3b:2d:b6:5d:fc:4a:
85:70:57:79:cf:ce:0d:de:96:89:ab:95:a9:f4:70:
d4:d0:cf:8a:5c:94:34:1c:e8:30:f8:a4:6c:61:00:
19:81:da:7f:0d:87:44:58:f2:c2:8e:e7:af:1b:d8:
7e:e2:a1:9e:49:c7:66:63:d1:db:6e:7b:3d:61:78:
e6:1d:f4:49:02:0a:88:19:8e:d7:f0:4d:00:ec:f3:
d3:27:23:2f:e4:c5:3e:8e:25:0f:45:64:4c:1f:8e:
3e:44:a1:ea:6d:21:6d:21:84:f3:d4:34:8f:75:b8:
91:4f:b4:f5:48:5c:53:56:94:b2:5e:a8:c4:e2:49:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:29:4C:98:5C:14:A7:60:18:52:42:D0:8F:CF:19:2F:02:F8:B5:82
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:95:a0:1a:28:92:f1:ee:7d:71:3a:d6:1d:cd:98:3d:22:2d:
ed:78:5e:1b:2b:4d:56:bd:3b:47:0f:e1:cb:d8:5a:59:77:80:
f2:20:cf:25:76:f3:0a:44:75:dc:ef:af:92:b6:1b:0b:43:aa:
d8:d5:45:54:4b:03:89:ef:83:f6:4a:a4:79:64:f8:10:4a:16:
43:d3:b8:92:86:bd:bd:8e:0a:bc:d7:6b:07:a3:a7:89:b6:44:
3b:31:c1:3c:89:9e:98:ae:91:1e:2d:df:6a:38:65:eb:66:53:
79:6c:53:52:0b:66:24:be:87:86:64:6d:1d:b0:dc:97:e9:47:
bf:c7:54:65:ab:11:a2:19:71:47:aa:8a:71:4a:1d:23:5f:49:
a0:d2:28:e4:88:fd:48:3c:83:8f:5e:f3:28:72:fb:0f:44:3f:
ea:35:82:8f:ac:bd:4d:8b:01:40:76:a8:66:39:68:56:02:12:
14:19:b4:4d:19:b6:0e:f1:0f:46:e4:54:94:92:51:46:ee:4f:
46:dc:87:4d:84:99:76:60:c7:0a:31:46:e9:ae:83:e2:fa:3b:
f0:93:10:e8:cd:13:3c:e9:47:0f:70:33:a9:d5:55:23:31:9b:
83:5d:47:a2:e4:20:b6:76:ad:58:94:25:18:2e:05:7e:d4:a8:
6d:9b:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:46 2025 by rpki-client