Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
File: LL12aIuHwDkUriouFJDC8ekUFmE.mft (raw, json)
Hash identifier: B8rZrXu3K57sI5cXw/aUGU0ohE0spGv1pYYyQgo5xOk=
Subject key identifier: E7:F7:7A:4F:2C:60:F1:6D:90:01:35:FC:E6:C8:15:29:BA:14:29:79
Authority key identifier: 2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
Certificate issuer: /CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Certificate serial: 0197B7B365379084F260631AF2777480DFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
Manifest number: 058F
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: H-Yt5FoKzZFkLIkaFu-xWw_buGE.roa (hash: FOTFvdLDXstlOIfQpA+rMFC4iGbO8vZig/vCbn7JvL8=)
2: LL12aIuHwDkUriouFJDC8ekUFmE.crl (hash: sPcB+0BZs96nrRQXqv9/mI6TzECcN1jp66Ko5Ds7RA8=)
3: Vl4-1Y5QnMxXeb8Ux6oMHZHD4uM.roa (hash: U+fPZyhr/WfWEB/lCPa7RbywJB7YzK5Ff1NgjRWLMzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:65:37:90:84:f2:60:63:1a:f2:77:74:80:df:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cbd76688b87c03914ae2a2e1490c2f1e9141661
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=e7f77a4f2c60f16d900135fce6c81529ba142979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:09:8c:77:c9:65:70:7b:ad:d8:db:85:9e:
54:85:15:af:ea:0a:af:bc:f2:60:4e:91:40:f9:a4:
d4:1d:72:54:ef:23:3b:d0:38:d2:cc:c4:97:84:b6:
cd:68:6c:f2:e2:76:9b:de:9b:02:d5:12:13:9c:f4:
d9:c2:41:c6:19:ee:f7:b5:82:79:02:b7:08:9c:3f:
45:5b:1d:f0:67:30:68:6d:ee:ac:ea:3a:b2:17:7c:
6a:5e:7c:92:cd:17:a4:45:9b:e9:7e:c4:95:99:5e:
a5:64:e9:8b:63:7a:93:38:22:77:d9:82:62:c1:52:
d1:8b:05:87:ab:b5:b6:3f:96:07:c5:16:73:95:34:
9f:47:36:e8:79:e8:44:d1:21:30:7a:11:bd:2b:27:
63:58:77:79:14:b6:82:ba:e2:91:46:ba:fc:33:4d:
3e:30:f2:3a:55:5e:bc:6b:7b:ee:6e:0c:3f:f4:53:
4a:6b:81:85:c9:53:73:f9:54:67:97:b4:a9:d9:00:
70:f4:6a:84:67:d7:21:c1:5c:65:c2:37:2e:6d:91:
5b:aa:b7:51:77:0c:00:00:df:f9:32:66:59:27:5f:
5c:54:e5:6c:da:01:bf:e2:9a:08:43:37:61:ed:40:
c9:86:8e:bf:0e:59:4c:0b:62:93:b9:1b:36:65:3d:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:7A:4F:2C:60:F1:6D:90:01:35:FC:E6:C8:15:29:BA:14:29:79
X509v3 Authority Key Identifier:
keyid:2C:BD:76:68:8B:87:C0:39:14:AE:2A:2E:14:90:C2:F1:E9:14:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LL12aIuHwDkUriouFJDC8ekUFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/66b959-472f-4922-a226-e0f930806bdc/1/LL12aIuHwDkUriouFJDC8ekUFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3a:51:ea:18:5a:0d:c8:fb:c3:15:29:aa:64:00:0f:6d:51:
5a:d0:66:d0:37:e6:77:29:d1:89:37:3e:0e:78:b0:d4:98:28:
fe:4c:23:12:fd:6e:97:87:f4:46:97:f2:2b:18:8c:ba:4b:58:
3a:91:dd:84:0c:d6:60:51:0e:74:d8:81:ac:78:ef:ba:89:7b:
30:4c:0f:93:46:8f:11:f6:aa:3a:a7:0d:67:88:72:d2:5c:60:
ad:30:3d:f8:c8:37:01:1b:75:ac:57:3f:5b:e3:a3:ca:7f:71:
25:b1:02:af:88:04:2f:84:83:57:86:43:2c:0b:55:54:88:77:
c1:32:20:b6:6a:61:56:d3:c4:b7:15:2e:14:d2:c2:d6:99:69:
4d:55:63:a4:dc:8b:1d:f7:c4:36:4d:16:18:78:70:63:53:3b:
4d:ed:c2:4f:ed:a9:99:f6:e9:e4:ec:e5:a6:e5:6a:19:cc:3f:
19:62:a4:5e:46:12:d2:d0:6a:34:40:47:d0:42:1a:cb:e5:a8:
9c:53:7d:b2:b5:74:9d:bb:23:33:7a:22:92:63:9c:58:51:4e:
aa:4c:6c:f8:49:19:d4:ba:f1:be:0e:ef:ba:0e:4a:f8:18:8b:
88:21:a6:55:7a:0d:71:f7:f4:86:5d:af:7a:85:45:60:1f:36:
70:d8:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:18 2025 by rpki-client